Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/18900fde-da30-3fdd-80da-d78090baa1d7.roa
File:                     18900fde-da30-3fdd-80da-d78090baa1d7.roa (raw, json)
Hash identifier:          x97ZAXSox/dJRACapTEgxjIm9rkCXIYF3Xxd/uwkBiw=
Subject key identifier:   7F:A7:E3:E7:AD:FF:F8:55:DF:1E:4E:BF:E9:BA:4A:2F:99:3E:F8:BA
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D60E51118FF732B459E985780
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/18900fde-da30-3fdd-80da-d78090baa1d7.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        168.87.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e5:11:18:ff:73:2b:45:9e:98:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=e92f27dc-8f8e-46de-a25d-24c0ee662c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:47:86:1a:88:15:16:68:3e:f6:91:dc:5a:1c:
                    9c:b6:86:70:8c:e9:2f:36:bb:8c:b5:19:82:59:7b:
                    6c:c9:96:4f:4a:1c:df:95:24:8a:e7:21:0e:70:bf:
                    26:d0:7c:74:e2:3f:d0:ea:b4:1d:45:63:13:9f:9c:
                    e4:9d:28:75:16:87:37:75:a7:33:a8:ef:bc:ac:82:
                    8b:61:03:48:26:82:56:1b:0d:c2:c5:ed:e8:83:d8:
                    d3:2d:1c:d2:20:93:21:1d:76:a6:c3:8e:66:6e:85:
                    83:cf:bd:b7:b6:c1:87:8a:5d:48:da:45:0e:c0:44:
                    3b:96:10:45:b5:e2:e2:2b:46:37:16:2e:d9:87:ee:
                    e5:6c:d3:a9:25:39:4e:1d:f3:24:34:ff:6a:c8:f8:
                    e2:2e:e4:e0:67:22:0f:03:e5:b2:84:98:b5:41:72:
                    92:47:48:11:b9:45:e6:83:17:dc:96:1c:33:32:ec:
                    0b:ff:34:ad:34:f0:1b:e7:11:b9:58:a6:db:67:e9:
                    87:23:b7:f3:d0:3e:c5:18:eb:20:29:87:65:09:a9:
                    b4:00:6e:bd:dd:06:5d:d4:31:e6:07:76:7a:bb:07:
                    ed:1f:f2:cc:76:ee:e1:9f:d1:20:25:9e:20:a2:4f:
                    63:38:e6:68:9a:63:fc:45:a2:f5:7c:d2:4e:7d:02:
                    6b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A7:E3:E7:AD:FF:F8:55:DF:1E:4E:BF:E9:BA:4A:2F:99:3E:F8:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/18900fde-da30-3fdd-80da-d78090baa1d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:6b:f8:18:5d:2b:b6:d6:3c:21:37:cd:31:66:31:ce:24:32:
         50:c9:87:e9:dd:f3:73:d2:84:78:5f:c1:29:97:cd:59:d0:2b:
         8a:f9:b6:2b:21:46:83:2b:93:35:d8:97:04:79:c2:a1:79:24:
         fc:b0:3d:d9:50:bc:f8:67:05:8d:da:74:b2:56:10:a1:1e:66:
         2e:58:90:4c:28:c6:ec:66:3a:54:28:35:53:15:3d:3d:b0:e6:
         ac:62:9c:c0:af:43:8b:31:2b:e2:55:cf:92:ea:52:2a:f9:3a:
         71:6d:5a:58:46:1b:e8:9f:10:fd:57:3c:d2:92:93:e5:44:41:
         79:58:93:b0:1f:a9:b8:e4:86:7f:e8:f6:a7:8c:43:ad:e9:75:
         80:50:05:9b:9d:4d:83:bc:f2:ef:d4:64:aa:e3:87:d8:f1:e8:
         d7:e3:e7:27:c5:a8:82:f9:4d:09:f8:4c:54:7c:d8:83:c5:b1:
         96:c6:36:bf:e5:cd:4e:87:d9:19:92:76:f4:22:1a:0a:e9:e0:
         91:c4:aa:71:10:83:7f:72:02:fe:45:93:22:e1:7a:96:96:ee:
         84:2c:86:30:36:ce:a4:d9:57:c7:6c:39:41:fd:15:c1:3a:fc:
         c7:9d:aa:34:6e:25:45:de:4e:e7:e1:65:4a:5c:0a:96:5e:42:
         5f:93:ca:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:04:40 2026 by rpki-client