Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/89b6ce69-65e4-30bb-94da-990da7620180.roa
File:                     89b6ce69-65e4-30bb-94da-990da7620180.roa (raw, json)
Hash identifier:          C/e8SySkxBbokdELWuQZGua/Eu18WwTGGXEveVV9PKE=
Subject key identifier:   B7:FB:61:2E:BB:04:0C:36:A9:B1:9F:9B:BC:77:1B:0F:B6:4E:9A:72
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D1B1A0EA27DED2481810F2D00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/89b6ce69-65e4-30bb-94da-990da7620180.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     3356
IP address blocks:        168.87.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:0e:a2:7d:ed:24:81:81:0f:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=34adb3cc-0355-4c3a-8e55-09a234af1572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b5:87:22:99:11:55:53:45:e7:6d:c3:42:12:
                    15:0c:16:e7:03:a6:8f:75:5d:76:08:00:2d:3a:ad:
                    b2:8a:78:03:54:0a:ba:2d:e8:ba:91:cc:8c:48:10:
                    52:a8:cb:2e:2f:a6:06:2c:e7:4d:8c:b9:db:a0:d2:
                    de:f5:46:e7:54:b2:60:a0:db:46:6b:81:73:99:a7:
                    71:63:42:ee:a4:6c:7d:39:5f:01:42:80:b4:dd:53:
                    a9:81:9f:9d:82:2b:f7:0d:e6:50:db:2b:dd:5c:ae:
                    ce:00:24:13:ff:18:cf:d8:03:f8:bb:44:35:9c:a8:
                    b7:2d:86:4d:b9:0b:61:b5:32:d5:79:64:c7:38:8c:
                    4f:44:03:27:33:3d:63:64:76:c0:87:d0:5a:7b:03:
                    03:26:27:ff:4b:f7:ea:34:a7:9d:a4:b6:97:a6:77:
                    ca:c2:e8:ce:1d:0d:26:e3:98:84:6b:9d:37:7e:ab:
                    45:58:51:d1:de:95:1f:5e:36:c3:bb:e8:ed:6f:3b:
                    24:95:d8:38:f8:03:5b:38:e2:4d:0b:bb:b3:e6:18:
                    3e:9b:d8:91:99:4a:1a:73:e7:85:ae:fd:a0:c4:59:
                    97:93:8a:1b:1c:75:58:5d:97:11:58:3e:da:ad:cc:
                    03:c5:57:3b:14:10:3f:78:f9:51:2f:27:e7:0c:30:
                    da:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:FB:61:2E:BB:04:0C:36:A9:B1:9F:9B:BC:77:1B:0F:B6:4E:9A:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/89b6ce69-65e4-30bb-94da-990da7620180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:2b:58:29:8a:08:dd:93:ff:8c:b8:b8:82:0c:c3:c7:d1:88:
         ef:be:8a:ae:f8:80:e9:ca:ab:cd:c5:e7:f4:d7:fc:23:3b:3d:
         73:b3:9b:5b:e2:71:49:d5:9a:75:72:42:21:18:44:d2:99:7d:
         56:d6:0d:6f:f7:ce:d7:f5:39:d0:8e:9c:7f:a9:ba:cb:8a:13:
         22:08:a4:a4:1e:eb:49:fa:6e:5d:49:e8:35:b2:86:33:50:09:
         dc:12:89:e7:f6:02:20:59:1f:83:5e:97:ba:ff:68:6c:de:79:
         c4:e7:38:25:23:27:b1:be:da:3e:a7:d7:51:9d:52:5b:db:84:
         d4:a8:a8:b0:44:ce:68:fd:a6:0e:0e:bb:74:a3:7a:66:44:2e:
         a9:ae:d2:08:ff:0c:05:2b:a4:be:e7:96:89:52:31:8e:92:8f:
         46:01:aa:9d:6b:ab:58:c6:03:cd:35:6e:1d:b1:fa:c8:b4:0c:
         b7:37:f9:3b:0b:48:61:a0:a3:08:71:d4:60:f8:1a:2e:86:0a:
         c8:d3:88:0c:2b:00:db:62:40:06:df:89:aa:91:74:d2:69:ca:
         ed:77:80:2e:b4:c7:03:3b:31:9e:28:c7:6c:7e:03:8f:e4:e2:
         10:6f:da:d5:9e:78:09:49:53:e4:0a:6e:09:4d:7f:2c:79:3a:
         a4:0c:d3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:25:10 2026 by rpki-client