Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cb3d191d-90d0-3273-91ef-cd65b0535e75.roa
File:                     cb3d191d-90d0-3273-91ef-cd65b0535e75.roa (raw, json)
Hash identifier:          SRzzr+IsM46ZE6tGtE5h8HPGPZyyMEahIz1SiWzCnrc=
Subject key identifier:   56:09:26:B7:5C:4F:21:F5:9A:AB:DA:99:BB:C5:79:19:77:65:A5:EF
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584DC400546F4F3246D427FC3700
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cb3d191d-90d0-3273-91ef-cd65b0535e75.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     3356
IP address blocks:        170.30.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:54:6f:4f:32:46:d4:27:fc:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=e17b3b35-50a6-48ef-845a-67a975ed3e67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:eb:5c:a4:95:6b:1f:07:ff:49:88:be:46:d2:
                    87:1b:61:a4:ff:dd:c0:31:c1:33:3a:3d:fa:91:98:
                    72:85:44:f6:64:cd:00:28:fe:d2:f7:25:87:07:27:
                    ac:30:26:57:fa:91:ff:5f:b7:47:91:8c:25:05:75:
                    16:ed:07:4f:99:3d:5a:f4:4b:1e:fe:9f:a0:2f:c0:
                    b7:11:d7:b1:79:77:25:46:07:9f:4d:a0:70:76:ba:
                    1b:80:c6:51:80:4b:68:cb:dc:e4:09:f2:e6:bc:86:
                    5a:98:31:b0:3c:8f:41:70:0b:02:9f:65:dc:94:fa:
                    76:d8:9a:40:0d:12:df:db:77:81:fe:32:b2:81:ee:
                    e0:f1:ca:31:5a:1b:46:73:d4:f7:bc:ca:fc:9a:c4:
                    e6:44:14:39:9a:45:a4:bc:3d:f5:53:f4:16:ab:98:
                    82:55:27:d6:06:70:22:ce:e0:14:ef:69:dc:f8:e1:
                    9a:a8:0e:01:d0:53:66:9f:97:d7:94:9d:ff:6f:29:
                    1e:96:0a:d7:85:c7:7c:18:33:19:23:bf:a4:7e:f6:
                    55:5a:5c:2c:8a:a4:e5:09:a4:59:27:41:eb:e4:72:
                    f6:6b:b9:ac:b3:59:24:75:5d:b3:d1:bd:02:54:4d:
                    e7:4c:c2:80:cf:84:b5:07:90:c3:3a:f2:b2:bb:3b:
                    da:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:09:26:B7:5C:4F:21:F5:9A:AB:DA:99:BB:C5:79:19:77:65:A5:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cb3d191d-90d0-3273-91ef-cd65b0535e75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.30.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:b2:5d:21:cd:7f:b5:a3:0b:e3:a8:c7:6c:9e:f4:39:bc:5f:
         73:d9:7e:02:f6:e3:e0:56:ae:83:21:8a:2d:db:a9:1d:b0:f1:
         e7:e0:6d:c7:d1:ee:08:36:26:9b:5d:05:c0:47:91:50:3d:78:
         40:05:f2:fd:9b:3e:da:f5:35:4e:07:51:07:4f:3c:3f:56:ed:
         dd:b5:d5:f6:a1:e2:9c:e5:94:65:6d:13:a2:bd:e5:2c:a8:41:
         43:d6:e6:8e:d1:01:37:f1:73:94:54:1c:58:5c:47:10:8d:47:
         89:c8:bf:be:8d:c6:54:86:85:95:16:7f:8b:c5:d7:72:b1:a5:
         ad:a2:85:69:c9:bd:d2:ac:b3:d6:0e:18:4b:0a:48:9f:f4:cf:
         45:b5:c5:c2:8e:3d:b1:a9:32:c2:c6:d0:fc:4c:8d:4b:0a:f3:
         2e:b8:d0:b1:f0:23:cd:c1:57:c9:1d:4a:e5:f6:e4:06:0c:87:
         16:39:89:c8:fb:28:9c:7a:08:b4:61:1a:25:2f:f5:fc:2c:0d:
         9d:7b:a2:c0:1f:eb:8b:b3:79:16:6a:a7:4a:d7:92:6d:58:eb:
         79:b7:e0:41:96:61:3f:d2:9e:af:6d:2b:a8:5e:21:aa:81:12:
         94:ad:21:17:1c:1b:ef:67:2f:76:f2:15:96:9f:b5:fc:52:21:
         3a:42:ce:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:13:56 2026 by rpki-client