Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/9a988aa2-af46-3b1b-ab85-f5b5c11170ab.roa
File:                     9a988aa2-af46-3b1b-ab85-f5b5c11170ab.roa (raw, json)
Hash identifier:          pbza+/2wJh/IpAvE7voKNNfFyPeUaLnB/GhngncdC78=
Subject key identifier:   86:A5:3C:D7:2A:FB:D4:27:E9:DA:B3:CE:11:8E:72:99:8D:0D:32:A7
Certificate issuer:       /CN=eb36756e-e433-4732-a707-a9fa13965624
Certificate serial:       010D0C9F4328584E5E79F6998CADBF694424DC98
Authority key identifier: 88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/9a988aa2-af46-3b1b-ab85-f5b5c11170ab.roa
Signing time:             Thu 02 Jul 2026 21:00:12 +0000
ROA not before:           Thu 02 Jul 2026 21:00:12 +0000
ROA not after:            Wed 30 Sep 2026 21:00:12 +0000
asID:                     11101
IP address blocks:        167.171.0.0/16 maxlen: 16
                          167.171.0.0/24 maxlen: 24
                          167.171.1.0/24 maxlen: 24
                          167.171.2.0/24 maxlen: 24
                          167.171.3.0/24 maxlen: 24
                          167.171.4.0/24 maxlen: 24
                          167.171.5.0/24 maxlen: 24
                          167.171.6.0/24 maxlen: 24
                          167.171.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:79:f6:99:8c:ad:bf:69:44:24:dc:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb36756e-e433-4732-a707-a9fa13965624
        Validity
            Not Before: Jul  2 21:00:12 2026 GMT
            Not After : Sep 30 21:00:12 2026 GMT
        Subject: CN=c03ee4aa-5d92-492e-8ecf-7984b2af6a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:35:a5:93:a6:6b:d0:43:9d:17:6c:2c:d0:13:
                    7d:42:89:d1:a5:e9:02:04:c9:0d:3f:b6:87:41:0d:
                    46:1c:bd:56:e7:54:0c:b9:3c:aa:83:cf:aa:2f:19:
                    7f:79:4e:92:d3:7e:03:00:d9:f2:b4:f6:5a:03:b6:
                    fe:91:ed:1c:69:c3:b2:75:06:54:42:b5:fb:25:3c:
                    b7:e6:cb:c0:ef:a5:4a:20:dc:98:a5:ee:52:fa:3d:
                    74:f9:a7:43:c3:2d:4a:7b:59:ca:26:3c:b6:fd:d1:
                    dc:3c:27:38:59:ed:df:80:18:e6:78:7f:c2:ed:f7:
                    ce:a9:d1:64:49:9d:70:49:a4:94:5d:46:3a:50:b9:
                    8b:99:94:17:62:e3:d1:4f:1c:57:58:6c:24:0d:55:
                    52:dc:7b:8a:0e:b7:a3:4b:d8:77:c0:be:e6:9c:01:
                    45:11:80:d3:b2:ac:8a:b9:3e:6d:23:e7:f2:ce:d1:
                    c2:08:ab:b8:84:ec:41:95:d8:77:2d:0b:b4:68:ca:
                    21:7f:d6:b1:c3:6b:41:95:f2:7a:c7:b0:71:5c:84:
                    1a:e2:bd:77:b7:e8:e2:2f:18:bd:cf:c9:ab:72:b1:
                    99:eb:8d:5e:3c:3b:d1:e7:f0:d3:8d:d2:be:7c:62:
                    51:d6:ab:45:ac:04:30:3f:1f:4a:de:0b:b4:75:11:
                    94:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A5:3C:D7:2A:FB:D4:27:E9:DA:B3:CE:11:8E:72:99:8D:0D:32:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/9a988aa2-af46-3b1b-ab85-f5b5c11170ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl

            X509v3 Authority Key Identifier:
                keyid:88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.171.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ef:cb:cf:42:62:c1:be:3a:8f:c3:0f:2d:59:12:90:b5:36:
         4a:f4:98:05:2f:38:d3:81:11:79:75:76:28:d6:35:20:22:c2:
         41:80:32:87:0b:2b:07:89:3d:d1:4e:0a:b3:cf:85:06:e3:8b:
         0d:bc:ae:65:25:23:08:3d:03:01:88:87:e4:a8:38:c7:cd:ed:
         47:4f:39:7f:54:48:e5:44:74:4a:88:5c:a4:4f:9d:c2:18:ad:
         75:1f:12:35:0d:7a:ca:64:0b:9b:bc:ae:4b:0f:11:95:cf:86:
         85:f9:f9:c9:ee:b9:02:e7:7c:3a:13:82:7b:29:ce:c7:f4:5e:
         59:4c:53:b0:9c:57:43:2d:6d:8e:75:fe:e6:39:b9:fa:c2:f6:
         bf:e3:70:2a:38:13:d6:24:ce:fa:3d:76:02:fa:54:30:08:33:
         90:6c:92:ed:7f:de:89:80:18:6d:d7:cf:cf:c4:b5:66:35:e0:
         8e:65:9d:9b:76:4d:45:ed:61:60:43:26:49:59:b3:71:0d:39:
         7c:1a:fe:fd:35:ef:29:c9:fd:b1:1b:ff:1d:61:a5:ff:5b:d0:
         e5:71:fd:78:ec:b1:0f:49:b4:0f:bc:d6:a5:85:b9:ec:ae:71:
         80:6e:42:fb:8c:eb:b1:2b:1c:53:b7:b5:d6:72:6d:0d:15:7e:
         3f:f1:92:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:34:27 2026 by rpki-client