Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/d4cef2d3-b7ee-3c2a-96ed-648ac580e7fa.roa
File:                     d4cef2d3-b7ee-3c2a-96ed-648ac580e7fa.roa (raw, json)
Hash identifier:          2BduyNFNJLB2Xea8K14+AU8eW1RG9jE/XEpfzljLzyk=
Subject key identifier:   AB:33:3B:3E:EF:2D:69:AE:25:D4:B6:EF:D0:5E:73:54:3C:77:03:B3
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584D300A21D9554E2876C7C71080
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/d4cef2d3-b7ee-3c2a-96ed-648ac580e7fa.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        167.176.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:21:d9:55:4e:28:76:c7:c7:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=a9e0eca2-3d66-4fe8-bbd9-6985e418a47f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ec:21:a7:e7:b6:9c:20:c0:98:d9:19:16:e1:
                    64:e3:03:d7:65:df:2f:c0:ec:7f:61:35:b6:36:6a:
                    6a:97:ad:65:47:05:11:e0:d7:a4:f1:db:8e:e2:d2:
                    c1:4c:17:ea:b5:51:8c:fd:16:2a:fd:81:95:b6:36:
                    f9:0c:83:ff:32:da:36:62:66:0e:82:e3:76:47:e5:
                    52:b0:4d:4c:76:4c:a9:a0:88:fe:d8:fe:0c:56:de:
                    9d:5e:c1:b3:95:03:15:0b:79:ba:f1:09:6d:a7:60:
                    82:8e:03:84:59:a5:e3:60:be:a8:09:81:29:16:2f:
                    29:07:b3:85:75:ac:81:85:4c:f2:cc:1c:06:63:c0:
                    9b:1e:2a:3a:85:cb:e6:6f:54:cd:64:76:6e:cd:b9:
                    47:ab:8d:1b:01:de:89:e1:ea:3d:2a:65:78:c2:6d:
                    aa:21:b1:94:65:5f:8e:97:5e:6f:03:c7:62:d0:e6:
                    8a:88:69:49:45:3e:7b:15:8d:b0:f8:2f:eb:f4:96:
                    bb:84:d7:dd:fe:cb:59:ba:95:59:a0:e3:0a:36:59:
                    0d:a8:68:4e:b8:64:fe:70:eb:b9:ef:c5:19:bb:ab:
                    36:a6:3f:41:34:63:ea:f1:6a:29:f0:4d:54:15:36:
                    da:ab:57:f5:f0:e5:23:fb:76:f4:2a:eb:21:3d:66:
                    0a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:33:3B:3E:EF:2D:69:AE:25:D4:B6:EF:D0:5E:73:54:3C:77:03:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/d4cef2d3-b7ee-3c2a-96ed-648ac580e7fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:bb:65:37:da:12:28:aa:1e:04:bc:27:d9:51:1c:fb:1a:ab:
         6a:44:cb:23:17:f7:b7:e8:7a:7c:ad:65:ba:0e:f8:b3:15:db:
         8f:5d:c6:02:56:3e:81:f3:01:8c:26:72:7e:85:4f:5b:9d:2c:
         f0:22:da:1a:d9:a4:9b:7d:bd:66:9b:e5:63:9a:61:df:97:65:
         49:73:f5:86:78:e9:83:51:84:58:24:86:2b:83:04:5b:f9:63:
         0a:a2:87:63:d1:15:26:a6:ad:18:37:57:03:0c:0b:db:0b:56:
         40:ef:29:32:2e:f8:fe:6a:3c:0b:cd:0b:1a:86:13:ec:35:4d:
         a8:6f:5a:fb:eb:b9:38:88:3e:08:7e:df:c3:5d:92:2c:9b:08:
         54:2b:8e:0a:95:ac:4d:ae:5f:47:54:91:eb:a6:b8:8e:ec:da:
         f4:4a:5f:a1:2e:27:62:0e:e6:f9:8f:96:39:47:c4:0c:6f:d4:
         93:04:98:73:3b:a0:ac:83:1c:ff:1c:be:8f:e1:98:f9:1d:88:
         c4:74:85:7c:f4:2d:96:bd:26:0f:12:6a:33:cc:e0:94:8d:f2:
         ae:bc:b5:e4:dd:2b:f6:29:e7:e2:ee:c4:da:11:8f:7a:3c:17:
         4d:81:85:23:b1:55:99:63:9c:cf:82:39:74:46:28:18:9b:de:
         1f:78:72:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:13:50 2026 by rpki-client