Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/d4cef2d3-b7ee-3c2a-96ed-648ac580e7fa.roa
File:                     d4cef2d3-b7ee-3c2a-96ed-648ac580e7fa.roa (raw, json)
Hash identifier:          V42jFgentAEwLvO/JarhtGy4v7WdPtuxndsTZmt/c3M=
Subject key identifier:   7A:ED:DA:EC:3B:0A:14:EA:DC:52:A6:ED:1C:0A:4E:18:52:FB:B2:7F
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584EB2B1A62C8BB8841C53459E00
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/d4cef2d3-b7ee-3c2a-96ed-648ac580e7fa.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     396982
IP address blocks:        167.176.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:a6:2c:8b:b8:84:1c:53:45:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=491db2fa-da4c-453f-9084-9488492ad4f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7c:dd:fc:30:4b:09:6f:47:2d:d0:5c:c3:49:
                    26:79:c0:61:cb:a2:be:ef:97:a7:28:cc:88:1f:c9:
                    91:f5:ef:51:4b:45:7b:6e:db:84:d4:6c:7b:1c:ef:
                    fc:79:a4:3f:26:0f:7e:3d:86:b6:7f:27:48:1b:62:
                    53:b8:cd:30:1d:ec:e8:99:53:28:0c:f8:fc:73:5d:
                    be:72:9c:69:44:ab:fa:15:88:f7:0e:b0:a2:2a:03:
                    b1:32:f7:c3:14:a9:c4:32:fc:e5:2e:a4:dc:88:6d:
                    85:6b:76:62:33:85:8c:ff:c2:74:8b:32:0f:61:ce:
                    b2:d3:29:ce:b4:0d:eb:91:9b:3c:52:4b:f2:8f:6c:
                    9e:27:a1:a6:db:85:9f:5e:e0:86:dc:a3:c9:02:e8:
                    2d:f6:fe:ef:0d:29:d8:69:00:23:16:59:11:20:e2:
                    1f:d9:37:85:22:d8:ec:87:2a:9f:53:38:38:d3:4e:
                    30:06:f4:e6:6c:49:85:4c:09:1c:b2:c6:e3:93:fa:
                    1f:d1:9f:13:9e:20:48:ff:76:4f:f5:ab:b1:b6:8f:
                    98:bd:0f:24:84:60:fb:d1:4e:43:48:80:ba:a9:85:
                    79:b5:87:25:fb:a7:16:17:25:58:40:e5:49:cd:3f:
                    d0:03:1d:39:a2:c4:a2:21:78:e8:9a:79:50:ed:77:
                    ae:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:ED:DA:EC:3B:0A:14:EA:DC:52:A6:ED:1C:0A:4E:18:52:FB:B2:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/d4cef2d3-b7ee-3c2a-96ed-648ac580e7fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:eb:15:ad:31:13:6a:52:c3:d3:43:e6:c1:ee:e8:ec:dd:43:
         d3:f6:95:40:66:d0:94:0f:4e:39:96:ef:1f:12:dc:b0:d8:76:
         b7:6d:71:b5:4d:e0:b7:0e:f5:63:18:4a:01:89:5e:0d:5e:50:
         78:b9:bc:7d:6d:1b:8c:7f:3e:52:3b:94:49:8b:bf:98:0e:43:
         e6:27:36:05:69:1b:ef:70:0f:99:36:75:88:b3:57:33:57:32:
         01:60:cb:f3:0c:df:27:48:8c:fa:c1:52:df:40:a5:fa:8f:43:
         98:0c:fb:30:28:31:58:eb:84:fa:0e:69:95:9d:62:e9:0d:a1:
         3c:e3:27:d8:2a:6b:04:77:90:c2:fa:58:5c:d6:3e:b1:b2:04:
         08:50:44:44:34:8b:b4:d8:85:a7:ad:7b:4b:50:e4:c1:f4:3e:
         e2:f9:7f:4e:ae:4c:2d:d2:e0:96:1a:ef:ef:86:9f:fd:76:2b:
         f8:d6:54:54:00:db:60:72:0d:f6:33:88:22:e2:63:8c:51:ae:
         53:6b:c4:91:19:dc:2d:3b:58:28:0c:ef:54:0e:1d:7f:13:02:
         71:4f:9f:9c:7b:12:45:d0:01:02:4f:a8:cc:33:49:87:63:db:
         ec:4e:ff:9c:2c:b8:b8:ae:4e:a9:52:ce:6f:04:c8:b6:a9:33:
         b4:4f:0f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:09:47 2026 by rpki-client