Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0e3da453-af8a-39ea-bf9c-ca08a4c4d08b.roa
File:                     0e3da453-af8a-39ea-bf9c-ca08a4c4d08b.roa (raw, json)
Hash identifier:          ybJFfyleDpucgejle6yXlNn0fxCCkDsSMUyZfe6RfhE=
Subject key identifier:   15:72:79:8A:63:E5:16:0A:67:0F:94:C0:03:B4:AE:BD:38:49:12:FD
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D746FCE2F62FDDA5DE6085300
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0e3da453-af8a-39ea-bf9c-ca08a4c4d08b.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     202
IP address blocks:        168.87.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:ce:2f:62:fd:da:5d:e6:08:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=86ce33cd-d729-49af-8ae3-b9550974bad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:64:3e:fe:76:d2:cd:24:28:36:ce:5f:b1:de:
                    fc:69:46:27:42:47:13:03:83:b1:35:1f:c7:b2:81:
                    95:6f:58:d7:e4:6e:73:ca:3e:bf:c9:b9:55:62:cd:
                    7a:86:69:37:e6:da:9f:07:bb:c9:52:9a:05:b8:95:
                    0a:e4:99:db:f4:16:10:7d:88:d7:a5:39:da:6e:7c:
                    60:21:68:18:cd:c9:de:12:ac:be:6c:da:aa:5a:8f:
                    d9:4d:49:25:e5:fa:d6:b3:a5:64:78:7a:f0:21:fc:
                    1c:19:a6:56:06:88:68:41:ce:c7:65:83:1a:79:80:
                    3a:0e:f2:e4:ec:87:07:8a:64:1f:15:4e:8f:d1:8d:
                    12:b7:2c:4c:47:24:ba:de:8a:eb:dc:8c:37:4c:19:
                    1b:78:98:38:b5:d8:e4:75:b9:17:66:cd:f4:ce:ad:
                    a3:11:2d:2d:e4:b7:b4:78:b6:99:c8:19:e0:da:23:
                    9d:cd:d8:ed:36:6d:a5:7e:3a:32:80:83:82:68:bc:
                    05:c8:20:e4:3c:78:95:1c:61:4a:2b:87:04:5e:1a:
                    91:35:d1:44:1f:7a:37:a2:3c:bf:72:fb:0d:ba:4b:
                    7b:4a:eb:67:25:ae:03:43:3d:65:8f:3c:ff:94:8e:
                    26:9e:1a:cd:b8:f7:f6:0b:8b:bf:bc:39:85:dc:f9:
                    e0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:72:79:8A:63:E5:16:0A:67:0F:94:C0:03:B4:AE:BD:38:49:12:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0e3da453-af8a-39ea-bf9c-ca08a4c4d08b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:5b:4f:fa:67:02:98:72:c6:59:bf:4c:dd:23:58:3d:0f:fc:
         1e:48:5e:02:6c:8d:dd:4f:98:e5:73:1a:e8:c1:b1:ac:8d:d1:
         24:65:2b:c4:8d:69:91:3f:82:ae:85:06:57:43:7d:fe:e3:49:
         10:6b:e9:d8:60:4c:a9:66:55:fa:31:f5:da:d7:c1:c3:37:01:
         e0:91:52:0d:46:e1:1d:f5:de:c0:db:a2:6b:2a:4b:13:a8:12:
         29:dd:26:30:a9:fc:cd:32:ad:3d:da:bf:10:4a:12:47:9c:3f:
         7a:02:18:b4:f0:c0:47:ca:5a:f6:fc:7d:2d:66:d3:06:2d:ee:
         9e:b4:3f:d0:00:86:7b:8e:3e:82:ee:71:70:b2:74:d3:4b:1b:
         4e:fb:2c:f7:e7:7b:a2:b4:78:4d:f2:62:5b:6c:a7:38:67:f2:
         a1:f5:2b:b3:41:7b:9a:2c:37:d1:ad:8b:51:b5:2c:61:97:62:
         88:b6:27:3a:e7:d0:da:48:de:3d:02:d4:4d:2a:b3:57:7f:63:
         34:89:cb:69:be:c0:a6:41:0e:c1:3f:c0:4e:e8:8f:26:e6:f0:
         52:b7:84:e5:7e:5b:7c:f1:3b:55:cd:65:3d:5e:eb:0f:85:74:
         3a:7d:64:d6:4e:8e:e3:f7:3c:eb:5d:79:be:2e:2f:8f:98:ce:
         0b:23:23:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:28:29 2026 by rpki-client