Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/070da204-b714-36a4-b828-67f11d0cc12c.roa
File:                     070da204-b714-36a4-b828-67f11d0cc12c.roa (raw, json)
Hash identifier:          Yf7AVgSV5XRI5Q0AgjQxL6Cxs1Hjf0BMphokEZTBe0o=
Subject key identifier:   84:22:41:61:6E:47:0B:8A:05:BA:E9:F1:57:44:43:42:6E:75:E1:CD
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584E104F2AE972F18DFD5E5D0F00
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/070da204-b714-36a4-b828-67f11d0cc12c.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     12037
IP address blocks:        167.176.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:2a:e9:72:f1:8d:fd:5e:5d:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=a5b30141-95ec-465a-a09e-1c6c6740a4d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:96:80:f9:03:c3:68:e2:60:c7:f8:eb:b0:57:
                    e8:e2:8d:46:b1:61:93:38:57:a4:3a:ec:1e:dd:71:
                    97:a0:d4:ef:2b:a7:0e:0e:7f:43:f3:5d:65:81:bb:
                    8a:b2:2f:b7:34:92:1a:35:f4:52:a2:6e:0b:8d:3f:
                    cf:8d:59:0b:3e:27:93:7b:95:02:37:b0:33:34:14:
                    e2:b6:08:a2:5b:7e:59:59:12:21:dd:8c:13:47:51:
                    78:6b:64:85:b3:b9:75:4c:90:43:84:28:d2:fb:1c:
                    98:40:f9:73:4a:8c:d3:8a:bf:9e:ff:44:79:99:d0:
                    76:a1:e5:1b:85:d0:ad:f0:8d:c3:2d:30:7b:a0:ff:
                    04:1a:c5:79:79:0c:0e:c0:73:f7:93:2a:3d:f9:4e:
                    d6:3a:ee:94:09:f0:e4:ca:a6:98:2e:fb:0b:6b:9f:
                    58:69:c5:bc:56:56:03:4a:5d:21:78:b9:f3:4f:81:
                    62:ec:b0:2f:5f:05:bf:de:62:95:11:7c:29:28:34:
                    f1:03:b6:ba:b5:a1:5d:6a:27:8d:c4:35:33:c9:a5:
                    45:b4:1a:94:3d:ff:21:2d:50:81:78:a3:5f:b8:8f:
                    0b:ba:fe:29:1a:57:eb:4b:86:ea:3d:3f:22:26:4a:
                    2e:3f:ac:a7:6a:9d:02:d9:9b:ee:bc:69:8d:15:f2:
                    e8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:22:41:61:6E:47:0B:8A:05:BA:E9:F1:57:44:43:42:6E:75:E1:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/070da204-b714-36a4-b828-67f11d0cc12c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:fb:b2:be:44:8a:c4:c5:db:e1:bc:1b:ae:16:89:4d:62:40:
         4f:42:5a:e2:8e:6d:da:45:92:d3:ce:0b:99:9f:8c:c3:22:a1:
         b1:6d:34:6d:7b:d2:06:3a:c4:e2:17:7e:3b:6d:ef:a0:5b:07:
         f8:f0:ee:da:ed:32:0c:e7:43:c7:33:2f:5e:33:a4:3b:f6:b4:
         d6:e4:f9:e4:c7:21:e1:72:ec:ba:96:ac:fa:6c:49:90:a8:4e:
         30:d3:10:8f:72:e1:ba:73:a1:4f:c1:76:4d:96:b0:70:95:0f:
         c5:20:6b:65:7a:ac:e4:f9:9d:92:19:a9:f7:fe:70:a7:89:8a:
         ff:92:d4:43:d5:35:58:32:7e:0a:3f:86:af:b2:33:93:ce:8a:
         a9:ea:05:29:e1:7d:91:a5:45:43:d1:57:3f:5d:05:85:60:33:
         4e:e6:4a:91:ec:d2:d4:c4:9c:30:77:e5:c2:cb:b1:2e:b6:bf:
         a1:f8:e0:7c:4e:eb:85:a0:b9:f1:47:20:cd:71:49:cc:05:5e:
         5d:54:86:93:0c:f8:96:0d:5b:e4:06:55:79:d2:0d:86:a5:2c:
         a4:ef:90:1c:bc:ac:6d:dd:0c:b8:83:87:bf:a5:04:b2:a5:e1:
         20:6e:ee:eb:d6:90:29:03:38:c0:d3:38:0e:2e:a0:cd:37:fb:
         fb:c8:dd:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTyrpcvGN/V5dDwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm
ODhhMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk
YTViMzAxNDEtOTVlYy00NjVhLWEwOWUtMWM2YzY3NDBhNGQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppaA+QPDaOJgx/jrsFfo4o1GsWGTOFekOuwe
3XGXoNTvK6cODn9D811lgbuKsi+3NJIaNfRSom4LjT/PjVkLPieTe5UCN7AzNBTi
tgiiW35ZWRIh3YwTR1F4a2SFs7l1TJBDhCjS+xyYQPlzSozTir+e/0R5mdB2oeUb
hdCt8I3DLTB7oP8EGsV5eQwOwHP3kyo9+U7WOu6UCfDkyqaYLvsLa59YacW8VlYD
Sl0heLnzT4Fi7LAvXwW/3mKVEXwpKDTxA7a6taFdaieNxDUzyaVFtBqUPf8hLVCB
eKNfuI8Luv4pGlfrS4bqPT8iJkouP6ynap0C2ZvuvGmNFfLoEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIQiQWFuRwuKBbrp8VdEQ0JudeHNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj
YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvMDcwZGEyMDQtYjcxNC0z
NmE0LWI4MjgtNjdmMTFkMGNjMTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj
YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw
Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw
Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7ABMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAH7sr5EisTF2+G8G64WiU1iQE9CWuKObdpFktPOC5mfjMMiobFtNG17
0gY6xOIXfjtt76BbB/jw7trtMgznQ8czL14zpDv2tNbk+eTHIeFy7LqWrPpsSZCo
TjDTEI9y4bpzoU/Bdk2WsHCVD8Uga2V6rOT5nZIZqff+cKeJiv+S1EPVNVgyfgo/
hq+yM5POiqnqBSnhfZGlRUPRVz9dBYVgM07mSpHs0tTEnDB35cLLsS62v6H44HxO
64WgufFHIM1xScwFXl1UhpMM+JYNW+QGVXnSDYalLKTvkBy8rG3dDLiDh7+lBLKl
4SBu7uvWkCkDOMDTOA4uoM03+/vI3aM=
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:52:44 2026 by rpki-client