Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f00700ad-3b21-3127-8b41-4f7218a8e714.roa
File:                     f00700ad-3b21-3127-8b41-4f7218a8e714.roa (raw, json)
Hash identifier:          ck5/coyKk8U4J7C9CQCqRRpRoLvQcekgbPefvphKong=
Subject key identifier:   78:2D:8A:06:25:15:DE:14:15:CB:B3:20:13:76:FF:CA:6C:BD:57:F8
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D0D42621A350242223F7C1A80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f00700ad-3b21-3127-8b41-4f7218a8e714.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     202
IP address blocks:        168.87.154.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:62:1a:35:02:42:22:3f:7c:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=48b0256a-dc0c-4c64-974e-3b80f88fc9cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a8:5b:b5:f6:24:52:12:9b:4e:71:bb:a1:d3:
                    e5:ad:b1:9b:21:0c:1a:96:3f:ca:61:f8:1e:a8:c9:
                    af:4b:d6:bb:81:af:b9:63:f8:3e:18:70:2a:3b:dd:
                    23:03:56:fe:07:e4:45:a3:e7:86:be:1f:c4:60:38:
                    dc:0c:6f:07:69:9e:06:e1:c1:ec:e4:99:11:eb:23:
                    ae:69:df:88:98:4a:ae:0d:f1:bc:8b:a1:19:ec:3b:
                    25:94:11:b9:c8:47:8e:df:db:09:00:b6:f4:2d:c7:
                    1e:0b:b8:a2:be:3e:91:f3:5e:60:99:9a:8f:bd:98:
                    45:dd:cc:01:3f:50:32:6d:12:de:92:10:93:95:88:
                    43:a3:9e:a4:46:a2:37:7a:76:2f:d5:02:39:32:08:
                    3b:af:dd:c5:79:27:2b:8c:25:79:ea:af:4d:76:de:
                    92:31:23:40:0a:6b:5f:70:5b:d4:b6:59:2e:3f:10:
                    35:e1:18:b0:6d:69:3f:86:e2:a8:e1:07:a4:7a:72:
                    24:f6:f6:47:22:27:a9:0f:eb:69:4f:93:51:b3:23:
                    6d:49:6d:ce:83:cc:6a:6e:bc:80:ec:93:58:f5:90:
                    c5:f0:bc:a6:1d:d2:92:05:ed:2f:a1:6b:db:27:19:
                    6f:6d:f6:19:e7:b4:2f:1b:77:9f:f0:2f:d2:25:b1:
                    69:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2D:8A:06:25:15:DE:14:15:CB:B3:20:13:76:FF:CA:6C:BD:57:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f00700ad-3b21-3127-8b41-4f7218a8e714.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:33:f9:73:f7:88:87:3b:af:05:21:16:d6:bf:2b:70:79:92:
         b4:a6:fc:53:e5:be:7a:00:3d:42:a7:b0:ce:3d:44:aa:91:52:
         d3:9b:b1:5c:4e:61:9a:de:1f:41:50:03:8c:70:04:15:98:74:
         78:ff:b5:48:26:a8:5f:1d:46:bc:c9:8a:19:b3:25:44:ab:46:
         d9:35:ba:55:f2:96:8a:63:ab:33:5a:c5:99:d4:c4:aa:b5:7d:
         c2:28:1b:9d:81:86:45:dd:3b:e0:1a:bf:e8:83:a5:24:db:2b:
         3c:e1:0c:67:e3:6c:66:4e:b9:a1:6f:00:f1:0a:33:83:74:51:
         55:a2:be:f5:f9:ca:d3:ac:7e:62:a0:30:22:0a:fe:3d:55:6a:
         f4:f5:e6:34:ea:cc:1e:a6:d6:25:b1:86:49:82:dc:22:ca:27:
         59:22:de:99:42:17:f0:08:fa:88:61:8d:79:ed:5c:aa:b1:27:
         8e:16:d5:b4:12:2e:3a:ce:14:91:c0:85:4c:21:48:a6:2e:63:
         67:65:65:42:11:08:30:1a:bc:e9:9f:dd:77:06:d7:2a:1f:ff:
         1f:b2:69:56:23:1b:11:8f:17:77:bc:d2:4b:07:6b:c9:c2:ab:
         cc:ce:f1:66:7a:f4:f9:67:10:01:c8:a1:2c:79:1e:85:e6:00:
         52:15:b3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:35:01 2026 by rpki-client