Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/d4cef2d3-b7ee-3c2a-96ed-648ac580e7fa.roa
File:                     d4cef2d3-b7ee-3c2a-96ed-648ac580e7fa.roa (raw, json)
Hash identifier:          VZ5kuUisYTDOcfjHTTvGPiH86hI5KRclLAaTTd5zyA8=
Subject key identifier:   60:D1:C9:79:C5:91:90:52:67:76:84:66:D5:01:54:2C:3B:38:18:19
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584E104ED4AF187E7274B2244900
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/d4cef2d3-b7ee-3c2a-96ed-648ac580e7fa.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     396982
IP address blocks:        167.176.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:d4:af:18:7e:72:74:b2:24:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=d5a3f334-344c-482b-9c92-68fb0b2151db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b4:e4:89:c6:8f:ae:f5:e2:89:ac:c6:c0:40:
                    99:75:46:af:72:9f:71:a5:d1:1a:e5:32:c4:0b:24:
                    e8:28:c3:12:6b:a4:86:d6:dc:00:d2:15:7e:b0:52:
                    3c:80:18:d0:e1:74:09:83:9c:3f:46:d4:13:80:6a:
                    d6:b0:d8:7d:11:52:fe:66:2b:a9:13:4d:48:d5:e4:
                    0d:9e:2a:ad:00:28:74:eb:a6:17:5c:a7:f5:76:15:
                    f6:73:23:96:85:b3:95:39:0c:d9:f6:61:ae:7e:0e:
                    24:34:81:12:5f:14:7a:4e:81:4d:3f:8d:2a:62:62:
                    51:6a:47:e7:d0:de:b5:5b:48:52:ac:7c:84:1e:f2:
                    39:d8:42:11:8e:2f:74:93:40:66:f5:4b:46:16:0a:
                    59:46:44:e7:30:68:02:95:97:7e:c0:dd:b7:07:9a:
                    d1:65:46:f5:cc:6e:e1:30:6e:27:22:7c:f8:a3:ee:
                    10:27:93:2a:1d:24:23:2e:70:61:fa:30:f5:49:66:
                    c7:da:a0:ab:72:13:71:89:0f:66:73:0b:51:e8:a2:
                    83:ed:63:4d:72:8d:0a:20:82:6d:41:08:85:36:6d:
                    51:38:0f:e8:99:12:e1:ba:c7:04:f5:78:c5:4b:21:
                    43:f2:8e:fa:9d:25:0b:f5:50:5e:05:f8:69:0d:21:
                    9a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D1:C9:79:C5:91:90:52:67:76:84:66:D5:01:54:2C:3B:38:18:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/d4cef2d3-b7ee-3c2a-96ed-648ac580e7fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ee:ec:ad:b8:7f:76:26:24:54:5e:b0:91:3e:f0:48:6a:99:
         c5:31:f9:4e:29:72:da:8c:48:76:2d:d9:6e:31:d7:1a:e3:aa:
         bc:b9:d7:29:3f:56:46:46:53:98:04:75:0d:ef:8f:2b:06:19:
         20:eb:f6:54:e0:a7:ca:d1:9b:b4:e0:79:3d:35:2f:38:43:07:
         c0:cd:82:7f:af:ca:9d:d5:e8:56:0f:70:44:4e:5a:50:f0:2c:
         6c:ba:29:93:82:46:ae:d6:95:cf:99:5e:4c:0a:5c:2e:0b:af:
         d3:5c:50:e8:6d:fc:fd:42:b8:fa:09:50:b2:a8:ac:58:df:b3:
         24:43:9e:5f:db:6d:f8:e1:e7:ff:49:5d:4d:1f:f0:1d:22:96:
         0a:ec:73:34:f3:f7:0a:44:65:a2:50:95:ac:81:94:e2:61:f0:
         a2:8e:ca:09:bd:27:1b:b8:b9:42:e3:ab:63:7d:5d:2a:54:89:
         53:9a:16:f7:49:30:d7:be:03:0d:c5:4a:1e:17:3a:f6:9a:cd:
         8c:3e:da:cc:37:7d:44:d5:9d:6e:2a:e6:cd:be:1d:90:3a:f1:
         b1:37:36:7a:8e:64:c4:64:b1:3f:a1:b6:33:ed:35:15:92:b2:
         a5:99:cc:c8:a9:05:64:c2:23:1f:13:29:9a:6d:27:78:92:11:
         2c:43:f9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:14:27 2026 by rpki-client