Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/b7629b89-1150-32e3-8305-e4665d557986.roa
File:                     b7629b89-1150-32e3-8305-e4665d557986.roa (raw, json)
Hash identifier:          gYFjNsNQ5dEiEhgisVppvaxL0VB2EuvfoCSm/OaU2zc=
Subject key identifier:   36:51:E0:6B:07:6B:47:8E:31:00:7F:ED:8D:F5:B3:4F:06:3C:C7:A1
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584F549DAB1FAF73C37D26F8ED60
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/b7629b89-1150-32e3-8305-e4665d557986.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        167.176.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:ab:1f:af:73:c3:7d:26:f8:ed:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=01793043-f07d-45ad-992a-04a3ce483e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e1:69:e2:60:14:c6:4f:88:1c:78:0d:df:39:
                    22:b6:91:8c:83:37:0b:29:17:8d:e4:fb:f6:1c:15:
                    3d:ec:14:02:0f:df:a2:5c:31:2d:4f:0f:39:ec:31:
                    0b:d5:27:ec:2a:1b:ca:1b:13:4d:fb:d3:07:84:44:
                    3e:84:b7:25:67:3d:5f:86:85:aa:0f:56:39:ba:4a:
                    95:bc:5f:b6:1c:18:a4:d1:ed:cc:31:3c:fb:c8:fb:
                    5b:d6:2d:04:99:57:4e:e3:4c:25:e1:27:ce:f7:71:
                    00:6c:75:94:5c:63:93:f7:59:5f:5c:0c:e6:50:c8:
                    56:62:6a:2e:11:81:90:a1:58:36:0b:7b:5b:82:4c:
                    a7:a3:72:e9:60:3c:89:ad:7f:de:17:00:f0:91:c3:
                    7d:ae:63:48:18:69:1f:d1:7e:c0:20:6c:c3:78:59:
                    d7:96:35:d5:4d:a7:81:db:61:59:de:b9:6c:fc:26:
                    bb:44:a8:b7:1c:50:73:ec:2f:4d:87:72:f0:35:b0:
                    53:6b:82:f5:21:0b:ad:3a:05:7f:bc:d5:fb:64:37:
                    9a:b5:b9:28:e2:3a:c2:3f:e2:a8:67:fb:1a:fc:a6:
                    52:76:77:01:24:48:21:ab:f2:97:f8:9b:fd:42:84:
                    05:51:1d:54:62:b5:6d:60:a8:c1:c4:c1:8b:7d:cb:
                    71:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:51:E0:6B:07:6B:47:8E:31:00:7F:ED:8D:F5:B3:4F:06:3C:C7:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/b7629b89-1150-32e3-8305-e4665d557986.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:71:01:84:b4:6e:8e:fd:0a:71:83:2d:31:2f:06:f3:e4:11:
         20:55:5c:b7:41:d1:1d:46:ab:49:65:a3:1f:bc:ad:4d:ad:f2:
         36:16:85:9f:2a:bd:54:de:26:cb:89:00:f6:e7:50:8a:d2:f3:
         30:c4:4e:63:55:2f:cb:c9:e8:aa:85:da:86:2c:05:b4:82:7a:
         19:69:de:17:70:d3:d4:23:4c:d7:68:a4:4b:07:e2:ed:62:e8:
         75:0b:2e:17:62:f3:0d:e0:bd:5b:f7:b7:6a:5c:5f:82:31:ac:
         a4:c7:5c:84:82:e4:48:e3:12:a4:e8:96:ab:5c:6f:3a:b6:6a:
         8d:b1:66:41:4f:54:ab:82:4b:77:16:61:9d:4a:34:34:41:91:
         9c:45:82:de:40:e7:a9:c2:51:9f:64:00:c1:5c:57:78:cd:2e:
         2d:be:97:76:f8:54:d2:1f:67:a2:2e:2b:6d:82:54:35:54:6e:
         a1:cd:0e:69:1b:2f:79:99:f9:5e:28:b8:f1:52:3a:d2:83:4e:
         86:d7:0e:5f:26:20:57:33:e2:35:ab:de:9d:46:e9:94:8c:00:
         18:0f:66:01:fe:c0:2d:64:9a:8b:f3:1c:20:18:57:b9:74:01:
         8d:70:10:db:77:e7:8d:4f:87:18:82:07:96:52:48:18:0d:ae:
         5f:8f:e0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:59:11 2026 by rpki-client