Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/fc215c14-def4-3034-b5ac-0aa83e689bcd.roa
File:                     fc215c14-def4-3034-b5ac-0aa83e689bcd.roa (raw, json)
Hash identifier:          ubR/K1YvapBVh1KmHcQ19JysJhmeXvmJdZEZpzqqX4k=
Subject key identifier:   52:E3:D2:6B:16:10:3C:1B:F2:81:5C:75:BC:89:F3:67:A1:B0:D3:3B
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584F549DAA782E1646EDBC0C0920
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/fc215c14-def4-3034-b5ac-0aa83e689bcd.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     394089
IP address blocks:        167.176.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:aa:78:2e:16:46:ed:bc:0c:09:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=16801e32-a414-47b8-90d1-1f07b4e33cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:26:74:cf:c7:08:d6:1e:53:8a:68:97:86:b2:
                    02:d4:4f:f8:30:75:a0:f2:9f:c2:d8:81:07:97:ec:
                    bf:a9:7f:a2:f0:a9:5e:f0:1f:96:65:f1:ab:7f:7e:
                    50:0c:60:c0:7d:00:44:e7:e4:69:3f:4e:b4:0d:5f:
                    bf:c4:1a:6b:ad:9c:44:c9:60:1f:26:3e:41:37:06:
                    29:5f:18:fa:0c:ee:e5:36:fe:4b:c0:5c:ec:3b:89:
                    52:e2:7b:c5:34:15:cd:a7:54:6c:a0:b5:ed:b0:56:
                    dc:bb:da:9b:5f:55:40:0d:ca:ac:11:4b:d6:90:4d:
                    2e:a7:7e:1a:72:5f:bf:7e:99:d7:9e:d5:44:5f:ec:
                    e3:e6:f6:50:9c:cd:7c:f1:b9:73:ff:1f:f3:07:a7:
                    87:d5:ab:84:e2:1d:5f:eb:d1:b3:5d:05:05:41:a7:
                    6c:85:53:07:4e:cd:aa:a4:c3:92:d3:8f:2a:81:af:
                    eb:13:74:1a:00:c3:76:13:30:c7:45:e3:f4:78:6b:
                    77:6d:c4:b4:48:f1:90:24:b3:35:1f:54:05:0d:dc:
                    74:85:d7:b2:36:81:5c:62:e8:1e:63:2d:55:5c:23:
                    2c:19:c8:87:0f:8e:9a:10:15:72:6d:11:2f:30:e6:
                    a8:83:2f:ef:22:64:24:14:7e:3e:92:d0:46:81:1e:
                    8a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E3:D2:6B:16:10:3C:1B:F2:81:5C:75:BC:89:F3:67:A1:B0:D3:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/fc215c14-def4-3034-b5ac-0aa83e689bcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:5a:21:fd:9b:a3:06:a0:09:46:11:a9:a8:44:e9:ee:53:14:
         fc:44:22:ea:2d:7e:90:bf:e2:6e:89:de:11:48:cb:27:b6:64:
         11:cd:c6:2b:88:88:35:49:1f:01:c2:a2:a4:c2:22:2e:af:75:
         23:8d:c7:c7:3b:03:dd:bc:b6:58:c4:c4:50:6f:31:04:69:16:
         97:13:78:92:a8:ec:49:5c:52:e2:11:c8:4a:6e:be:91:86:8e:
         2f:57:1e:09:66:f1:54:60:0c:a7:db:3b:9d:a1:47:f6:11:52:
         54:b8:3b:56:79:e5:78:ae:bb:c5:c1:3c:85:46:1c:aa:85:4f:
         73:ef:bc:9d:1d:46:9c:2d:db:05:79:2d:28:cc:0c:43:59:49:
         a0:16:e9:c2:31:3a:08:e3:13:79:be:7f:45:65:27:de:87:7e:
         6e:83:07:bd:fa:d2:54:bb:57:51:f7:06:94:c0:30:07:9e:30:
         81:c3:68:ca:8c:bf:98:a1:e0:b1:b1:84:73:b7:9d:9b:83:88:
         88:94:aa:c8:24:94:5b:0e:ba:ce:60:a6:4a:15:0e:e1:f0:bb:
         7c:a8:61:be:e2:bd:a5:a0:6f:70:13:a9:f0:2a:a5:23:d8:b5:
         df:4f:b4:f5:56:22:9b:28:8f:f2:f9:a4:3e:27:f0:53:6b:51:
         42:80:67:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:22:34 2026 by rpki-client