Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2b8b37d4-6402-313e-8eec-4b3538fb036e.roa
File:                     2b8b37d4-6402-313e-8eec-4b3538fb036e.roa (raw, json)
Hash identifier:          wwwAcnJ8xZ5dgkE280m+jtuELUWKCWTfyonOsHTW3e4=
Subject key identifier:   38:9B:52:EE:EC:F5:25:2F:25:51:EB:69:7E:D3:E6:32:46:34:8B:7B
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D0D4261B5E00DA110D58F2B80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2b8b37d4-6402-313e-8eec-4b3538fb036e.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     3360
IP address blocks:        168.87.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:61:b5:e0:0d:a1:10:d5:8f:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=446e67ca-e0dd-4f68-b524-8bbd9e38707d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:41:3e:19:24:0b:9b:f4:8c:2d:71:df:64:9a:
                    85:51:c6:e6:8c:46:40:b9:f5:88:b3:d6:7e:48:92:
                    1d:f6:98:61:11:e4:3a:12:47:4e:87:2d:29:6a:96:
                    d2:5e:d0:f0:f7:50:5e:ca:99:85:81:d2:9e:6d:81:
                    c5:b4:fc:fb:e8:20:87:9a:35:6a:c1:32:ee:a8:f4:
                    83:e0:52:7c:f9:c1:d9:da:83:54:36:28:a8:f1:c0:
                    87:2c:33:39:3a:96:53:f2:c4:bb:cf:ac:83:ad:65:
                    f1:29:be:27:d9:05:2a:e6:39:6f:b9:d0:21:8f:4a:
                    8a:ce:23:e1:0b:a6:a7:71:13:37:f1:24:71:2d:f9:
                    9b:c3:97:75:1d:8b:ba:66:58:b0:e1:cd:6b:78:6f:
                    0b:11:d3:70:b2:51:b9:18:70:e8:e1:ab:10:84:fb:
                    4e:08:c0:4e:90:34:c1:4b:06:99:38:60:8e:e8:88:
                    9c:52:75:ad:5d:3e:3b:23:4b:6e:97:c8:9d:da:77:
                    fb:8d:26:cb:e9:71:bc:fd:87:03:e9:a7:5f:63:5b:
                    26:43:bc:af:d3:d2:c5:21:89:b7:21:7f:76:2b:64:
                    31:f1:f7:74:b5:31:89:8a:93:9c:f6:a9:c7:8c:30:
                    8b:63:6f:50:43:07:14:2a:17:b8:52:12:0a:4a:e9:
                    f3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9B:52:EE:EC:F5:25:2F:25:51:EB:69:7E:D3:E6:32:46:34:8B:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2b8b37d4-6402-313e-8eec-4b3538fb036e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:39:81:c4:93:7e:d8:d8:04:9c:39:08:b3:53:cf:82:47:6a:
         6d:37:43:e2:b3:4a:f7:26:1a:c7:f4:ef:08:ef:a0:5e:29:d5:
         73:7f:89:b7:8a:f3:8a:4d:26:bf:a3:91:e2:57:72:f8:f4:3f:
         70:75:d3:b6:16:39:43:e4:bf:7c:4a:00:3e:55:4e:6b:6c:e2:
         bf:6f:2c:a3:08:1d:65:b4:f0:33:54:a5:64:67:dd:39:15:82:
         25:ab:a7:d6:e9:00:3f:f8:56:3c:9c:12:58:8b:6f:7d:58:70:
         2c:72:69:11:26:80:96:00:8a:2f:61:ad:5b:d1:d2:cb:ea:60:
         88:e5:b7:4d:04:e4:ba:2b:01:60:9a:19:03:cc:70:ba:9e:c1:
         67:e9:78:b7:d8:71:91:1f:02:55:d3:51:2a:c9:82:ce:21:b2:
         f6:c2:ee:9c:37:bf:97:fa:34:dd:be:8b:65:5b:37:91:24:48:
         c9:f7:7e:dd:85:af:6f:5e:43:ec:19:7e:89:7c:aa:77:4e:a3:
         aa:0f:3e:82:e8:3b:a7:d9:96:e6:50:61:0b:97:6a:4b:e9:f7:
         e5:40:7a:1d:60:65:5f:f8:c4:48:3c:28:a5:a8:d8:14:97:d5:
         c8:02:7a:82:83:47:0b:fe:e0:f0:bc:90:36:e3:aa:1b:bd:50:
         ae:d6:c2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:47:54 2026 by rpki-client