Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d665c16c-aafb-312c-9ec6-e661450e6510.roa
File:                     d665c16c-aafb-312c-9ec6-e661450e6510.roa (raw, json)
Hash identifier:          RmlHv43kDSiunQrKhZ3oF0c1udBbUZisgZjsE3Rv+Ms=
Subject key identifier:   F0:35:F6:76:2E:ED:B4:1D:8F:70:AF:A4:BD:56:BD:60:0A:B2:A7:F1
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EF7177CF1B7AA45543DF01AE0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d665c16c-aafb-312c-9ec6-e661450e6510.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     202
IP address blocks:        206.164.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:7c:f1:b7:aa:45:54:3d:f0:1a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=b701d22a-2337-4b61-ac0b-95c36d8dbe56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:09:e3:89:76:ef:89:7a:47:5f:00:6b:8b:0a:
                    b8:fc:02:cb:81:3e:cb:a6:0c:3e:c2:e0:a9:70:8f:
                    92:ca:68:bd:24:e3:c0:46:e6:98:ef:c4:0a:09:2b:
                    1c:aa:ca:24:46:e7:8f:4b:e9:6c:b3:1b:9a:53:c6:
                    67:f7:67:fc:d1:c6:de:0b:50:19:65:50:29:cb:11:
                    6d:e2:35:69:62:b3:cb:4a:56:e9:81:f9:d2:c8:55:
                    86:6d:d0:61:fd:41:f8:cf:fd:66:20:82:4e:c9:d7:
                    ec:60:4f:fe:9c:e3:64:de:38:34:03:dc:37:bc:d1:
                    a0:78:08:14:15:4c:df:f6:44:8b:29:78:a7:fc:f4:
                    f5:50:ef:78:6c:98:42:54:10:0c:ec:72:9e:c5:9c:
                    dd:0e:8d:42:72:98:c1:e8:c8:26:1a:3a:e6:05:24:
                    c6:c2:ac:c3:52:42:a2:87:8e:ce:59:0d:8c:7c:8f:
                    55:0a:5f:19:53:bc:c1:84:57:ca:8b:eb:32:d2:7b:
                    03:a1:58:07:fa:03:c5:1c:3c:b1:7a:25:7d:da:58:
                    67:9b:8c:ee:99:2c:21:3a:77:63:03:b3:70:b4:cd:
                    61:ab:35:2a:e9:12:8e:e9:c5:4e:b2:31:d1:6f:7a:
                    1c:97:6c:38:c0:9c:45:f2:b8:91:25:af:c4:8f:6c:
                    91:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:35:F6:76:2E:ED:B4:1D:8F:70:AF:A4:BD:56:BD:60:0A:B2:A7:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d665c16c-aafb-312c-9ec6-e661450e6510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.164.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:02:14:67:f7:9b:5c:08:d9:ab:0b:30:23:0e:a7:f2:d2:61:
         f1:f3:4b:04:d4:68:9f:e8:59:bf:85:a8:4d:5e:c4:97:cb:0f:
         bb:cb:6d:8f:36:e7:f3:fe:92:0d:3c:f0:7c:13:c7:00:41:6c:
         fd:d8:69:31:eb:26:d4:a0:c8:7a:d8:1d:76:70:9a:8f:b1:a7:
         0f:83:92:f1:9e:40:16:d7:8b:49:38:26:7a:d3:72:f7:8f:4f:
         2b:ae:42:ff:1d:65:43:b4:f7:b6:19:31:fd:d4:35:df:10:dd:
         e9:a1:92:17:ef:74:5d:19:b1:b3:0d:cb:c2:d2:c1:2e:0e:7a:
         2f:8c:38:4e:a4:12:1b:3e:b6:a0:12:67:64:69:53:41:4b:ca:
         31:29:31:c4:d8:9f:91:ea:d4:8d:da:0c:ec:04:bb:63:2c:17:
         dc:9c:01:67:4c:1f:ba:2c:fc:66:b2:e6:ea:14:51:8c:ed:ed:
         ae:84:cb:67:41:5d:25:8f:1c:06:3b:77:9b:b2:a8:fd:ee:77:
         61:44:6f:d2:4e:52:c3:ee:e6:93:30:99:85:51:1a:e3:8e:82:
         ef:ea:e1:37:e1:93:c6:0a:39:82:9e:d7:51:7f:b6:32:7b:b6:
         09:ce:f9:61:67:c8:1e:58:04:34:87:d9:0c:5a:d3:f5:5b:a1:
         2a:33:d3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:31:06 2026 by rpki-client