Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/98cdc532-d434-3d0a-b6d1-140130e6240b.roa
File:                     98cdc532-d434-3d0a-b6d1-140130e6240b.roa (raw, json)
Hash identifier:          5eE+GxRHDNGnlUnTE1hjkXT9UJvqlfMQtex36/7QW0g=
Subject key identifier:   16:4B:FD:EE:A8:17:AE:19:C9:9F:3A:ED:21:DA:94:0B:CF:68:BB:06
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584E104F30117594A4EF4A7D6240
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/98cdc532-d434-3d0a-b6d1-140130e6240b.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     12037
IP address blocks:        167.176.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:30:11:75:94:a4:ef:4a:7d:62:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=33150713-03c9-46dd-8b2f-4566e6a7a77d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4b:61:e6:7a:22:d9:bf:85:5b:59:75:d5:19:
                    af:41:ab:35:ef:21:a7:f2:12:20:10:8f:8f:d1:28:
                    a9:8d:ed:28:54:b2:46:2d:51:14:67:b4:99:1b:9e:
                    8e:47:8c:af:d8:ef:f8:1b:0e:f6:ee:ba:d6:65:b0:
                    5d:35:5b:ba:42:36:9b:cb:e2:e9:22:4f:95:48:30:
                    4b:59:a4:4f:4d:8e:53:0c:84:99:79:c4:bd:e8:ea:
                    c6:c5:54:95:1c:36:f3:c9:ed:3e:3f:15:fa:4c:ba:
                    32:9b:2d:34:ae:4f:f7:79:4b:2a:bd:34:cb:8b:c9:
                    de:a2:c3:77:c3:20:33:59:6a:aa:d8:1f:36:84:f5:
                    24:40:50:ea:99:fa:66:80:72:4a:28:04:12:99:9e:
                    bd:ee:34:27:db:b0:3b:f6:c3:f3:0e:ae:ea:ba:2e:
                    62:db:c0:85:e4:3d:43:6d:5e:65:04:9c:48:1f:1c:
                    9b:78:40:bc:bb:d9:65:ff:a4:47:e3:e1:9d:88:77:
                    c4:6a:f3:2c:22:51:5f:e9:fd:16:cd:0e:88:16:8b:
                    4f:32:ee:2d:39:cd:76:e1:30:6b:d2:85:9a:da:3d:
                    51:5a:76:88:09:ae:1e:81:b9:25:ef:ef:d9:51:50:
                    35:fb:0c:79:ca:62:d9:ca:ff:5b:67:c5:c0:8d:31:
                    f8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4B:FD:EE:A8:17:AE:19:C9:9F:3A:ED:21:DA:94:0B:CF:68:BB:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/98cdc532-d434-3d0a-b6d1-140130e6240b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:4c:3a:81:7f:63:32:1c:98:5e:12:c4:f6:89:78:8f:f4:14:
         3e:ec:78:12:89:a6:43:08:3d:f0:77:e3:7e:ed:80:67:cc:54:
         8b:bd:2e:cf:71:35:04:ce:0f:5e:3e:53:48:f1:df:7c:d8:53:
         34:5c:3e:c0:5a:7e:e7:28:09:88:d1:fb:02:80:d9:5a:d7:f8:
         bf:e9:8e:53:00:eb:84:af:f6:f7:12:6b:00:fa:da:77:6c:9c:
         86:81:3c:68:d7:1e:96:82:b9:b4:6e:a7:b7:a1:2f:a4:9a:c9:
         7d:33:33:2c:56:7f:5e:c1:fd:2b:f8:b7:fa:80:5d:8e:9d:5f:
         fa:dc:1d:6a:68:f5:81:b4:f4:2e:ba:e7:9f:bb:55:a7:28:34:
         52:56:98:0f:e1:87:b5:57:fb:23:18:b8:4c:43:bc:fc:32:0c:
         2f:5f:55:8b:8c:c9:47:84:bf:6d:42:05:d1:61:41:af:c5:a0:
         ee:2c:2d:6d:1a:b6:96:08:cb:e9:55:a1:81:7e:c6:25:dd:d4:
         78:bd:85:64:c9:7f:e7:b1:f3:aa:38:86:c7:e3:8e:bc:03:f4:
         e8:4a:35:33:29:04:ba:82:74:22:a0:a8:ce:b2:63:23:45:75:
         7e:23:dd:de:a6:70:f2:7c:ee:ce:6e:4c:cc:28:2d:21:2e:39:
         ae:1f:77:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:44:33 2026 by rpki-client