Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/784ed6f0-a460-3ab3-bc74-dbf442880523.roa
File:                     784ed6f0-a460-3ab3-bc74-dbf442880523.roa (raw, json)
Hash identifier:          dEtGmumNazGg6dVXUTacFK3ZJA0OPt1Wq47WQjESpWU=
Subject key identifier:   FC:15:CE:B3:42:29:E9:E2:75:CB:96:4F:97:25:6E:E1:A2:08:20:9E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584DC400545658DEBE1CD185B480
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/784ed6f0-a460-3ab3-bc74-dbf442880523.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     3360
IP address blocks:        170.30.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:54:56:58:de:be:1c:d1:85:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=6f7f5c56-eaf3-4ef1-b738-c8eba4de815b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:79:36:7e:b3:64:0d:34:08:c5:88:30:42:a6:
                    56:e0:86:81:a6:11:ba:a7:e1:c3:24:bc:18:f9:fb:
                    b6:47:27:81:80:80:55:17:43:36:84:bf:07:aa:c3:
                    ca:9c:a2:08:da:74:e6:5f:39:e8:f5:1d:6d:ff:a9:
                    c8:c2:62:42:03:5b:86:60:47:a3:93:32:03:34:fc:
                    d0:1a:bd:31:48:0f:c3:a9:32:c6:72:12:92:e7:64:
                    4d:b1:ac:b7:29:6c:ca:ba:2a:b3:17:01:89:1c:c6:
                    74:ce:e1:ce:3c:08:2a:f2:86:af:de:ce:1f:d7:fd:
                    94:75:e7:c1:b1:63:e4:46:03:f3:ce:2a:8e:a2:5e:
                    72:75:73:ef:dc:0a:e9:20:59:3a:6a:9e:2f:b3:b1:
                    6c:00:2f:be:d7:b3:89:c6:b7:28:a6:44:2d:01:0b:
                    d3:bb:4a:07:09:e0:c6:11:5e:27:17:c3:8e:65:30:
                    9f:c8:b5:1c:a0:f6:d5:6d:cb:0e:6c:f3:54:66:b9:
                    14:94:6d:5a:29:91:1f:50:a2:42:81:e1:49:1a:3b:
                    d3:3d:7a:b4:25:60:f2:27:c4:66:34:9a:b0:0c:73:
                    58:4b:92:fc:57:d0:6e:1a:a9:4f:ff:a1:70:4b:58:
                    2e:04:ff:5d:4b:72:d4:8b:44:6e:9b:8d:55:d9:e7:
                    28:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:15:CE:B3:42:29:E9:E2:75:CB:96:4F:97:25:6E:E1:A2:08:20:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/784ed6f0-a460-3ab3-bc74-dbf442880523.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.30.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:bb:d3:79:9a:29:67:2f:da:7a:a9:6c:ea:59:b6:66:07:b1:
         19:99:70:a3:54:b2:68:f1:21:3f:7b:97:f3:8d:dd:06:e3:15:
         83:9c:e1:40:4b:17:18:e8:35:de:03:34:ae:fc:93:03:fb:f4:
         a0:d0:07:25:56:08:be:3f:02:57:38:84:86:bf:d6:b0:e3:84:
         76:d0:72:7e:a0:15:6b:d3:dd:ad:9b:5b:fc:91:ec:ea:b6:2c:
         e3:3c:ea:31:23:83:44:66:81:fa:e9:50:c4:ab:0c:98:e9:85:
         47:6a:ad:ff:a4:72:e3:19:69:f5:25:4d:dd:e4:bb:21:d7:d0:
         62:d8:39:b0:34:49:4b:d9:e6:b9:38:3e:55:2d:e1:53:88:35:
         5c:df:b6:c3:f7:37:07:56:87:05:03:c9:3f:f7:8b:c3:bc:28:
         41:11:08:57:be:f3:a3:35:30:b2:b4:cd:ac:1d:bf:d3:1c:1a:
         59:96:6f:b6:44:1f:7f:d6:82:9a:ae:99:1a:48:ab:3d:2e:64:
         5b:b5:80:5e:14:94:10:09:7a:1d:80:9d:3e:4c:81:c0:69:5d:
         40:8a:3c:de:76:3c:ce:65:05:79:da:da:ae:60:0e:94:d6:0e:
         ee:04:fd:a0:7c:ed:02:9a:88:3e:5d:6d:fb:9f:02:fd:a1:f1:
         da:20:7f:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3EAFRWWN6+HNGFtIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDUwODEzMDAzMFoXDTI2MDgwNjEzMDAzMFowLzEtMCsGA1UEAxMk
NmY3ZjVjNTYtZWFmMy00ZWYxLWI3MzgtYzhlYmE0ZGU4MTViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3k2frNkDTQIxYgwQqZW4IaBphG6p+HDJLwY
+fu2RyeBgIBVF0M2hL8HqsPKnKII2nTmXzno9R1t/6nIwmJCA1uGYEejkzIDNPzQ
Gr0xSA/DqTLGchKS52RNsay3KWzKuiqzFwGJHMZ0zuHOPAgq8oav3s4f1/2UdefB
sWPkRgPzziqOol5ydXPv3ArpIFk6ap4vs7FsAC++17OJxrcopkQtAQvTu0oHCeDG
EV4nF8OOZTCfyLUcoPbVbcsObPNUZrkUlG1aKZEfUKJCgeFJGjvTPXq0JWDyJ8Rm
NJqwDHNYS5L8V9BuGqlP/6FwS1guBP9dS3LUi0Rum41V2ecoKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPwVzrNCKenidcuWT5clbuGiCCCeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNzg0ZWQ2ZjAtYTQ2MC0z
YWIzLWJjNzQtZGJmNDQyODgwNTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqh7cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEy703maKWcv2nqpbOpZtmYHsRmZcKNUsmjxIT97l/ON3QbjFYOc4UBL
FxjoNd4DNK78kwP79KDQByVWCL4/Alc4hIa/1rDjhHbQcn6gFWvT3a2bW/yR7Oq2
LOM86jEjg0RmgfrpUMSrDJjphUdqrf+kcuMZafUlTd3kuyHX0GLYObA0SUvZ5rk4
PlUt4VOINVzftsP3NwdWhwUDyT/3i8O8KEERCFe+86M1MLK0zawdv9McGlmWb7ZE
H3/WgpqumRpIqz0uZFu1gF4UlBAJeh2AnT5MgcBpXUCKPN52PM5lBXna2q5gDpTW
Du4E/aB87QKaiD5dbfufAv2h8dogfyg=
-----END CERTIFICATE-----
Generated at Wed May 13 14:30:20 2026 by rpki-client