Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cb2c90ae-ec42-3e2b-86fc-9309787cf195.roa
File:                     cb2c90ae-ec42-3e2b-86fc-9309787cf195.roa (raw, json)
Hash identifier:          AZXhVq9530fHyjU/1GwrCAAg1gKpYunkz7QM/9PlJGo=
Subject key identifier:   3C:85:BF:2C:8C:39:36:43:79:D8:EF:57:74:9B:64:E4:0E:9D:62:66
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584F093CD74A5D99098260DCB140
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cb2c90ae-ec42-3e2b-86fc-9309787cf195.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     14061
IP address blocks:        167.71.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:d7:4a:5d:99:09:82:60:dc:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=23fdc20f-52ca-4ab9-8371-06f7c875ac7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6d:ad:7a:ca:1c:44:c7:f1:41:7a:fb:d6:f7:
                    8b:5c:3b:d2:9e:dc:da:b1:4c:19:4a:cc:28:f1:38:
                    2d:56:cd:38:e0:06:89:8b:dc:71:73:e2:56:c7:c6:
                    3f:5d:ea:85:d5:7a:8f:c8:28:11:16:92:21:ac:90:
                    6b:f3:0e:be:76:f2:79:d0:58:40:a6:bf:b4:ef:ee:
                    69:69:9b:a0:63:c6:4a:24:9b:90:0a:98:f9:fe:e9:
                    ee:a5:47:9a:36:1a:ec:eb:02:a4:79:07:f4:65:85:
                    0f:3f:72:de:89:5f:31:57:f3:ea:39:15:a9:f1:8a:
                    a2:61:c3:f5:4c:ef:a2:32:d6:6a:40:3a:e5:c3:f2:
                    5a:f6:44:28:f8:f3:44:24:8f:e9:6b:d7:99:e2:00:
                    4a:5e:94:fd:09:05:ef:bf:23:c3:66:9b:fc:da:06:
                    a9:78:a0:c1:28:8f:ba:3f:18:ee:7f:2e:35:d3:94:
                    eb:5b:97:bc:4c:7c:5c:82:6d:ad:59:1f:e5:be:65:
                    ca:0a:d8:43:f5:42:b8:19:b8:00:ee:8c:58:be:47:
                    3b:2e:f8:4f:49:da:a6:3e:31:7d:05:d3:e3:e5:13:
                    3f:5e:0f:53:ba:39:9f:9f:48:19:fb:38:fa:63:32:
                    05:d2:d0:f0:67:5a:80:6d:7a:a4:20:d7:20:14:46:
                    15:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:85:BF:2C:8C:39:36:43:79:D8:EF:57:74:9B:64:E4:0E:9D:62:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cb2c90ae-ec42-3e2b-86fc-9309787cf195.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.71.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:62:be:37:24:8f:6c:e9:59:b7:c5:1e:66:46:ad:bd:f7:1a:
         52:4e:46:50:67:08:3b:e4:3e:03:80:8a:0d:59:69:36:df:4b:
         d9:75:8a:0e:b6:a5:86:5d:41:a4:2f:76:c6:2c:93:bf:ea:3b:
         dd:41:69:a7:7e:06:9c:02:a8:bb:21:b0:b4:91:20:28:ef:31:
         3d:5c:f2:0b:18:35:f8:97:59:81:27:fe:84:b1:ba:43:4b:d0:
         c1:f3:3a:f7:10:2d:87:af:e4:82:12:fe:51:76:a4:d0:45:00:
         dc:60:29:69:3b:06:65:42:5e:49:26:b4:20:21:b7:ce:4f:6f:
         8b:cf:ad:12:cf:66:45:31:6a:d1:f0:6a:e7:08:ce:61:3c:cd:
         6a:1f:b9:58:6a:b4:25:b4:8d:f9:ec:10:03:fc:a3:03:a5:fc:
         c8:78:0d:74:9f:00:e9:b5:b1:a1:1f:62:7e:fd:e3:d0:81:02:
         23:5e:d7:f8:40:fc:97:69:7e:4c:8e:c1:2d:c8:ab:33:ad:51:
         e5:e1:8a:6f:63:93:37:2c:cb:16:5c:90:43:6f:40:2a:fb:c7:
         e0:f6:90:24:ea:93:19:2f:c2:60:7b:39:d8:49:b8:b2:93:7f:
         7b:52:a0:56:d1:44:60:3b:f9:4b:de:88:85:3c:6a:78:05:b1:
         4c:88:7b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:12:54 2026 by rpki-client