Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c24bfc74-618f-3bd3-97f9-1564ba589faa.roa
File:                     c24bfc74-618f-3bd3-97f9-1564ba589faa.roa (raw, json)
Hash identifier:          OfjIuZ426wKIHbRrOf927XDVYQoMmfVKwcn+oMON5l0=
Subject key identifier:   8F:B6:91:F5:40:0C:91:9F:59:A5:F0:FC:69:44:59:E8:05:47:7D:55
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D19B4DFCA02CFEB4B7D8A3880
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c24bfc74-618f-3bd3-97f9-1564ba589faa.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     202
IP address blocks:        170.30.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:df:ca:02:cf:eb:4b:7d:8a:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=ca3e6ed1-5313-4425-856c-6cf88b01d258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c0:76:cc:79:3e:60:20:d7:ca:c6:e6:91:d5:
                    de:34:8a:d7:a7:88:95:75:79:2f:a1:a3:92:e3:29:
                    12:4a:e6:0e:d2:1b:16:1b:ac:5a:4b:c8:d6:c1:fc:
                    dd:1e:12:7e:5f:b7:32:41:59:98:ba:1d:3f:b5:f4:
                    77:46:d3:2b:b6:6a:9f:b6:1f:96:66:65:26:01:39:
                    e3:55:de:59:99:0f:83:c4:16:de:ab:0c:c5:c7:8d:
                    e7:50:e0:0d:85:56:b3:ba:66:98:0a:42:ae:9b:3e:
                    54:98:f7:20:c5:86:04:f5:fb:6e:bd:d1:7f:cd:ec:
                    20:e0:31:68:2a:77:74:c2:4b:10:68:19:b2:da:88:
                    c9:39:4d:05:3c:94:91:ab:46:6d:7c:0f:a9:87:0a:
                    38:4b:ef:2a:30:71:5e:2a:6a:42:a8:2b:fb:d2:51:
                    d5:c4:88:25:0e:86:83:6f:90:9e:46:cd:55:9e:d6:
                    22:73:60:f3:28:e0:2c:ce:c0:7e:1a:2f:67:26:2b:
                    8a:ef:77:6e:f9:6b:f3:a9:4a:bd:08:e9:c4:b3:6f:
                    4f:9a:32:ff:60:cb:6c:27:10:9b:a4:87:1e:33:55:
                    05:67:1b:44:4e:26:8f:02:d7:73:e5:c6:c0:72:34:
                    90:fd:d3:9c:c1:41:db:44:4f:e8:86:01:10:16:f3:
                    51:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B6:91:F5:40:0C:91:9F:59:A5:F0:FC:69:44:59:E8:05:47:7D:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c24bfc74-618f-3bd3-97f9-1564ba589faa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.30.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:97:2d:c3:db:0e:b4:d4:68:07:00:a5:f1:c8:81:9b:03:3a:
         9f:2a:da:ee:f1:f6:1e:9f:cd:64:39:35:49:3c:60:b3:0e:d8:
         08:50:09:bc:8c:be:39:a5:16:c5:eb:da:ed:e5:ba:8a:99:f5:
         65:c5:93:f0:ad:16:fc:a2:b5:c0:60:c9:64:94:71:36:c2:2f:
         17:d1:be:4c:b7:6d:ab:a2:e2:2e:5f:4a:06:f1:21:9c:40:44:
         f4:b5:05:4c:3a:c6:28:a8:dc:e1:fa:26:62:85:fc:25:98:fe:
         fb:d5:f6:bb:1a:6b:e3:63:e6:cd:ff:82:ac:ad:78:8d:ed:45:
         45:31:38:96:6b:08:50:f8:ac:d3:9d:1a:cf:6f:16:da:52:c1:
         38:71:3b:70:a9:ac:3e:ee:7f:34:ad:31:a0:a2:18:9f:3a:f6:
         c8:08:cb:ea:98:85:2c:62:fa:45:73:31:c6:0f:c7:30:70:cd:
         07:fc:be:f0:f2:ce:cd:86:56:6a:1e:26:99:3c:b7:c9:ba:f8:
         f5:c8:f9:7f:f4:03:f3:55:50:9b:07:1d:ee:6f:68:de:57:3b:
         ca:31:d0:3f:4a:08:13:2f:3c:31:0d:93:a7:4c:08:95:80:56:
         0b:ef:67:f4:d0:f9:5a:b0:a2:fc:7f:60:8f:c5:b3:28:eb:ff:
         bb:9a:d4:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtN/KAs/rS32KOIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk
Y2EzZTZlZDEtNTMxMy00NDI1LTg1NmMtNmNmODhiMDFkMjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMB2zHk+YCDXysbmkdXeNIrXp4iVdXkvoaOS
4ykSSuYO0hsWG6xaS8jWwfzdHhJ+X7cyQVmYuh0/tfR3RtMrtmqfth+WZmUmATnj
Vd5ZmQ+DxBbeqwzFx43nUOANhVazumaYCkKumz5UmPcgxYYE9ftuvdF/zewg4DFo
Knd0wksQaBmy2ojJOU0FPJSRq0ZtfA+phwo4S+8qMHFeKmpCqCv70lHVxIglDoaD
b5CeRs1VntYic2DzKOAszsB+Gi9nJiuK73du+WvzqUq9COnEs29PmjL/YMtsJxCb
pIceM1UFZxtETiaPAtdz5cbAcjSQ/dOcwUHbRE/ohgEQFvNRBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI+2kfVADJGfWaXw/GlEWegFR31VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYzI0YmZjNzQtNjE4Zi0z
YmQzLTk3ZjktMTU2NGJhNTg5ZmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqh7AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADmXLcPbDrTUaAcApfHIgZsDOp8q2u7x9h6fzWQ5NUk8YLMO2AhQCbyM
vjmlFsXr2u3luoqZ9WXFk/CtFvyitcBgyWSUcTbCLxfRvky3baui4i5fSgbxIZxA
RPS1BUw6xiio3OH6JmKF/CWY/vvV9rsaa+Nj5s3/gqyteI3tRUUxOJZrCFD4rNOd
Gs9vFtpSwThxO3CprD7ufzStMaCiGJ869sgIy+qYhSxi+kVzMcYPxzBwzQf8vvDy
zs2GVmoeJpk8t8m6+PXI+X/0A/NVUJsHHe5vaN5XO8ox0D9KCBMvPDENk6dMCJWA
VgvvZ/TQ+Vqwovx/YI/Fsyjr/7ua1M8=
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:31:09 2026 by rpki-client