Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1e7c432f-0fc1-3e4b-9fc9-031d2b984510.roa
File:                     1e7c432f-0fc1-3e4b-9fc9-031d2b984510.roa (raw, json)
Hash identifier:          nBmjUVWbgcHNFAQLALy0atH5qSrX/XkNCZjvagaMmVs=
Subject key identifier:   13:62:EA:25:A5:17:0A:46:75:8B:67:1B:EC:5A:50:9C:F5:79:8B:10
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D1B1A0EC531ABD615446BB600
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1e7c432f-0fc1-3e4b-9fc9-031d2b984510.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     203
IP address blocks:        168.87.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:0e:c5:31:ab:d6:15:44:6b:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=ace521d3-3d46-4e12-b96c-592e5a7d9a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:49:19:95:3b:b8:cc:1f:d6:32:19:b1:ad:35:
                    d1:08:7d:5a:b2:48:ed:90:a8:78:53:fa:e1:54:72:
                    d9:58:1f:9e:dd:01:7c:91:b8:48:9e:5c:d2:ca:6a:
                    bb:e3:0b:cf:78:13:d0:c2:e9:50:85:43:c5:68:d8:
                    df:f1:b0:87:08:92:71:bb:a1:57:9b:28:2e:db:8e:
                    f1:05:01:c4:85:fa:c3:51:71:a6:98:5e:ef:98:3b:
                    33:61:8a:0e:9e:c1:d9:94:85:58:03:99:50:f3:e5:
                    0a:5e:80:11:ca:67:14:bf:2d:7b:d0:cb:9d:4d:74:
                    ec:44:5c:d8:95:bf:f4:54:4b:25:fa:1f:15:d1:40:
                    2d:f3:88:62:c4:e2:ce:1b:3e:a1:0d:1b:cf:44:52:
                    2e:9b:66:91:54:e9:d4:ab:d8:1f:d7:d4:50:45:dd:
                    4b:6e:15:35:0b:60:c0:77:ee:ae:76:a6:3c:c4:17:
                    ab:2e:67:6b:16:64:82:eb:53:bc:8e:91:ee:16:80:
                    91:22:f3:0c:e9:ae:e5:e5:cc:f7:f2:0d:89:5d:c5:
                    d0:40:18:9f:16:dc:4e:68:4e:e9:b3:c0:ad:3a:03:
                    e4:d5:1e:53:23:84:44:99:71:c4:b6:96:5e:57:41:
                    86:e0:c0:50:57:82:d6:70:9c:a2:13:55:82:a3:af:
                    bc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:62:EA:25:A5:17:0A:46:75:8B:67:1B:EC:5A:50:9C:F5:79:8B:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1e7c432f-0fc1-3e4b-9fc9-031d2b984510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:e0:3d:57:78:b6:ee:6a:8f:20:17:e3:5e:95:ac:67:e8:93:
         25:bd:58:3e:2c:b2:74:2f:ba:5e:f8:58:1d:c2:8b:19:7c:23:
         41:26:37:8e:80:aa:92:8c:72:fc:29:b2:5c:f4:bc:7b:bc:b3:
         16:55:c7:86:b7:37:98:ac:4e:71:eb:5e:7d:5a:c9:17:ee:6f:
         57:b6:39:0e:a4:df:49:84:fb:dd:0f:2d:a6:6a:21:6c:6e:52:
         8a:92:a3:17:a6:80:a1:a2:32:6e:8c:69:81:1d:5f:e1:0b:3c:
         0c:7b:6a:5c:f4:6c:c4:db:2b:15:ac:8e:70:75:8e:46:b3:04:
         3e:d7:94:49:74:b2:73:f3:99:24:85:33:ea:52:3b:b1:b4:45:
         36:40:e6:9d:d1:24:55:b6:4d:5c:84:2f:96:0a:9d:20:7a:1e:
         da:61:b7:0d:be:6a:b7:48:da:78:b5:fe:eb:b7:f5:6a:b8:f0:
         61:57:c5:7e:43:10:c9:b8:00:d8:02:0c:96:fa:13:e8:c8:c8:
         f2:dd:5c:21:96:2b:db:47:41:89:f6:26:52:9f:28:73:e0:02:
         f1:62:50:14:cf:59:97:0d:47:e5:5a:5e:16:a8:0b:3e:10:ec:
         24:cf:27:c8:8a:07:5a:78:e7:7c:56:24:be:9b:d3:da:2c:d7:
         16:d3:57:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:52:32 2026 by rpki-client