Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1a05c6a3-0c65-3f34-9648-8864d7b21030.roa
File:                     1a05c6a3-0c65-3f34-9648-8864d7b21030.roa (raw, json)
Hash identifier:          rGUGrUemIbMEiZbjpymAaAMjrNfei+qSfKAizV5zV4E=
Subject key identifier:   C4:82:35:3F:C4:5F:20:3A:D1:9A:C8:C4:D8:84:85:BD:40:B8:8E:25
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D1F4A24E4070AA8AF59F14F00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1a05c6a3-0c65-3f34-9648-8864d7b21030.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     203
IP address blocks:        168.87.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:24:e4:07:0a:a8:af:59:f1:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=8382f150-b32c-4cc7-8d9d-479cd07fba31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ba:b7:6f:62:c0:3a:bc:66:e1:29:3d:30:2d:
                    58:53:96:39:6c:7b:6a:74:4e:0c:3c:70:fa:e6:0f:
                    49:70:10:78:db:de:b3:3a:96:66:76:3b:e9:fa:38:
                    62:34:ab:f0:47:89:ca:bc:2a:4a:49:ab:3a:8e:8a:
                    7b:39:4e:d1:37:36:6d:f5:a8:5c:23:27:dd:b9:20:
                    80:90:78:25:b1:80:91:9a:c6:75:d2:63:09:60:9d:
                    e8:45:09:fa:b1:a8:8f:ab:48:16:05:d9:f5:05:d2:
                    23:26:69:d9:1d:fb:9b:43:fc:84:df:2d:13:6a:1a:
                    03:45:55:fe:31:98:bc:cb:16:61:65:7a:3c:1c:f3:
                    13:79:87:08:ac:6c:4a:95:59:83:54:cc:2f:10:34:
                    94:68:1a:9a:97:dc:e2:2e:57:77:b3:e2:57:46:ef:
                    ef:98:09:c3:6f:10:57:48:f9:a3:b4:ed:72:50:cb:
                    02:56:3d:c7:77:26:59:52:2c:a7:bd:54:98:ad:c2:
                    e3:15:2e:f5:4f:f4:e5:17:81:e2:db:1c:4d:d5:71:
                    8a:76:13:0c:01:b2:0c:94:f5:6b:0d:68:4f:01:78:
                    bc:d3:84:70:68:02:e4:d0:2a:38:45:87:fd:83:0b:
                    21:9e:ad:49:86:4a:43:be:23:9e:54:d1:f2:72:b4:
                    33:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:82:35:3F:C4:5F:20:3A:D1:9A:C8:C4:D8:84:85:BD:40:B8:8E:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1a05c6a3-0c65-3f34-9648-8864d7b21030.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:46:5e:fe:4d:b0:d3:8b:54:e9:7c:c2:3d:93:b4:59:be:d0:
         96:0c:ca:68:a6:75:4c:db:ed:f9:74:d0:bf:05:0b:25:db:31:
         7d:36:36:99:a4:c3:24:b1:bf:e9:7a:62:0c:4d:d9:96:f5:d9:
         24:6b:62:84:a4:a0:1a:d1:52:31:82:9f:4b:96:f2:51:cd:3a:
         62:74:db:a2:0e:ed:6a:df:aa:00:e3:e1:81:1f:aa:c4:0e:fc:
         25:d1:37:67:0c:7d:ff:c6:41:55:61:3b:1b:36:8b:3d:a9:a9:
         dc:8c:02:0e:fc:07:e6:dc:be:1a:26:82:43:f7:a7:61:5d:0c:
         81:31:20:c5:89:0d:c9:97:79:aa:ea:53:a6:3f:c0:3a:97:56:
         39:21:be:f9:a7:41:68:b2:a2:61:9a:42:27:81:43:ce:ff:83:
         8e:12:6d:a9:66:0f:77:a8:17:51:fe:b3:5e:bb:a4:0b:08:37:
         60:f7:3d:64:07:72:97:9e:c0:8d:d7:98:88:b3:79:c6:9e:3f:
         cc:b5:80:0f:67:dd:2b:f8:cf:58:39:7c:52:a5:d8:3f:e7:48:
         1a:6f:f0:c5:00:2c:56:b7:9e:6c:d6:23:cf:78:35:7a:33:96:
         97:13:d2:e1:6d:51:7f:7f:e4:16:ea:32:8e:55:da:3f:0c:59:
         71:7e:9e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:09:22 2026 by rpki-client