Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1dd33b4a-e3f6-3ce9-a7c5-736f88d5041e.roa
File:                     1dd33b4a-e3f6-3ce9-a7c5-736f88d5041e.roa (raw, json)
Hash identifier:          CbtcZuZLbT8zXM4UCRZTC/aRhoVKeNZK00o/xvHtPYI=
Subject key identifier:   85:30:22:09:E6:2E:60:EA:9E:DB:4D:9F:65:2C:1A:76:9A:10:DF:99
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584CEAE93B631489BCF1459B7B00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1dd33b4a-e3f6-3ce9-a7c5-736f88d5041e.roa
Signing time:             Thu 19 Feb 2026 18:43:43 +0000
ROA not before:           Thu 19 Feb 2026 18:43:43 +0000
ROA not after:            Wed 20 May 2026 17:43:43 +0000
asID:                     202
IP address blocks:        168.87.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:e9:3b:63:14:89:bc:f1:45:9b:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Feb 19 18:43:43 2026 GMT
            Not After : May 20 17:43:43 2026 GMT
        Subject: CN=a23fd8b4-0d53-40a0-96f3-15977e133f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7e:0d:a3:95:b9:1e:5a:00:c2:90:78:11:16:
                    5e:c7:83:37:07:8a:01:c3:b6:a5:74:bb:05:71:89:
                    ae:77:fc:69:0c:d6:f4:c6:22:c6:dc:77:60:c4:66:
                    4e:eb:6f:27:01:77:33:d8:e1:8d:fd:49:2c:7d:23:
                    29:ac:44:53:92:d7:09:7c:94:57:c5:ba:14:7c:99:
                    51:af:25:15:bd:98:d7:cc:e5:e8:1e:13:01:0b:20:
                    bc:d0:d8:a9:29:1c:ce:0f:30:80:16:70:78:91:66:
                    60:b0:b1:49:04:3e:b2:b5:f2:27:d6:7c:d9:05:f9:
                    17:6e:2e:8c:86:83:d2:0a:79:50:3d:90:78:d2:31:
                    56:d3:53:a2:b4:8b:90:48:6f:89:37:55:63:b1:d7:
                    0c:0e:82:8b:31:31:63:ab:f4:e1:44:10:0b:02:b2:
                    0e:02:ae:2b:41:37:2b:e7:03:f1:70:12:79:cd:05:
                    bc:40:fe:25:80:c6:9a:6c:f3:ca:a9:6e:bd:46:83:
                    4f:8b:1f:e4:6a:25:44:09:19:46:d4:dd:e3:e0:fe:
                    a9:17:ac:e8:0d:0e:27:8c:56:49:21:14:61:23:05:
                    ac:35:b5:26:36:3e:33:77:19:d7:fc:35:7d:71:75:
                    ca:86:61:e9:c0:19:c4:7f:9a:13:4b:2d:99:23:27:
                    7c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:30:22:09:E6:2E:60:EA:9E:DB:4D:9F:65:2C:1A:76:9A:10:DF:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1dd33b4a-e3f6-3ce9-a7c5-736f88d5041e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:4c:f9:76:9f:f4:c4:46:b2:4b:3f:91:3e:a0:28:81:ed:60:
         21:23:23:a1:ba:cd:a4:52:9a:e6:6a:42:90:34:97:e0:01:3d:
         2e:bc:cb:57:09:63:2b:f5:1f:c3:4f:c5:bb:21:8f:f1:be:67:
         2b:8d:87:7f:e7:2a:99:ff:3d:5e:7f:80:4b:ff:17:d9:b7:ec:
         aa:da:79:a2:b4:36:b8:85:ea:4e:cf:e4:f4:2b:a1:da:a4:0c:
         f5:c2:73:01:13:e7:2b:9e:6d:65:ba:18:bd:ac:1e:13:71:d4:
         d6:67:ea:ea:15:70:3b:c8:5f:f9:9e:20:0d:bb:6a:68:fc:14:
         dd:a4:dd:6f:61:1a:e2:0c:a9:4f:c0:4a:57:8b:ff:dd:1a:1f:
         a2:45:5b:82:36:b9:15:9c:5f:e0:76:db:5b:83:d7:d6:99:a2:
         a7:46:01:8f:83:df:66:f6:17:9e:7f:b5:09:09:d7:37:e9:d7:
         7f:62:3d:92:af:97:9d:c1:50:7b:0a:4e:a8:b3:72:90:23:7f:
         10:9b:23:f7:c3:f0:8b:3a:19:e8:e5:71:11:0a:b0:2a:f8:80:
         e0:d4:93:99:f4:84:dc:29:72:dd:ea:41:7c:45:33:14:62:9c:
         a6:30:bf:b5:ac:26:6f:98:1b:71:a5:3e:a7:29:c5:cb:e7:82:
         da:d3:19:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:09:25 2026 by rpki-client