Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2212b82e-48ef-39d3-bc69-7f64c6197522.roa
File:                     2212b82e-48ef-39d3-bc69-7f64c6197522.roa (raw, json)
Hash identifier:          N+8y9cN88RqoJNvuA2HBCd2UTO1R4uqdS8sKi70fjNM=
Subject key identifier:   29:F5:56:C9:FA:54:E8:71:1B:40:57:2E:51:5B:30:62:E5:71:30:43
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584DC400554821C83AA61AAA5140
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2212b82e-48ef-39d3-bc69-7f64c6197522.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     202
IP address blocks:        170.30.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:55:48:21:c8:3a:a6:1a:aa:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=958642e1-14dd-4cad-a92d-6310cf1b43e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1a:ba:7c:f3:cf:2d:a3:84:b1:7e:2a:63:34:
                    f0:2e:24:99:1a:01:69:65:5f:54:e1:30:9b:c6:e7:
                    b7:75:36:e2:a4:53:30:46:09:98:37:9c:29:33:29:
                    06:6b:22:5f:5a:80:0a:24:b8:f1:47:c5:33:fd:95:
                    04:b7:cd:b8:98:ec:1b:84:ef:f0:ad:10:e6:cb:5c:
                    cf:eb:4e:6a:41:c3:b7:a4:a8:4f:67:48:71:42:73:
                    cc:52:29:44:5b:2e:48:ae:d5:ad:f1:04:40:17:d4:
                    af:2e:73:69:31:1e:0c:1d:84:1a:63:fb:83:33:d1:
                    8b:83:51:96:4a:18:ea:0d:f1:8e:9b:be:9a:53:86:
                    9a:a1:c8:47:c6:cb:1a:38:4e:2e:9c:65:26:3a:44:
                    c2:28:38:18:37:18:6a:db:7c:c0:1f:1b:fa:e8:72:
                    88:3b:ec:1e:bb:b0:84:f0:d1:99:88:54:9c:0b:fb:
                    00:54:1d:d0:25:39:5f:90:70:44:79:48:42:ba:10:
                    f8:f0:04:ff:84:f8:6a:d1:ff:6a:13:53:94:cb:d2:
                    7b:1d:97:e9:b3:ac:fe:f0:2e:90:8a:db:b0:8b:e6:
                    5c:f7:c4:f1:e2:43:8f:ec:45:a6:29:df:58:8e:cd:
                    95:a5:e1:69:3e:0e:5d:ab:8e:26:5b:a1:e7:46:20:
                    c9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F5:56:C9:FA:54:E8:71:1B:40:57:2E:51:5B:30:62:E5:71:30:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2212b82e-48ef-39d3-bc69-7f64c6197522.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.30.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:28:71:13:09:d5:38:2c:47:58:31:d5:a5:64:66:f2:5f:22:
         2e:76:05:83:4f:77:fb:15:c2:fb:2e:6d:9a:b2:66:f9:eb:aa:
         e4:d2:15:d1:d7:7b:6c:07:e3:d8:9d:f8:be:77:7f:2c:62:b7:
         2b:dd:f6:e9:bc:f3:f3:3c:e5:78:86:93:64:01:e0:a5:9a:a3:
         31:63:a1:5d:e7:a5:91:a2:54:e8:28:8c:c5:03:2f:b4:1c:dd:
         df:0a:7f:aa:75:f5:e5:47:78:5b:0c:85:7f:9f:0c:24:f3:09:
         48:ce:69:40:b7:8a:30:a1:3e:e9:ca:8f:21:fb:f8:0c:07:ea:
         5b:98:0d:23:6b:b2:7a:b4:fa:6a:41:22:58:16:f9:b8:1b:6e:
         b1:91:7c:0f:50:8c:9f:64:80:06:7c:d3:bf:83:92:a4:96:a1:
         a1:d3:70:ea:b4:16:3f:1f:17:7c:a2:34:41:29:b5:5f:f8:b8:
         73:93:bf:3a:59:1f:96:b5:e4:78:3f:32:59:14:2d:66:a9:4e:
         94:9a:84:35:4d:6f:c0:69:df:46:1a:bc:da:42:61:cc:0c:b1:
         a2:3b:39:77:f7:1a:01:d4:25:dd:bf:94:a9:71:0d:81:eb:79:
         f8:92:c7:be:17:41:ee:34:58:db:90:87:e1:54:78:da:f8:7b:
         40:4c:af:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:50:20 2026 by rpki-client