Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/ed600b26-3fd1-3b17-9d9c-bff3eb1e65f2.roa
File:                     ed600b26-3fd1-3b17-9d9c-bff3eb1e65f2.roa (raw, json)
Hash identifier:          PQ5yXsBI5YTkvqr6Z3XMIhEJUz2ZHnPV/muj4h3t6i8=
Subject key identifier:   37:3A:5B:71:A3:BA:2B:FA:3E:B0:70:9E:E8:D2:E7:AD:15:86:CA:3D
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584EB2B1F68F348DB949238FA8F0
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/ed600b26-3fd1-3b17-9d9c-bff3eb1e65f2.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     396982
IP address blocks:        167.176.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:f6:8f:34:8d:b9:49:23:8f:a8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=12733eab-033d-40cc-9d60-7fb2ebdff33e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:24:aa:4b:02:0d:6a:2c:7f:10:bf:d9:da:5c:
                    c8:c6:06:ca:47:b9:38:6d:d6:16:f6:b5:4d:9e:a4:
                    2c:04:9c:d6:bc:1a:dd:01:24:91:8f:c0:16:a8:ef:
                    d9:ff:6c:ba:a8:f1:d5:7d:1f:eb:73:57:13:cc:67:
                    cc:85:12:1b:21:f9:d7:29:92:d8:64:83:5d:1b:2e:
                    ff:33:22:31:a9:fc:f2:a5:2a:6c:5f:61:c9:a3:bd:
                    ce:ea:71:4b:d0:d4:46:bf:81:f9:8f:0b:3f:c0:0b:
                    c0:a7:13:cf:16:40:cf:bd:35:7a:8c:76:48:75:10:
                    38:cc:8f:3b:e5:aa:82:aa:5e:37:8a:43:26:b4:ba:
                    ea:28:5c:0c:9b:7c:05:f9:d1:25:9d:42:14:a5:c8:
                    f1:df:ea:f2:0d:b5:c8:41:d8:07:b4:36:6d:64:45:
                    d7:38:69:65:0c:37:f6:d0:cf:4c:eb:cf:43:92:a6:
                    68:8c:48:63:65:33:b9:7b:0a:1e:ca:87:d0:d5:4e:
                    88:43:c5:af:7e:d0:d8:29:95:0b:71:7e:be:8c:f1:
                    19:be:cc:60:61:d2:2f:01:7c:c9:a3:7d:46:5b:1b:
                    fb:a9:58:49:5b:4c:a5:45:3b:0c:f8:c8:83:de:de:
                    6e:cd:51:68:72:4c:4a:75:b6:cf:67:83:44:fa:af:
                    9f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3A:5B:71:A3:BA:2B:FA:3E:B0:70:9E:E8:D2:E7:AD:15:86:CA:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/ed600b26-3fd1-3b17-9d9c-bff3eb1e65f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:41:8e:4b:55:f8:92:25:dd:10:7c:ff:04:3c:b5:c1:b0:4c:
         c9:e7:6f:9c:e9:92:35:e8:f2:00:da:3b:82:46:10:9f:ff:a2:
         c7:43:39:79:68:2c:93:7c:58:76:3e:ee:37:9d:f3:eb:ab:40:
         ad:3b:f7:24:8f:c7:53:fe:e7:78:0b:d6:56:eb:7a:53:74:d5:
         ac:02:c4:56:4d:26:05:9c:15:25:89:c5:d3:ca:81:82:a8:1a:
         49:a3:b1:78:b1:69:ca:03:01:53:24:45:03:96:37:75:ce:c8:
         e0:43:53:84:ab:1b:6f:6c:fd:23:68:98:a0:39:30:6c:64:f4:
         c2:37:60:77:67:20:46:3f:ea:3b:6f:77:d8:29:8a:f3:14:85:
         ff:92:1d:a8:dc:b3:bb:d3:94:60:31:54:4f:94:b4:0c:90:05:
         d3:f9:55:da:3f:ab:16:54:64:6b:11:8b:e2:8c:4d:17:12:a9:
         a1:4b:e3:e6:c1:a9:96:f8:bb:f6:21:de:b8:b6:df:ff:e6:2c:
         d6:3e:09:e5:5a:c0:c6:68:d4:7c:45:4c:26:7b:6f:39:49:eb:
         7b:7a:12:e7:75:02:34:9f:10:61:59:50:49:38:f4:9d:7a:e7:
         09:36:ea:01:44:47:01:1f:b6:6e:2a:5a:e5:fc:fb:67:31:60:
         19:18:88:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:13:32 2026 by rpki-client