Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/4f6c9841-daca-33f4-8055-41aac88c6d76.roa
File:                     4f6c9841-daca-33f4-8055-41aac88c6d76.roa (raw, json)
Hash identifier:          epcJS8xIrlD87ocaC60awUdGHAWeE07y78wPqksyGxc=
Subject key identifier:   2C:AA:A7:73:2A:95:6E:EB:DA:D6:9A:A5:D3:9C:64:41:0D:90:48:66
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584EF2E78409BB14433874366480
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/4f6c9841-daca-33f4-8055-41aac88c6d76.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     16696
IP address blocks:        167.104.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:84:09:bb:14:43:38:74:36:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=25e80178-05c9-4d32-8b3c-6ebd141291e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:92:08:8d:7e:28:30:49:5b:55:55:6d:5b:97:
                    fa:8e:5e:2e:de:a0:37:b6:28:f0:ab:03:2f:11:be:
                    77:63:86:c6:29:a1:7b:1f:17:54:8f:0b:d3:e1:fe:
                    c4:08:ca:be:f5:11:7b:9e:98:cd:94:49:7f:20:85:
                    da:e1:ec:95:d9:9f:9f:74:24:7a:6c:26:26:62:03:
                    de:27:45:ef:bb:b1:9c:22:43:4d:a7:68:33:11:e0:
                    ed:3c:f5:4a:70:ea:85:82:96:47:73:d2:13:63:33:
                    ac:2f:7f:ea:88:e3:46:91:63:47:d8:63:00:55:c5:
                    52:89:e7:c3:d5:d6:ae:88:be:20:30:96:5d:dd:89:
                    c6:96:38:84:a1:f6:d7:1a:04:eb:79:e4:3d:51:e4:
                    7a:6a:c2:9c:90:1a:1a:46:50:0c:a6:99:b0:9b:ba:
                    50:04:7d:b8:76:08:40:5f:fc:c9:fc:d7:f3:99:d1:
                    3b:72:a2:ec:49:1f:45:77:85:28:f8:71:96:3a:5f:
                    66:9c:e5:8a:ce:24:b3:c5:29:4d:53:0d:e6:2e:d4:
                    48:df:7e:20:71:31:1b:95:47:d1:a0:af:03:82:a3:
                    a2:e0:3e:13:c1:ef:e2:46:08:68:5e:da:fb:d3:e3:
                    8b:83:a5:0d:71:cb:c3:55:60:ae:04:c8:dc:3b:7d:
                    e9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AA:A7:73:2A:95:6E:EB:DA:D6:9A:A5:D3:9C:64:41:0D:90:48:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/4f6c9841-daca-33f4-8055-41aac88c6d76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.104.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:9b:28:fd:15:c0:4b:93:f2:52:93:65:b5:55:f3:02:f5:34:
         0c:95:69:b5:ce:95:72:dd:52:f0:47:e3:f4:2b:fb:47:7d:cc:
         4b:bd:d3:c6:2a:76:02:17:a1:b7:88:3c:59:18:d3:1e:8f:9c:
         38:51:a4:df:bf:91:da:5b:76:60:64:45:be:9f:2f:3d:15:ec:
         e3:29:6c:6a:5e:9c:7b:6c:13:ea:e6:07:61:07:6e:25:85:e7:
         73:6b:c6:d4:33:9f:ab:31:b6:4c:98:8c:81:08:34:3e:99:6b:
         f7:9d:2b:20:ee:91:20:f3:f5:4e:0a:4b:30:89:81:1b:5a:1e:
         1c:b6:b1:15:fb:39:64:b7:22:bd:d6:ba:e5:03:c4:c5:95:6c:
         ac:b5:ce:7d:52:52:c4:4a:06:ad:da:49:0e:7d:5a:f6:dd:71:
         ed:78:de:1d:d9:f3:db:5b:bd:af:95:8e:43:35:38:67:65:83:
         e1:f7:7d:81:46:ff:19:d5:2b:29:58:1a:e4:c9:9d:87:a8:83:
         00:ff:fe:83:41:e9:7c:e3:9c:e4:a8:64:57:aa:6c:7f:81:3c:
         73:08:6f:78:c1:11:fd:48:ba:ae:67:55:bd:aa:00:d7:27:b7:
         a2:d1:85:02:2e:d8:10:37:c1:37:2c:4f:a1:67:1b:7b:32:f8:
         e8:e7:7d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:58:36 2026 by rpki-client