Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/9e3f9052-7b5f-3e95-83d1-b1311d837811.roa
File:                     9e3f9052-7b5f-3e95-83d1-b1311d837811.roa (raw, json)
Hash identifier:          3qz+Q24Gr05eXbDVfanntPK8IX5Uqu765iaZ1lU1OSw=
Subject key identifier:   50:D0:BA:98:4B:DA:BE:6E:C7:72:52:1A:EA:1A:52:ED:AF:6D:36:91
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584E104EDF1A3DE63190C7425880
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/9e3f9052-7b5f-3e95-83d1-b1311d837811.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     396982
IP address blocks:        167.176.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:df:1a:3d:e6:31:90:c7:42:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=6df7652c-69c6-4a54-8612-6a6bd5fee86f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:74:18:29:ee:c5:17:b6:18:bc:ea:4f:03:65:
                    df:6e:b8:4d:70:be:49:f7:39:77:bf:e8:c0:92:6d:
                    7c:b0:5c:49:aa:75:a4:b1:c4:af:5d:37:98:c2:2d:
                    79:ce:ac:98:84:a9:8b:13:bd:35:05:b9:81:7b:69:
                    91:4f:67:4c:fe:40:94:33:0b:a3:a8:fa:bc:f0:1a:
                    94:97:38:1d:32:b5:3c:aa:b6:11:ee:54:99:77:15:
                    c1:3c:11:16:54:db:54:6f:31:76:16:a0:7a:c2:97:
                    18:4b:e1:a7:33:39:df:9b:d2:4e:f7:ea:51:e1:51:
                    da:d2:f1:8a:72:48:6c:67:ef:0c:51:f6:80:51:74:
                    2d:80:e0:21:56:1a:1a:77:fa:72:c2:16:ba:03:cb:
                    bd:03:25:c8:a8:de:17:d8:fc:1d:90:1a:eb:8e:39:
                    18:09:12:17:07:b9:b5:63:94:e8:f8:5e:5f:7e:9c:
                    02:50:a3:26:b6:9a:eb:d0:ce:ae:f0:77:ac:0e:9c:
                    c8:8b:c0:05:03:73:29:5c:04:41:08:01:ab:37:db:
                    cb:88:e4:2c:74:68:ca:f8:bd:19:f3:3d:47:6b:b9:
                    21:f8:af:05:84:49:3c:59:cb:c9:83:e9:14:10:94:
                    ff:c2:bf:ff:13:5f:f1:d2:52:d9:02:c8:7c:2f:d3:
                    08:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D0:BA:98:4B:DA:BE:6E:C7:72:52:1A:EA:1A:52:ED:AF:6D:36:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/9e3f9052-7b5f-3e95-83d1-b1311d837811.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:e6:3e:b3:19:ca:56:5f:32:24:46:ff:55:14:92:1d:5c:73:
         7f:fc:39:2b:28:c3:ab:23:47:6c:81:e1:d7:e6:9b:4a:1c:00:
         ca:a4:5a:05:3f:e1:07:6a:54:6b:c2:14:1c:d8:ad:32:6a:62:
         b5:74:43:3f:73:a0:33:05:75:3d:0a:78:52:23:62:29:6f:34:
         4c:0d:9d:e5:ca:64:76:fc:9d:83:8c:4a:7d:2d:bc:2e:b9:e3:
         14:4b:dd:fc:c0:f3:35:69:17:bd:27:14:d6:1b:73:97:7c:a7:
         4b:40:a8:fc:70:34:35:ae:a7:29:de:4d:af:1e:f9:dc:7f:25:
         2e:aa:fc:d5:30:1a:9f:9c:66:e7:3a:cb:5f:0d:4a:3c:03:f2:
         d4:16:66:bf:8d:c4:e2:56:cb:f8:c9:92:55:5f:18:7b:7f:f9:
         9f:f9:af:02:fc:d7:37:79:de:6f:65:c8:22:ab:ed:75:1e:10:
         cd:fb:38:ec:0c:df:d2:62:a1:31:4f:42:0a:84:2c:0f:a5:e0:
         e5:b2:59:4c:9d:2f:7b:2d:49:49:17:23:ca:41:67:2a:db:a6:
         a3:e1:0a:14:fb:55:76:d2:97:b0:94:24:31:44:ef:3f:98:70:
         c9:bf:a5:2c:f4:9f:36:5b:59:1d:d1:24:6c:1c:b9:05:db:20:
         ec:b3:03:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:28:42 2026 by rpki-client