Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/ed600b26-3fd1-3b17-9d9c-bff3eb1e65f2.roa
File:                     ed600b26-3fd1-3b17-9d9c-bff3eb1e65f2.roa (raw, json)
Hash identifier:          EnviA2kdNwLkw4PrpfNaGOK/QpAuGhQag+4wGKlImMU=
Subject key identifier:   36:6E:40:92:01:C5:E4:B3:BA:BD:8A:3A:91:52:18:80:CB:4E:E0:BC
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584E104F2AA74AE0C6AA0F09A2C0
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/ed600b26-3fd1-3b17-9d9c-bff3eb1e65f2.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     396982
IP address blocks:        167.176.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:2a:a7:4a:e0:c6:aa:0f:09:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=c1e975ab-d79d-43bb-a56d-3dd1a00d6293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7d:38:54:52:2f:70:37:5b:e0:b8:01:4b:5f:
                    24:4d:72:83:7d:1b:28:60:7b:b0:52:37:e6:c6:8a:
                    54:35:9e:e3:1c:ec:af:2b:de:26:50:ea:0f:de:4d:
                    88:22:e5:67:d8:e8:da:69:ea:c4:ec:f2:0d:31:88:
                    9a:7d:fc:75:36:d6:b6:cd:9d:d0:33:e1:8e:67:1b:
                    15:13:95:40:d4:bd:ec:1b:13:b8:09:77:50:f8:ba:
                    71:5b:ca:48:fa:1b:ad:23:27:6d:ab:ec:95:ae:64:
                    c5:39:fc:16:17:25:c1:13:30:e3:21:f7:6f:e6:63:
                    f9:c1:32:eb:83:a6:36:8e:84:b3:8b:7e:b4:ca:77:
                    35:e3:e5:cc:0b:a1:23:96:73:ef:0d:70:45:f0:67:
                    5f:55:82:28:01:d4:d5:0b:69:d0:b3:40:a1:1c:12:
                    a2:75:6d:ca:db:15:80:02:4e:05:8d:df:0f:35:37:
                    d0:b0:7d:5c:3c:c4:a4:54:ad:66:e9:fc:4d:c9:39:
                    81:7a:86:2f:25:4d:4b:dc:be:2b:30:67:9a:67:95:
                    37:44:c2:01:e8:39:c0:1c:db:89:c7:eb:5f:01:b6:
                    8b:b6:49:de:57:1b:00:78:b8:61:77:d4:c1:8a:11:
                    85:cf:76:ae:62:2b:e6:53:51:64:3c:a7:96:c2:b6:
                    63:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6E:40:92:01:C5:E4:B3:BA:BD:8A:3A:91:52:18:80:CB:4E:E0:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/ed600b26-3fd1-3b17-9d9c-bff3eb1e65f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:cb:dc:a2:71:7a:ff:f5:da:c4:94:4e:32:4d:8f:7c:3c:51:
         89:e8:49:1c:6f:8e:03:49:d1:22:ae:fb:a1:9f:84:d8:52:b5:
         3f:05:42:d5:8a:2d:69:bb:3a:33:8f:70:a5:ad:79:58:1d:7b:
         f1:44:1a:6f:2c:f7:13:aa:90:4c:f8:f5:2b:cf:dc:78:4c:7f:
         ff:22:a0:85:fe:5f:3b:24:ec:ab:6b:8c:0e:93:43:a4:82:f8:
         90:85:c9:06:02:ad:61:70:fc:e4:da:84:13:2b:38:21:f3:58:
         9a:f2:31:55:aa:99:bc:81:d1:f2:7a:4c:4a:9b:ee:6e:fe:29:
         31:44:87:d7:95:05:0e:b0:c2:67:51:e0:b6:a3:89:b1:e8:d7:
         18:f0:80:3c:b0:c1:2e:c4:68:eb:b5:7e:5f:1f:eb:1d:b6:5e:
         ab:93:3e:33:b3:8f:50:4a:56:f1:f8:e3:4d:3f:f8:9f:ee:d6:
         4e:77:a6:ad:63:ef:17:0d:26:4e:ea:69:d5:cb:66:9f:f7:7e:
         94:a3:38:76:43:c6:2e:52:e5:09:a5:fb:79:41:1e:ef:2c:3a:
         c4:0b:90:68:20:f6:87:bd:a0:da:e2:03:eb:44:9c:b7:0b:6c:
         9e:f5:87:fe:56:87:c4:63:b4:81:76:c0:e5:2b:08:63:21:ac:
         d6:24:a8:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTyqnSuDGqg8JosAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm
ODhhMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk
YzFlOTc1YWItZDc5ZC00M2JiLWE1NmQtM2RkMWEwMGQ2MjkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH04VFIvcDdb4LgBS18kTXKDfRsoYHuwUjfm
xopUNZ7jHOyvK94mUOoP3k2IIuVn2OjaaerE7PINMYiaffx1Nta2zZ3QM+GOZxsV
E5VA1L3sGxO4CXdQ+LpxW8pI+hutIydtq+yVrmTFOfwWFyXBEzDjIfdv5mP5wTLr
g6Y2joSzi360ync14+XMC6EjlnPvDXBF8GdfVYIoAdTVC2nQs0ChHBKidW3K2xWA
Ak4Fjd8PNTfQsH1cPMSkVK1m6fxNyTmBeoYvJU1L3L4rMGeaZ5U3RMIB6DnAHNuJ
x+tfAbaLtkneVxsAeLhhd9TBihGFz3auYivmU1FkPKeWwrZjxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDZuQJIBxeSzur2KOpFSGIDLTuC8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj
YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvZWQ2MDBiMjYtM2ZkMS0z
YjE3LTlkOWMtYmZmM2ViMWU2NWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj
YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw
Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw
Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7ByMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHnL3KJxev/12sSUTjJNj3w8UYnoSRxvjgNJ0SKu+6GfhNhStT8FQtWK
LWm7OjOPcKWteVgde/FEGm8s9xOqkEz49SvP3HhMf/8ioIX+Xzsk7KtrjA6TQ6SC
+JCFyQYCrWFw/OTahBMrOCHzWJryMVWqmbyB0fJ6TEqb7m7+KTFEh9eVBQ6wwmdR
4LajibHo1xjwgDywwS7EaOu1fl8f6x22XquTPjOzj1BKVvH4400/+J/u1k53pq1j
7xcNJk7qadXLZp/3fpSjOHZDxi5S5Qml+3lBHu8sOsQLkGgg9oe9oNriA+tEnLcL
bJ71h/5Wh8RjtIF2wOUrCGMhrNYkqKk=
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:03:04 2026 by rpki-client