Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4dc30221-0ad1-3bd7-9fd2-3843cef193d6.roa
File:                     4dc30221-0ad1-3bd7-9fd2-3843cef193d6.roa (raw, json)
Hash identifier:          1w8ynijkIzfAGv4PLurZB1Zes4xydnrBsvqsXx8prU0=
Subject key identifier:   77:14:72:67:6A:BF:03:CF:B2:50:DF:31:AF:32:89:17:C4:AD:EF:D6
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584DC40053B441CB72FAA31D1C40
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4dc30221-0ad1-3bd7-9fd2-3843cef193d6.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     3356
IP address blocks:        170.30.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:53:b4:41:cb:72:fa:a3:1d:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=a914cdd2-bf22-4f1a-bdcd-dab7862075e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:67:31:bb:cf:64:6f:3e:ff:65:52:ec:a4:d6:
                    3a:24:a5:23:f7:53:3f:5a:87:6a:a1:f9:81:bf:5b:
                    26:45:e8:92:b0:84:72:3e:64:9b:4f:62:2f:94:74:
                    21:c0:46:63:1c:a2:80:39:85:d9:22:ed:7c:21:c2:
                    5a:3b:c3:16:0c:f1:86:3f:76:c6:d8:aa:d0:36:98:
                    d7:0f:1d:3a:44:8d:6b:b6:b3:4d:cc:e0:3a:30:2f:
                    25:c4:d3:26:d6:f3:5e:c7:e6:35:99:36:ea:8e:97:
                    b7:67:c2:e8:20:ca:83:38:9d:94:aa:68:42:fc:77:
                    aa:30:b1:96:3e:fc:89:08:3c:bf:d8:28:07:66:35:
                    64:ec:cc:e8:e1:13:90:96:02:a8:e5:91:58:57:1d:
                    68:41:ae:aa:a0:34:c1:e5:25:40:b8:c8:9c:44:f5:
                    51:92:c7:c7:c7:d5:05:37:31:c0:b4:5c:e9:a7:4f:
                    fa:b3:e3:67:f6:60:14:60:24:c9:3a:24:5c:2f:18:
                    34:ab:1c:7d:04:db:22:9e:3a:3e:04:77:1f:05:f9:
                    08:d1:33:1a:4b:d9:e2:b1:0e:6a:4d:30:f4:f9:47:
                    65:c4:e0:32:22:bb:c2:56:e1:3c:85:02:96:88:2c:
                    65:5c:88:76:38:48:dc:2d:91:a6:28:bc:d0:11:f4:
                    53:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:14:72:67:6A:BF:03:CF:B2:50:DF:31:AF:32:89:17:C4:AD:EF:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4dc30221-0ad1-3bd7-9fd2-3843cef193d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.30.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:ad:51:11:6a:6a:cf:22:8f:01:ad:c2:14:85:1f:f0:69:75:
         09:c4:a3:91:7c:08:63:98:4d:7a:ae:ba:8e:30:8e:d7:b2:6d:
         4c:71:7e:56:70:37:25:90:8c:09:de:85:4d:aa:c0:bc:31:fc:
         d0:b1:8b:53:33:73:3b:fe:24:64:6e:33:f4:04:31:08:13:e1:
         b6:62:22:ae:dd:e0:6a:22:a1:a2:5b:20:09:4f:cb:d6:3a:e6:
         3a:b5:cf:b9:ae:4d:51:a8:50:c9:39:99:68:d1:72:78:03:62:
         e1:3e:7f:73:aa:50:5e:ce:6d:5f:32:0c:28:f3:30:7c:6f:6d:
         50:dc:e6:0a:2c:fc:cb:d5:b4:c4:c8:0e:92:e0:da:5b:5a:7d:
         62:47:02:e9:17:66:a8:df:e2:d3:24:7b:ad:dd:e7:cd:79:01:
         a6:fe:09:4e:7e:8b:b9:9d:5f:2f:ce:46:67:ad:9b:d1:92:e9:
         b3:25:d4:f3:23:9c:40:2c:a7:16:79:3e:21:68:4a:99:88:97:
         03:bd:ab:3a:0e:35:3c:b1:a0:95:85:38:fb:f0:3b:e1:8b:e6:
         0d:fd:7f:1d:b9:25:29:ed:99:7e:82:6b:66:a8:f6:94:81:53:
         f6:d2:0c:cd:44:3b:c2:b2:1c:26:95:dd:f1:86:0b:1c:d5:53:
         35:6c:c3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:10:21 2026 by rpki-client