Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/307b584c-1081-36f3-b51a-7a63765ebc3e.roa
File:                     307b584c-1081-36f3-b51a-7a63765ebc3e.roa (raw, json)
Hash identifier:          GXjGxIReYZbMLpyYkHwhZ8MO5clUn/+pznZoVBgueVA=
Subject key identifier:   3E:26:C4:45:7A:A0:CD:20:25:7C:6B:4B:FC:E6:B5:A7:35:96:BE:EA
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584D0D42763F2DB0180BED0FAA00
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/307b584c-1081-36f3-b51a-7a63765ebc3e.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     14793
IP address blocks:        76.164.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:76:3f:2d:b0:18:0b:ed:0f:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=6c3f7508-7ca3-47e0-b075-802b4eb673f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:40:ee:f7:77:38:ae:b8:65:d0:5b:8e:12:7a:
                    ce:c2:20:96:99:4c:84:28:6f:1f:3f:c8:27:a7:75:
                    d3:06:49:fc:df:d2:4e:65:ce:a7:d7:45:12:7c:7b:
                    e2:a4:4a:3c:be:d4:7e:d6:90:e4:06:64:eb:f5:85:
                    71:ea:f1:99:b9:19:76:3e:be:4c:e5:2b:19:b0:51:
                    5b:d7:d4:6a:bc:93:85:be:07:64:5f:34:d6:9c:64:
                    59:09:c1:a7:09:c4:35:2d:a2:b2:e1:d8:f4:96:6a:
                    ac:58:7e:d0:05:f6:b6:6c:84:5c:bd:64:1d:6f:3c:
                    0e:0f:01:0f:43:db:c4:0c:19:5c:5f:42:3a:82:4c:
                    20:b2:cb:04:bb:5d:38:b1:b6:dd:db:67:68:f4:5d:
                    92:9f:50:45:d0:0a:67:6c:ce:fd:99:e9:0b:17:69:
                    66:4a:61:c6:82:f6:cb:f3:91:42:5c:19:96:60:86:
                    df:d0:33:5d:a6:f4:52:50:92:d0:e0:29:5f:52:8b:
                    01:9d:f0:61:c2:bd:5c:4f:1c:0d:fc:db:71:9d:7c:
                    98:ce:bb:94:18:ec:06:4b:10:87:b9:3c:45:1f:34:
                    30:eb:7a:c8:d9:d2:09:2e:b0:3f:00:7b:27:7d:56:
                    c5:12:50:26:f5:c2:7f:7c:92:81:8e:39:d0:bf:e1:
                    5c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:26:C4:45:7A:A0:CD:20:25:7C:6B:4B:FC:E6:B5:A7:35:96:BE:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/307b584c-1081-36f3-b51a-7a63765ebc3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:c2:25:05:bc:21:61:79:9d:15:88:ac:5f:f4:71:a4:dc:db:
         16:b0:99:98:24:38:41:98:b3:24:04:48:cf:44:58:80:72:fa:
         a5:b6:57:75:d0:cf:cb:3e:f5:c1:80:85:dd:ce:01:57:8c:ea:
         b3:e4:c8:fd:b8:70:a3:f0:31:50:fb:71:2b:65:ba:08:22:da:
         14:82:94:3c:5e:f3:9f:3d:fb:f2:82:09:0a:a4:d5:17:79:f6:
         7b:3b:c0:c7:2e:57:62:76:f4:fd:9c:42:23:af:52:5e:13:1d:
         cf:e1:f5:cd:e4:21:d2:0b:49:36:be:33:f3:58:97:ae:e4:2c:
         7b:11:e0:68:59:40:87:5c:70:78:77:39:57:c5:f9:14:09:96:
         c3:08:69:7a:4b:e5:6b:12:3a:97:e1:12:88:3a:66:70:b1:94:
         02:19:3f:62:e3:80:81:96:3c:8f:5a:7f:fc:12:ab:75:8c:ac:
         f9:41:a7:c8:3a:1d:3d:4c:ee:ce:b9:3e:92:87:c4:a0:73:20:
         22:05:4e:fa:ad:4a:22:e3:c7:8b:d6:7d:d6:c5:a8:8d:36:d3:
         f0:00:4e:46:0a:66:9e:cd:7a:fa:e7:b9:b4:f6:4a:19:67:4a:
         dd:b6:2b:3c:f8:e9:c1:e6:48:bd:68:c2:bc:82:3d:ab:aa:d1:
         c6:6e:5b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:34:14 2026 by rpki-client