Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/d1d0a378-c9a7-3f91-905a-8a509e351b00.roa
File:                     d1d0a378-c9a7-3f91-905a-8a509e351b00.roa (raw, json)
Hash identifier:          wQfwxOw0rJ9wyqVhYYjzE7Afpo+rc3fg6nPs23mGjjc=
Subject key identifier:   DD:66:8D:4F:B6:74:89:72:E1:CB:A9:DE:81:FB:3F:DD:9F:0D:55:B5
Certificate issuer:       /CN=9f4a0908-708d-490b-9f22-60855d3d69b3
Certificate serial:       010D0C9F4328584F4974758DF83B0C55CC824BA0
Authority key identifier: 4B:A1:AF:02:F6:57:F1:AC:8C:2A:41:4E:2F:85:84:70:50:DA:81:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/d1d0a378-c9a7-3f91-905a-8a509e351b00.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        167.234.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:75:8d:f8:3b:0c:55:cc:82:4b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f4a0908-708d-490b-9f22-60855d3d69b3
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ebfaabd1-f0b7-40c0-8088-ce304868a400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:42:84:9f:a8:77:d8:11:26:0a:8c:7d:3e:49:
                    e6:cf:34:d9:9a:05:c5:1e:95:5f:1d:a7:8f:51:31:
                    02:1f:51:42:ba:06:93:28:9d:0a:5a:57:7e:fb:f6:
                    fd:cf:23:fc:3b:8a:cf:01:a3:d8:43:d8:e3:b6:cd:
                    06:f5:db:ff:d3:6b:46:4b:75:2f:eb:cc:b7:a6:ce:
                    f8:3d:9a:ae:5d:eb:12:4b:33:b4:75:05:a2:ef:a1:
                    3b:b6:89:71:bd:82:cc:22:b6:ae:ae:38:26:ab:ba:
                    5a:db:52:18:2e:66:28:7b:3a:f5:f6:8e:80:bb:3b:
                    03:63:9e:c3:15:d9:f4:87:31:ee:0c:b1:3a:72:af:
                    14:61:89:cd:25:6c:89:31:46:fc:5a:c5:27:46:5f:
                    2f:18:30:39:b4:3e:8a:d3:70:44:d4:fc:99:29:b3:
                    ea:b2:29:62:19:7e:0b:d0:00:2f:6c:3d:a0:8e:0d:
                    31:7c:11:bb:4f:2e:a1:6b:c9:c9:6b:36:d4:f3:42:
                    f3:95:89:db:02:13:57:df:aa:cb:3d:98:29:8c:e8:
                    81:40:a1:d8:d8:3d:ca:60:be:7d:3c:55:9a:60:56:
                    36:45:98:56:e7:db:8b:ee:79:de:96:74:4f:1f:d3:
                    e8:91:ea:fa:34:ad:1a:1f:fc:2f:03:6e:37:b8:71:
                    1b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:66:8D:4F:B6:74:89:72:E1:CB:A9:DE:81:FB:3F:DD:9F:0D:55:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/d1d0a378-c9a7-3f91-905a-8a509e351b00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.crl

            X509v3 Authority Key Identifier:
                keyid:4B:A1:AF:02:F6:57:F1:AC:8C:2A:41:4E:2F:85:84:70:50:DA:81:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.234.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:f1:33:db:b1:6a:95:40:5b:44:56:52:a6:48:25:8b:51:af:
         be:70:e2:d3:0b:74:c1:c2:32:2e:e9:3f:d6:33:dc:e3:c5:58:
         9c:bc:fa:28:77:bf:62:b4:f7:03:9c:b5:8f:b9:b1:b7:fb:ad:
         ab:24:33:f9:cf:79:37:c2:9c:84:b7:72:1a:3c:53:df:aa:8f:
         c9:76:9a:fb:09:f6:8a:5c:9f:bf:aa:82:23:13:49:9b:c6:cc:
         c5:26:b4:2c:bf:8e:57:fc:d7:2b:18:60:09:69:74:3a:71:0d:
         b2:93:4e:53:ab:2c:3c:7d:60:b0:d6:7b:d2:95:8f:d1:3c:a7:
         a9:fd:18:4b:06:2b:9c:56:58:6b:2e:70:1c:a3:16:77:71:52:
         b1:9c:40:f1:c4:95:19:a1:5a:6c:e2:5a:f5:ad:6a:26:fc:6d:
         26:48:fe:39:ec:e2:d3:ed:2a:02:13:35:72:e4:c1:1e:a8:b5:
         ef:ed:0f:3a:52:0e:4a:df:e0:c7:b9:0f:02:16:21:01:56:b1:
         7c:d5:fb:7c:39:50:0e:ae:e5:96:0f:25:10:4a:06:8e:73:05:
         56:8f:fa:fc:3a:d7:6e:a5:a3:4a:c3:6f:db:19:8c:3b:91:e0:
         e3:3f:b3:fe:f1:a6:7b:67:34:fb:52:dd:5d:66:4c:ba:f5:90:
         33:5a:2f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:32:19 2026 by rpki-client