Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9ca59891-e22c-3d28-a7b7-39e8e266a13e.roa
File:                     9ca59891-e22c-3d28-a7b7-39e8e266a13e.roa (raw, json)
Hash identifier:          hSJM48cuaZvh2FKvN04niVFi2ySuLPMZNeiOc9T3pNE=
Subject key identifier:   39:35:7F:16:B5:8F:D0:54:4A:C5:77:AB:BA:3A:12:ED:70:11:40:4E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584F497460432B1A717FCF1953C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9ca59891-e22c-3d28-a7b7-39e8e266a13e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        168.87.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:60:43:2b:1a:71:7f:cf:19:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=509e402e-3aeb-419e-86e0-6c8b1e64055a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ee:29:e2:8b:35:88:ec:7c:cd:1f:69:b5:fa:
                    cb:ec:00:c5:d7:7c:04:a5:fc:14:76:e5:26:bd:fc:
                    00:ca:34:05:c3:89:18:57:13:f6:33:b5:9f:87:37:
                    f5:5c:80:df:c2:b0:d1:24:36:1a:f9:28:86:83:b3:
                    29:6b:ef:29:88:fc:8c:ac:82:79:b3:21:a5:12:fd:
                    52:13:98:16:68:d3:20:ed:f7:3c:47:7a:b7:42:09:
                    b8:b3:f8:6e:6f:a2:8d:43:69:f0:5f:13:22:43:30:
                    d9:b4:06:10:6a:9f:11:9a:78:c5:65:c8:4c:d6:43:
                    a5:64:84:fd:5a:a2:3e:65:04:29:85:06:d7:63:5b:
                    37:a8:9a:33:2d:ee:bf:47:25:b2:c3:f4:b2:a9:a9:
                    5e:cf:50:f3:b3:c6:b4:db:4e:13:c0:8c:51:e5:5b:
                    84:33:2e:68:c5:04:60:df:03:77:af:39:8f:3b:7f:
                    c3:04:d2:96:13:22:03:57:3d:3a:93:b3:f9:03:42:
                    3c:cb:97:bf:07:b8:9d:48:1d:d7:71:9b:ce:af:ea:
                    c0:76:eb:68:e9:69:15:03:35:4a:ef:52:48:ca:34:
                    17:c2:6b:62:3c:1a:1b:2e:5c:7f:ba:71:ce:a9:9f:
                    3c:c3:55:44:01:37:67:30:fb:ed:78:e5:50:b0:83:
                    ce:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:35:7F:16:B5:8F:D0:54:4A:C5:77:AB:BA:3A:12:ED:70:11:40:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9ca59891-e22c-3d28-a7b7-39e8e266a13e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:fa:c9:f9:92:ef:ef:44:11:d2:b7:98:b5:c9:60:00:dd:c1:
         ce:db:01:89:dc:33:01:99:b6:15:3b:0f:aa:b4:7f:d4:38:7c:
         27:82:c8:55:1e:5a:e8:11:22:b3:4d:92:8e:83:31:55:10:ad:
         08:5f:e5:c2:92:72:17:50:a0:eb:58:19:3c:c0:e2:c0:36:ad:
         2f:bd:8b:b1:a6:d1:57:75:ca:24:ac:9d:ab:50:7e:fd:5d:10:
         74:32:e7:20:c7:6e:84:49:f9:c8:ac:d7:61:35:d9:c5:22:c0:
         7a:56:6d:43:2c:4e:8a:3a:2a:76:08:94:af:a3:4e:73:ea:af:
         a1:5a:44:74:6f:b6:50:2d:ee:d6:04:84:a6:69:de:4f:eb:6c:
         a2:23:26:5f:d6:2e:e6:cd:c9:7e:af:39:7c:2c:43:fa:7f:f1:
         63:e7:97:5e:24:58:93:54:d6:49:3f:90:5e:96:df:64:3a:19:
         8b:f8:24:78:d8:42:ec:92:18:d0:ca:29:cd:30:32:65:34:13:
         0e:e8:ba:13:f8:f5:49:c7:9b:6b:7f:47:0c:47:28:11:05:98:
         a7:c8:90:7b:50:fe:76:be:65:50:d9:4b:a8:3f:33:d8:e5:53:
         66:7b:6b:a1:3e:6a:3c:20:bd:32:b2:27:19:b6:05:28:2f:3f:
         2e:9d:cb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:38:32 2026 by rpki-client