Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/ca82aee8-25b4-387a-81b3-79b16c68495e.roa
File:                     ca82aee8-25b4-387a-81b3-79b16c68495e.roa (raw, json)
Hash identifier:          iurTK/RFPgwQmXTddGDzRi8meg51SUPqReCr897lOS4=
Subject key identifier:   93:97:B4:B5:69:2A:E3:7A:7B:83:7E:A4:6C:52:7D:D7:D7:67:8E:29
Certificate issuer:       /CN=9f4a0908-708d-490b-9f22-60855d3d69b3
Certificate serial:       010D0C9F4328584EA7913EA2302CC4B5D4C1CC00
Authority key identifier: 4B:A1:AF:02:F6:57:F1:AC:8C:2A:41:4E:2F:85:84:70:50:DA:81:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/ca82aee8-25b4-387a-81b3-79b16c68495e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        167.234.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:3e:a2:30:2c:c4:b5:d4:c1:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f4a0908-708d-490b-9f22-60855d3d69b3
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=74988694-75d4-4444-9b8c-d8b7712e4667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ad:09:53:d9:49:6c:13:ba:35:05:29:9b:ee:
                    68:cf:fc:31:6b:52:1b:7a:79:c3:90:7f:a7:ec:dc:
                    1b:4d:68:72:3c:11:17:32:42:a7:f7:84:f8:70:c0:
                    c5:73:92:91:3e:0d:a0:a4:ed:49:e2:d2:96:bb:dc:
                    ea:22:3c:e1:1c:a1:3d:58:cf:35:63:75:1a:2b:11:
                    c2:df:8c:7b:0a:90:2b:1d:49:a7:07:4d:14:3d:b8:
                    d7:23:75:06:82:64:2a:4e:65:af:39:72:0e:9a:34:
                    65:41:62:fb:00:1d:50:73:aa:45:8a:5e:af:10:17:
                    6b:28:3d:69:7f:df:e0:4c:c0:e0:2f:f7:d2:ca:a1:
                    aa:d1:14:0d:e1:db:3f:c3:b7:50:14:78:e3:81:3c:
                    9b:20:0e:f2:7e:c7:6e:9c:a3:e9:fc:e9:93:be:67:
                    7e:c6:c7:e3:d2:50:9d:8b:bd:2a:e9:4b:d1:97:74:
                    1b:cd:84:a4:09:82:21:61:77:09:c6:86:ad:04:28:
                    40:c9:63:db:5d:e5:ed:7e:5f:94:af:7f:77:68:11:
                    f9:1d:0e:0b:c4:fa:78:bd:97:f8:78:f2:06:a6:ed:
                    d4:9d:d2:b3:d1:f1:b3:34:a3:ea:a3:ef:3f:61:71:
                    be:88:b4:4b:9e:b5:ff:86:aa:0a:08:87:94:e1:86:
                    80:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:97:B4:B5:69:2A:E3:7A:7B:83:7E:A4:6C:52:7D:D7:D7:67:8E:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/ca82aee8-25b4-387a-81b3-79b16c68495e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.crl

            X509v3 Authority Key Identifier:
                keyid:4B:A1:AF:02:F6:57:F1:AC:8C:2A:41:4E:2F:85:84:70:50:DA:81:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.234.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:6c:81:42:1b:a0:83:6d:a8:99:0b:17:9c:c6:36:f3:c9:72:
         68:69:d7:5f:b3:59:8d:31:79:cd:d7:34:17:ca:32:91:a5:70:
         c1:11:5b:cb:e2:53:12:18:a2:2a:35:d0:11:3c:7a:27:61:69:
         38:66:a3:c3:9d:04:7f:fe:a5:b0:72:87:71:e6:8a:28:84:1d:
         d3:38:d4:5d:ae:27:da:5b:05:99:d1:8b:9f:fb:74:b4:fd:f5:
         84:20:2b:f6:9b:3d:3f:79:c7:8f:55:d7:71:3a:f5:c1:95:1d:
         bf:c8:e7:0c:f9:9c:65:df:a7:92:ef:21:b7:1f:b5:ac:b2:7b:
         69:28:2e:ec:10:92:15:2c:5f:28:5b:43:78:38:03:fc:30:cd:
         58:aa:e7:fa:70:1d:45:75:75:ce:a1:9e:b1:52:78:0a:ca:51:
         1d:c7:cf:3e:36:d6:c7:d0:45:12:01:0f:1e:a6:bd:23:d8:dc:
         d7:41:7d:4a:97:ed:e7:3f:bf:12:d6:75:8e:f2:3e:99:ad:9b:
         77:ab:c6:74:64:13:d7:6a:7e:3e:7b:6b:45:e1:ed:9e:41:4d:
         2b:7a:be:c9:86:53:ff:b7:ab:55:3a:46:9d:d2:02:32:32:25:
         26:cc:a3:9f:5f:81:28:de:a9:7e:11:94:98:de:f6:f7:c0:61:
         dc:56:8c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:58:28 2026 by rpki-client