Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/a47c1b38-8076-3f5c-9add-92942acecb65.roa
File:                     a47c1b38-8076-3f5c-9add-92942acecb65.roa (raw, json)
Hash identifier:          vnnoekvzPnC2NDJ0Vw04ddWAWn/LvmJi3sIwnHTR59s=
Subject key identifier:   FC:FA:99:A8:3F:4D:E3:68:E1:24:8C:D6:31:4D:12:E4:2C:D9:A0:A4
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584E147EEBA8641BAE56C1389650
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/a47c1b38-8076-3f5c-9add-92942acecb65.roa
Signing time:             Sat 06 Jun 2026 09:00:12 +0000
ROA not before:           Sat 06 Jun 2026 09:00:12 +0000
ROA not after:            Fri 04 Sep 2026 09:00:12 +0000
asID:                     12037
IP address blocks:        167.176.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:14:7e:eb:a8:64:1b:ae:56:c1:38:96:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Jun  6 09:00:12 2026 GMT
            Not After : Sep  4 09:00:12 2026 GMT
        Subject: CN=30333246-2be5-4372-a61b-175a462a9cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6e:2b:95:34:0c:79:34:51:b9:82:9e:c9:5d:
                    fb:9a:56:92:27:3c:18:fa:47:ff:6f:8e:dc:f6:44:
                    ff:3e:bd:60:f2:11:54:ed:a8:dd:96:d7:bb:ee:1d:
                    16:4b:3a:0e:3b:c5:bc:c7:a2:31:1e:24:91:5f:e6:
                    25:5f:ac:59:ce:05:90:e5:e0:2c:0f:1e:47:ec:50:
                    65:22:0e:c3:34:a9:d0:58:81:f4:3a:9e:b7:64:88:
                    8f:3b:76:8a:bc:ee:26:27:32:d5:b6:62:d9:89:16:
                    4b:08:63:db:b7:fb:c0:f9:cb:98:8a:f2:d0:0b:34:
                    62:5e:e4:1d:af:93:a3:e1:d3:cd:94:cf:2e:84:26:
                    a9:28:f2:fe:91:6b:d1:17:3d:b4:c7:26:0d:4e:2f:
                    b8:86:48:ee:d2:3e:dc:c8:5c:11:86:10:d0:c6:64:
                    4f:38:4d:38:8e:40:7f:d6:ac:af:d3:2c:be:2b:aa:
                    de:93:b1:e3:f7:60:2f:7c:e1:f6:fe:32:c0:0d:0d:
                    72:4e:cd:98:14:b2:57:9f:84:aa:c6:a2:f3:02:58:
                    ed:e7:a8:99:d4:1a:8f:d2:68:a0:d5:52:74:e3:23:
                    cf:f1:7d:04:77:70:66:62:14:95:d4:88:d2:1a:6e:
                    4f:72:65:1b:e8:a3:b4:73:c9:71:c9:18:9c:17:81:
                    fa:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FA:99:A8:3F:4D:E3:68:E1:24:8C:D6:31:4D:12:E4:2C:D9:A0:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/a47c1b38-8076-3f5c-9add-92942acecb65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:e7:47:4d:0c:53:59:f7:da:51:f1:37:ab:f6:ab:95:5f:7f:
         13:0e:f8:59:6b:55:66:0c:f6:90:85:be:39:b3:48:b1:7c:c1:
         1e:59:5b:ff:aa:87:e4:db:49:a5:43:b2:cc:20:78:2a:1e:34:
         8c:66:20:4c:a3:f7:4a:c2:a6:ae:af:4d:9d:2c:e6:18:c6:99:
         10:27:a9:d5:52:13:92:0b:0a:f8:39:9b:55:c8:24:64:ee:72:
         17:06:20:bb:89:dc:67:c7:40:bf:ca:a9:65:70:86:9c:18:23:
         c9:c3:50:27:9c:7f:44:ef:db:f5:36:2f:bc:e9:c3:d4:69:dd:
         72:f1:d8:fe:f8:26:08:6a:3e:0e:82:42:ef:32:04:d1:ae:33:
         bf:c5:35:32:47:9e:1d:37:07:f7:0f:c6:08:44:ec:32:77:2b:
         e9:b2:20:f9:40:45:5b:2e:bf:31:75:f7:69:d2:65:c5:30:90:
         ef:7a:e4:e5:a8:76:65:de:33:32:74:1e:dd:65:59:ba:bd:d9:
         b7:d4:14:80:17:2f:94:6d:94:9a:c8:53:e9:13:a2:88:4c:09:
         a8:7e:a7:5d:f3:15:de:88:cc:14:7e:bd:ba:cf:51:5c:b6:f8:
         e9:8f:06:d3:db:03:4e:b5:3d:8b:69:25:47:8d:d0:8d:8b:bc:
         e9:1b:0b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:55:01 2026 by rpki-client