Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/72369819-8616-3a20-a1f6-c5c9f3b8a6b5.roa
File:                     72369819-8616-3a20-a1f6-c5c9f3b8a6b5.roa (raw, json)
Hash identifier:          qTZ9cYqIRRDm8gLQwClMPrr9SyO8GnhmNDUuDg9Ef/0=
Subject key identifier:   37:E0:09:0B:88:12:E7:AE:D7:2A:5C:40:DA:D2:8E:35:50:EF:3D:E0
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E428F24D824E4C64DAD7EAE00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/72369819-8616-3a20-a1f6-c5c9f3b8a6b5.roa
Signing time:             Mon 22 Jun 2026 21:00:12 +0000
ROA not before:           Mon 22 Jun 2026 21:00:12 +0000
ROA not after:            Sun 20 Sep 2026 21:00:12 +0000
asID:                     3356
IP address blocks:        168.87.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:8f:24:d8:24:e4:c6:4d:ad:7e:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 22 21:00:12 2026 GMT
            Not After : Sep 20 21:00:12 2026 GMT
        Subject: CN=3c770bd3-9dfb-4b90-b322-dea0129eb6f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0d:db:f1:87:b8:e4:cc:b9:89:57:6f:b2:c3:
                    c6:f7:f3:3b:62:61:fc:48:27:c1:84:67:97:85:7b:
                    07:27:0d:c1:c9:7e:f4:da:56:ce:96:31:9c:cc:b0:
                    50:05:32:ca:1c:89:26:1e:cb:b2:a7:07:0c:63:d7:
                    db:56:db:8f:41:76:b4:db:2f:6d:23:86:dc:32:d5:
                    f6:f4:aa:c6:aa:08:a9:af:9c:8d:5e:ed:28:a7:16:
                    33:c6:b9:ba:ec:a2:7f:33:26:27:85:2d:d6:f1:da:
                    36:7e:00:a7:2a:f9:a6:71:a2:80:ad:ba:f6:9d:21:
                    41:f3:a5:7b:df:97:2a:c5:c4:8f:a8:2e:56:c2:77:
                    2e:f4:07:f0:51:65:97:1f:6e:cd:20:3d:df:9b:ec:
                    d0:d7:ef:68:c4:f4:c3:32:bd:cd:05:77:c1:ef:a7:
                    84:4e:16:05:d8:bd:ed:d6:05:d7:83:8c:74:c0:b5:
                    c1:01:ba:68:30:90:7f:b1:a0:ae:7d:a0:9a:49:db:
                    38:48:c5:d9:2b:c1:f3:a1:61:2a:db:bb:5c:15:19:
                    47:bc:bc:b1:a5:fc:ec:f5:32:b1:b6:32:2c:68:37:
                    11:43:58:77:fb:51:b2:43:64:19:99:ae:9b:48:4c:
                    eb:aa:f6:03:c4:fd:95:64:fa:32:4c:d4:23:3e:9f:
                    56:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E0:09:0B:88:12:E7:AE:D7:2A:5C:40:DA:D2:8E:35:50:EF:3D:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/72369819-8616-3a20-a1f6-c5c9f3b8a6b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:d3:1c:e6:cd:ec:a6:13:91:6d:a4:08:f2:c7:5b:a6:ce:68:
         37:36:ce:2a:a5:62:86:7e:7b:c6:69:46:6a:e5:d0:cf:55:ce:
         8a:b8:48:c4:a5:d7:b2:9b:c5:5c:4e:cf:d8:b1:4e:20:ca:3d:
         fa:44:50:94:3c:69:76:19:49:b3:93:bb:77:3a:50:59:13:9a:
         ff:d8:99:2b:85:1d:7a:8e:36:f9:a9:c4:23:2b:d3:b0:05:26:
         69:a6:17:4f:94:ee:21:97:d8:3e:f5:04:86:a6:27:58:ee:1b:
         ff:93:5b:6c:f8:b2:01:c1:2a:cc:03:9e:e6:22:fb:2e:eb:b4:
         68:cd:87:07:5e:4b:82:70:5f:9f:ed:d4:3a:a1:d8:bf:a6:41:
         0d:b5:3a:2c:17:26:31:6b:9e:37:75:99:00:6b:21:31:02:00:
         b8:92:18:94:71:c4:19:67:f1:5e:f8:ec:21:46:ed:ab:5b:02:
         dc:af:b4:30:df:ba:cd:fa:88:85:d4:07:c0:a2:80:8c:0b:d1:
         eb:ad:ec:fe:72:fb:51:7a:92:64:3d:f8:ea:96:ef:bd:1b:60:
         a4:77:59:c1:8e:a3:af:22:92:ae:36:98:09:7c:cd:da:23:23:
         eb:fe:1d:14:8f:e7:d0:c3:f7:cc:4f:cf:25:fd:bd:c8:61:dc:
         b2:8f:d4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:54:55 2026 by rpki-client