Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/fc215c14-def4-3034-b5ac-0aa83e689bcd.roa
File:                     fc215c14-def4-3034-b5ac-0aa83e689bcd.roa (raw, json)
Hash identifier:          7TYPpuNHWRLMDwr+mMNiLBOHiPzymL3rnxzFE8N7xhM=
Subject key identifier:   3C:92:F0:91:48:B4:D3:B7:D1:99:B1:8D:9E:83:20:E3:CD:25:96:15
Certificate issuer:       /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
Certificate serial:       010D0C9F4328584D300A40D3BAA4675E7E67F100
Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/fc215c14-def4-3034-b5ac-0aa83e689bcd.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     394089
IP address blocks:        167.176.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:40:d3:ba:a4:67:5e:7e:67:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=6976a213-8e4e-4e83-a35d-83a7874b1622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:70:b5:db:fe:8a:3d:ea:ac:59:4b:3d:47:f4:
                    ba:f6:b2:2b:28:58:3b:04:3a:16:e6:77:39:8a:c1:
                    0c:9b:ea:be:aa:ab:04:af:a7:b6:9b:e7:5f:6d:b2:
                    3f:ca:90:0c:75:67:78:0e:82:7c:4e:2c:05:78:a1:
                    6a:11:58:0d:cf:29:a5:93:50:51:e7:fe:c3:c4:bd:
                    b4:2f:5c:16:d0:04:a0:dd:da:8e:da:ab:74:9b:08:
                    e1:85:e0:51:b6:41:29:fe:dc:44:c4:f6:fb:11:08:
                    b6:b3:f7:cf:91:44:4a:df:f7:24:2f:6e:2d:ba:6e:
                    68:3d:9b:b6:6a:bd:56:47:97:71:b4:3c:b7:5a:cf:
                    d2:c0:3e:26:73:81:d0:e1:65:4f:b8:12:3c:e2:f4:
                    83:c1:b6:53:a5:cf:ab:e4:17:b9:f9:72:62:e3:d1:
                    39:8c:49:27:ab:ec:09:6d:c9:d7:45:47:50:6d:b5:
                    78:28:3d:31:62:84:a0:0c:5a:07:62:aa:66:4e:6d:
                    38:1d:c7:35:86:f8:f4:96:76:96:f7:9f:55:ca:9b:
                    05:2a:42:da:a8:6a:e9:9a:31:b5:77:8e:ee:06:e3:
                    5b:5b:d7:61:47:ea:ad:21:bc:30:a2:df:1b:ad:c0:
                    ed:6a:dc:8b:b6:39:ec:10:6f:3b:af:67:ae:f8:00:
                    97:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:92:F0:91:48:B4:D3:B7:D1:99:B1:8D:9E:83:20:E3:CD:25:96:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/fc215c14-def4-3034-b5ac-0aa83e689bcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl

            X509v3 Authority Key Identifier:
                keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.176.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:a0:97:23:b9:33:09:9c:05:09:ca:5d:20:e6:bf:c5:42:12:
         18:de:2d:56:68:6e:55:29:7c:c3:a5:21:6c:9f:73:37:37:16:
         72:1f:2a:ef:bc:2b:a5:98:55:a7:a7:8b:ca:cb:13:f1:69:88:
         02:ce:3d:70:3e:78:c5:ae:62:c5:55:94:b1:e2:62:f8:3c:f0:
         2e:26:cc:9b:7a:2f:6d:92:ca:e8:cc:7e:4c:3a:02:bb:3d:44:
         ff:d8:d0:5d:af:9e:63:53:46:7c:09:99:36:f6:74:7b:c1:6a:
         1a:5b:67:fe:3b:76:04:c8:39:bc:02:94:11:56:d0:6d:8f:d0:
         7f:36:38:0d:3a:0e:4b:45:bf:14:47:91:2d:ce:c6:7c:dc:6f:
         96:9f:c1:47:e7:31:f6:9d:59:39:1d:06:75:82:bd:f6:a7:ce:
         83:f0:34:8b:7f:2b:7f:c5:75:68:b1:24:20:19:5f:64:1d:d7:
         53:f5:54:7e:92:03:1b:59:f5:a4:67:ef:47:89:da:85:0e:83:
         9f:c7:77:3c:c2:dd:97:a4:88:f8:15:0f:c5:83:be:ec:a3:fd:
         bc:93:de:f1:a9:d1:7c:00:c1:f7:11:a3:82:13:78:ca:e0:74:
         29:23:3d:d9:f1:ce:b9:b7:89:e9:b7:b8:9f:38:f8:5e:86:0f:
         b6:35:ea:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:32:21 2026 by rpki-client