Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/ea439a14-422e-33b1-afb4-3e9be6e86777.roa
File:                     ea439a14-422e-33b1-afb4-3e9be6e86777.roa (raw, json)
Hash identifier:          KcL7TtB57z8CclOnqZLuJGtsJtukkoXd6TWspiaMaBQ=
Subject key identifier:   A7:42:5C:22:66:6C:F3:CA:4D:36:72:5E:7B:BA:50:B9:C7:7A:1B:F4
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584E104F2DD7B2DFF588C02517C0
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/ea439a14-422e-33b1-afb4-3e9be6e86777.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        167.176.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:2d:d7:b2:df:f5:88:c0:25:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=92a9246e-e618-4a22-9b01-5f448c7699e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:02:af:f6:dc:70:36:d4:76:72:61:b7:35:07:
                    ac:30:49:5c:ae:a8:3b:ee:98:f6:38:12:69:b4:f9:
                    4f:0f:b5:b8:b7:b3:d7:bd:0f:53:89:92:c8:86:ce:
                    8f:5a:c6:0f:54:9d:69:c3:bb:fb:f0:39:bc:7b:9f:
                    d8:17:18:78:31:25:b8:0e:65:f7:41:4a:44:40:d0:
                    22:53:c1:66:3b:a7:4e:b7:cd:90:30:e0:5e:24:c8:
                    37:65:63:63:0f:96:94:62:71:9d:d6:3f:87:20:45:
                    f7:d6:c5:4d:cd:e4:6d:1c:e8:bf:07:aa:9f:27:b9:
                    53:75:9e:4d:d1:a5:c9:0d:6f:9f:f2:ff:ec:4c:eb:
                    78:47:6d:61:42:5e:3b:fa:82:eb:7e:ba:74:14:c3:
                    a4:8c:af:b8:99:9c:a0:c5:de:4d:1f:7c:1c:38:19:
                    42:f6:85:08:6c:1e:4a:ee:81:c7:ac:75:6d:e6:15:
                    e2:6e:63:5b:ce:b6:94:1a:48:4d:ba:8d:79:22:c4:
                    0d:0a:c5:15:c7:5c:b1:ca:58:46:9a:95:67:f8:17:
                    20:6b:be:df:66:ec:f3:63:8b:85:cb:e7:41:ae:32:
                    e4:4f:30:47:d2:ad:50:b1:b3:1f:9e:a9:62:f0:71:
                    72:33:fe:d8:d9:38:98:21:4d:17:51:78:62:73:35:
                    c0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:42:5C:22:66:6C:F3:CA:4D:36:72:5E:7B:BA:50:B9:C7:7A:1B:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/ea439a14-422e-33b1-afb4-3e9be6e86777.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:82:e6:6d:cc:25:a0:04:1d:a2:28:b5:a5:c8:fc:3a:7e:df:
         74:91:3c:36:f8:26:71:53:52:1a:47:d9:6b:18:84:b1:15:db:
         f1:ce:24:9a:42:86:14:6a:1c:82:d9:e7:1d:65:96:92:0b:ba:
         ca:cb:7f:07:c2:44:9b:8d:80:47:98:77:3d:71:57:13:ea:b9:
         65:b7:48:54:13:c4:05:da:8b:74:17:4b:d4:39:1e:ed:c0:ee:
         46:94:4d:dc:7b:51:64:94:d8:e1:ce:e0:5f:f6:2f:e4:12:7c:
         f9:e2:80:77:5f:34:9b:cf:aa:58:b6:4e:f1:6a:66:b6:87:d8:
         97:3f:5b:4c:a0:5f:a0:dc:da:81:04:95:fe:4f:e3:c5:e4:a6:
         02:9c:5e:6c:06:ae:f4:83:69:fe:95:72:3a:38:f9:5d:89:06:
         6f:e8:d2:43:c8:40:c7:f8:c4:6e:5d:62:28:c5:28:26:a6:6c:
         0c:45:31:1d:e0:7d:85:9b:b9:2c:c1:e9:2a:63:f8:a6:71:85:
         ec:8b:b3:9f:c0:43:1e:91:22:14:9d:f5:6a:c4:a7:1d:87:7e:
         19:a7:ea:b6:75:bb:90:8b:5e:9b:0b:0b:97:89:e3:e0:fc:85:
         e7:82:1a:9a:6f:0e:70:5c:0a:1f:a9:db:85:be:67:be:09:8b:
         31:db:31:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:39:52 2026 by rpki-client