Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/641ba864-2fd1-3793-9a93-207db100941c.roa
File:                     641ba864-2fd1-3793-9a93-207db100941c.roa (raw, json)
Hash identifier:          898LgZ0Kv2yYMiCwYVRSkCodNjn69jJMP0mfjlUZqrM=
Subject key identifier:   31:E7:DF:5B:C8:D6:8D:31:92:06:08:07:C2:69:7D:65:E2:E5:07:E2
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E54B4AF1A5A20DF25A85B0E00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/641ba864-2fd1-3793-9a93-207db100941c.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     203
IP address blocks:        168.87.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:af:1a:5a:20:df:25:a8:5b:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=0618b87c-5e7d-49ee-9b66-b57a93197748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e1:b2:70:d0:1b:cf:87:81:6c:42:e6:bc:27:
                    39:77:13:9f:e2:5d:ae:06:36:0a:69:4d:28:f2:8e:
                    c5:07:f5:ea:91:31:f1:31:47:1b:dd:1f:cc:63:09:
                    64:bf:13:cf:5c:13:4b:7a:eb:65:d3:88:9e:0f:07:
                    65:d2:b1:f7:ce:84:44:f9:72:98:e1:5e:84:a6:3c:
                    7f:d6:64:13:ee:d0:64:5c:47:7a:d9:9f:aa:ce:f2:
                    1b:e5:1e:7f:94:5d:89:02:75:16:c9:59:a4:15:67:
                    fa:36:2f:25:84:ff:b9:7e:8a:a6:6e:b4:52:28:4c:
                    3c:8b:22:c9:83:ae:0b:c9:0d:43:56:4b:e7:03:bb:
                    bb:18:51:ea:6c:95:3c:c0:c4:99:a7:22:f4:6a:3e:
                    2b:19:9a:d7:8c:d0:64:ea:e8:c0:a9:85:50:52:d0:
                    03:19:c8:b4:21:38:88:e4:bf:1c:c0:7b:35:2b:da:
                    8a:59:6e:58:c7:ef:4c:54:c5:40:69:9f:72:87:a4:
                    74:84:0d:23:ca:b0:cc:b6:49:1f:93:54:72:b9:53:
                    81:cb:09:e0:ae:24:71:ff:aa:f5:60:31:2d:4f:cb:
                    fd:df:0f:45:fd:2c:e1:f1:0a:1f:52:fb:89:d5:ea:
                    67:8e:f4:07:47:3d:6a:79:e8:a5:f9:37:a6:3b:e3:
                    f2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E7:DF:5B:C8:D6:8D:31:92:06:08:07:C2:69:7D:65:E2:E5:07:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/641ba864-2fd1-3793-9a93-207db100941c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:03:e1:9d:ea:b2:fb:d5:9b:47:a5:78:b8:65:59:18:10:40:
         32:54:1f:f3:8e:70:f3:fa:94:8b:a2:93:35:37:27:2a:8e:6c:
         3c:40:e3:68:d8:62:7f:36:ac:a1:1e:56:4d:10:d8:92:2b:40:
         ca:90:26:8a:8a:9f:f0:39:3c:89:43:57:ba:77:48:25:a5:5b:
         8f:99:c8:d5:e0:05:47:f3:c9:c3:fc:ca:d1:c4:2d:07:aa:3f:
         4a:be:01:8b:9d:37:b9:ac:39:8f:75:9d:cb:a8:f4:92:8c:be:
         3f:52:93:18:f7:bf:ff:00:ed:18:04:ae:82:85:72:7d:79:de:
         a2:64:c9:3f:3c:3d:74:0a:a3:9f:af:e1:42:4e:c9:30:ac:8e:
         16:88:2f:76:fd:2b:b1:53:51:c2:ee:cd:62:c0:90:08:99:a0:
         63:9e:4c:5f:32:7d:47:90:31:be:11:84:6e:7d:36:d5:0b:e7:
         2e:da:fe:21:1c:7b:84:74:73:c1:47:38:3d:29:c6:1e:13:30:
         05:7c:27:15:5f:96:07:d6:87:0c:67:2d:a0:f2:8c:53:bc:f5:
         d6:a5:ca:90:42:2d:13:94:cb:2f:a6:de:7c:8f:68:a2:8e:2f:
         11:0c:7f:4e:b4:9f:1c:37:c1:0b:db:2e:27:7c:cd:b5:d9:ac:
         3f:ed:20:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtK8aWiDfJahbDgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk
MDYxOGI4N2MtNWU3ZC00OWVlLTliNjYtYjU3YTkzMTk3NzQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuGycNAbz4eBbELmvCc5dxOf4l2uBjYKaU0o
8o7FB/XqkTHxMUcb3R/MYwlkvxPPXBNLeutl04ieDwdl0rH3zoRE+XKY4V6Epjx/
1mQT7tBkXEd62Z+qzvIb5R5/lF2JAnUWyVmkFWf6Ni8lhP+5foqmbrRSKEw8iyLJ
g64LyQ1DVkvnA7u7GFHqbJU8wMSZpyL0aj4rGZrXjNBk6ujAqYVQUtADGci0ITiI
5L8cwHs1K9qKWW5Yx+9MVMVAaZ9yh6R0hA0jyrDMtkkfk1RyuVOBywngriRx/6r1
YDEtT8v93w9F/Szh8QofUvuJ1epnjvQHRz1qeeil+TemO+Py5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDHn31vI1o0xkgYIB8JpfWXi5QfiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjQxYmE4NjQtMmZkMS0z
NzkzLTlhOTMtMjA3ZGIxMDA5NDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFdzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGID4Z3qsvvVm0eleLhlWRgQQDJUH/OOcPP6lIuikzU3JyqObDxA42jY
Yn82rKEeVk0Q2JIrQMqQJoqKn/A5PIlDV7p3SCWlW4+ZyNXgBUfzycP8ytHELQeq
P0q+AYudN7msOY91ncuo9JKMvj9Skxj3v/8A7RgEroKFcn153qJkyT88PXQKo5+v
4UJOyTCsjhaIL3b9K7FTUcLuzWLAkAiZoGOeTF8yfUeQMb4RhG59NtUL5y7a/iEc
e4R0c8FHOD0pxh4TMAV8JxVflgfWhwxnLaDyjFO89dalypBCLROUyy+m3nyPaKKO
LxEMf060nxw3wQvbLid8zbXZrD/tIL0=
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:39:01 2026 by rpki-client