Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2153d3a6-ecc9-349e-a08d-595348d99222.roa
File:                     2153d3a6-ecc9-349e-a08d-595348d99222.roa (raw, json)
Hash identifier:          RJyzoPA5vZOSrEHE1n5Pmabga15nczC0GqzcsBFlza8=
Subject key identifier:   2A:40:95:75:CF:C0:83:5F:8C:4D:34:35:39:B6:B1:FD:AA:BC:88:7E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584F46A7E5604D1F37CD3A748B6C
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2153d3a6-ecc9-349e-a08d-595348d99222.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     202
IP address blocks:        170.30.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:e5:60:4d:1f:37:cd:3a:74:8b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=47df0ac6-cb18-42b8-adfe-d4360518db2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:60:08:7c:a2:1a:90:d4:4e:ca:1c:4e:c4:3f:
                    4b:8f:1e:3f:ba:e7:ea:12:23:46:81:6f:31:b3:d2:
                    03:43:6b:da:c1:9f:1e:6a:6e:61:c5:df:59:86:e7:
                    c0:c1:0a:6c:5a:fd:55:db:b6:ad:27:7f:7f:1a:95:
                    47:cc:e1:56:75:68:07:95:6e:bf:82:c4:9b:bf:42:
                    aa:2a:a3:4e:6a:75:85:19:b5:4e:89:06:af:da:41:
                    03:26:a7:7d:f6:08:5c:5b:fc:50:f8:e1:e4:6a:49:
                    d3:04:7d:e7:21:67:99:81:5a:38:94:34:b2:a0:c3:
                    c0:d0:2f:51:ba:a8:9b:98:cf:e2:d3:a5:ab:9e:dd:
                    1e:fb:46:4f:6b:f0:24:40:d1:3f:8f:6d:62:38:bf:
                    db:b9:5f:4e:99:bd:de:92:2c:12:ed:52:cf:60:bd:
                    b8:bf:7f:dc:fc:d6:d6:6b:fb:9f:c0:31:04:eb:56:
                    0e:8c:9d:a6:59:2d:c9:e5:11:b5:48:ee:1a:79:ac:
                    a5:83:aa:d1:13:69:2c:52:f9:31:15:66:9f:e7:c6:
                    99:13:36:a2:20:d7:1b:eb:66:43:3d:a6:46:52:53:
                    51:d6:42:a6:e9:69:dc:fa:98:cf:12:f5:e7:61:45:
                    31:c5:24:23:81:71:84:28:eb:f9:af:d9:93:bf:a7:
                    d9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:40:95:75:CF:C0:83:5F:8C:4D:34:35:39:B6:B1:FD:AA:BC:88:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2153d3a6-ecc9-349e-a08d-595348d99222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.30.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:75:7b:18:9c:64:c0:41:3a:69:c9:1f:63:1c:79:ab:90:f9:
         31:f8:4e:ef:18:ec:8e:66:30:f1:72:79:cd:b3:6e:56:b5:94:
         26:28:5c:ee:ea:5d:0e:6e:b9:c1:25:e8:b4:b8:16:47:6d:ee:
         b2:ca:bb:8b:9f:9d:1e:94:59:2d:5a:93:80:17:ad:f0:8f:7f:
         e0:18:6b:af:ad:1a:67:43:99:3c:30:82:63:e5:bb:cd:00:0d:
         9b:72:39:7f:ce:7f:94:7a:52:8e:02:73:79:b2:1e:30:32:51:
         21:b5:b9:91:15:db:30:57:4c:cd:7e:53:50:9b:c4:cb:f2:d9:
         4b:e2:db:86:41:a6:42:ee:0d:d1:d5:4f:44:d7:bd:71:ad:5c:
         23:31:42:63:8a:2a:e3:2e:ad:46:9e:97:c2:62:93:58:e9:6d:
         f9:6e:09:c1:d8:1c:e5:89:66:b7:1a:22:94:13:90:da:68:a1:
         56:16:1c:3c:b6:ad:b3:0a:14:5a:1c:b1:4e:9c:f5:eb:6d:d5:
         2e:81:f5:03:a6:03:47:07:aa:4a:04:07:eb:17:5c:7b:d1:d9:
         8c:82:cd:06:ed:e4:8f:89:94:b1:3e:a8:95:35:da:6f:63:3f:
         50:d6:57:42:fe:4a:be:00:33:36:cf:4e:1b:1a:5a:8f:67:4b:
         e7:31:5a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:06:27 2026 by rpki-client