Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/50b5163f-f802-31df-bdc9-4ab7a58b569f.roa
File:                     50b5163f-f802-31df-bdc9-4ab7a58b569f.roa (raw, json)
Hash identifier:          ZoDc0TLMzfhB9Bj7lFK0ILqnS79LxsW80Gvu00yYFGc=
Subject key identifier:   94:89:96:59:D1:FC:33:7C:87:9E:49:61:FB:61:90:E2:CC:F5:78:DF
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584E104ED70DAAEF91A86E2DEDC1
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/50b5163f-f802-31df-bdc9-4ab7a58b569f.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        167.176.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:d7:0d:aa:ef:91:a8:6e:2d:ed:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=f91e3031-7abb-4c7c-ac79-c57364d188f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8e:e4:85:f7:50:24:78:c9:d4:9c:ef:20:75:
                    c7:72:89:cf:69:5e:ab:b8:ab:a4:b9:31:9d:c5:5f:
                    b3:69:54:19:3a:98:9b:6a:dc:26:06:7a:3e:40:e6:
                    58:a6:d8:e8:b0:cd:8b:b4:d6:36:da:43:06:ae:ff:
                    04:b9:0d:35:c6:f6:71:e6:0e:a8:1e:13:49:6a:4e:
                    68:b7:09:3a:13:e2:9c:54:9c:f6:bb:eb:f5:25:93:
                    3f:16:e4:77:b0:74:b4:8a:92:7a:80:93:85:41:32:
                    55:89:3c:5f:a2:94:79:33:f1:c2:d1:c5:43:3e:96:
                    03:b2:e7:8c:3d:2c:18:09:44:cd:5f:c8:2c:66:9b:
                    a2:9b:41:d7:e9:8c:b5:b7:e5:8f:7a:43:27:68:10:
                    b6:a5:2e:02:70:d6:e0:f1:9c:59:13:16:d2:47:d5:
                    f9:8c:c7:0d:9a:21:bf:c7:d3:fd:34:9f:ff:68:b9:
                    fd:60:79:8e:ea:9f:19:e0:dc:df:84:d6:e9:5a:83:
                    5a:d0:e9:e5:74:4a:dd:49:4d:55:42:61:bf:f2:32:
                    63:a1:8d:de:e8:d2:a3:bc:05:c5:6f:9d:6f:81:17:
                    53:21:e3:aa:91:be:b3:7a:a0:db:70:8c:3a:0e:36:
                    8c:34:a6:78:d9:5a:2d:4f:c8:fe:8f:9e:16:8f:1e:
                    76:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:89:96:59:D1:FC:33:7C:87:9E:49:61:FB:61:90:E2:CC:F5:78:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/50b5163f-f802-31df-bdc9-4ab7a58b569f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:4a:bd:39:21:6f:e5:b0:a2:26:67:49:ff:04:4b:19:78:d0:
         e4:78:d2:c7:b4:a5:4f:5a:5e:de:15:be:01:66:f8:60:e4:67:
         f0:55:df:d3:f6:18:f8:c7:f0:85:76:05:9c:36:b7:80:e1:06:
         58:10:8b:5e:8e:5c:8f:18:e7:ce:b7:b3:86:21:bf:cd:9c:2a:
         17:bd:1e:7b:36:00:2d:28:c7:56:31:8b:6b:6b:bf:7f:d7:6b:
         29:b8:3a:4a:9e:b9:d6:b8:f9:5d:a1:6e:25:ad:62:65:f6:a7:
         6f:eb:69:a2:40:07:21:cd:cc:8b:fe:57:d7:8f:95:58:8c:e9:
         b0:fa:c3:cd:51:6e:76:06:3f:e0:85:97:d6:b0:2d:90:ed:d4:
         4b:ec:dc:13:76:ec:4a:f9:1c:a4:71:85:96:2c:20:3e:3c:ab:
         1c:b5:e7:f9:81:6c:57:eb:2e:5d:7b:4c:f4:5e:d4:91:77:37:
         c0:d3:0d:87:05:a2:3f:a2:18:a8:94:58:ac:15:f7:da:df:c7:
         ae:f2:1b:e1:96:bd:67:ed:fd:7b:ea:24:2d:50:02:9a:5a:37:
         d2:d2:bb:71:fa:6c:50:77:97:1d:3b:cc:17:40:7b:b7:35:dd:
         f2:56:2b:33:90:05:f1:df:7e:95:57:32:22:d2:8a:6f:25:a4:
         d8:3b:93:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:39:54 2026 by rpki-client