Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2153d3a6-ecc9-349e-a08d-595348d99222.roa
File:                     2153d3a6-ecc9-349e-a08d-595348d99222.roa (raw, json)
Hash identifier:          ax1AnFdpOO2eCwLvh/Xx/G0k3ru7/1S7u+xUjw83Jws=
Subject key identifier:   A5:F1:5A:A2:AD:4E:09:6A:32:B1:5B:76:76:BD:F3:17:2A:98:18:A6
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EA4451489DF8C982E4D352E00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2153d3a6-ecc9-349e-a08d-595348d99222.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     202
IP address blocks:        170.30.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:14:89:df:8c:98:2e:4d:35:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=fa8b84c6-82d5-4155-985e-b29dbfec0a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fa:e0:e0:b8:cc:56:0a:a3:36:ed:04:f9:44:
                    5d:64:ce:0e:64:aa:d1:c1:c7:d1:ec:a9:e9:f7:74:
                    5e:4d:37:cf:47:dd:aa:9d:9e:57:43:b5:95:c1:ac:
                    8f:68:55:d7:11:f5:6e:85:3c:56:a5:6b:0a:af:c0:
                    46:58:e2:f2:cc:a9:ef:b6:6d:8d:54:f0:aa:fc:7e:
                    70:7c:e6:e0:a5:79:d5:a9:9c:b9:e1:20:51:a4:db:
                    58:04:68:92:44:c4:99:5f:ba:87:fb:c2:e4:76:26:
                    e5:83:8d:c4:ba:ca:ac:85:0b:8e:e3:a1:7a:1a:6a:
                    34:52:74:3a:14:c8:d4:a0:ec:93:df:3e:6f:44:5a:
                    0d:b0:4e:1b:77:f5:56:a3:e7:bd:f0:fd:72:7a:7e:
                    25:6e:64:7a:73:16:ee:84:0e:8a:02:16:b5:ab:a2:
                    c5:72:3a:d2:38:87:e4:a6:39:87:3e:75:9d:c1:73:
                    50:71:38:30:35:3f:4f:43:29:6a:b4:f3:b3:71:7b:
                    39:a2:b4:91:c3:b3:b3:b0:6f:08:2b:ff:ec:64:74:
                    1d:f6:3a:8a:81:df:44:b8:e5:91:d3:5d:c5:98:06:
                    91:6b:fe:0a:49:42:81:30:7b:8b:3b:88:a1:de:e8:
                    a4:c1:71:50:db:a1:5b:1d:01:fc:42:b0:a6:30:98:
                    e8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F1:5A:A2:AD:4E:09:6A:32:B1:5B:76:76:BD:F3:17:2A:98:18:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2153d3a6-ecc9-349e-a08d-595348d99222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.30.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:6f:44:82:6c:c9:29:9f:d9:db:d1:da:06:eb:ed:f7:ee:1e:
         d3:82:e4:0d:64:1b:22:72:83:e4:21:60:c3:3d:32:d4:df:18:
         be:69:49:76:95:b6:9c:98:0c:bf:3a:6e:ee:5d:eb:e5:c1:1f:
         5f:ee:e6:35:82:71:bf:b6:cc:4a:af:af:c7:6f:34:a7:28:9c:
         71:44:41:67:b7:dd:d7:d7:d5:8f:34:74:ac:24:8a:a7:f7:8b:
         ed:f0:ed:e3:ea:a8:aa:5d:22:f3:b8:85:6b:e2:14:21:d2:a9:
         8b:be:8e:9f:6d:c3:88:09:e9:7d:69:7d:c0:88:1c:53:97:04:
         fe:44:d9:1a:43:ae:3a:0b:03:56:b3:fc:c1:51:8e:12:f5:50:
         49:dc:3f:1e:b7:f9:2c:d0:f3:1c:82:b0:53:3b:eb:94:6f:9b:
         0c:15:f4:f0:2a:76:82:c4:de:fd:1b:ec:e8:27:88:db:d5:3c:
         e7:b8:d0:b8:eb:9e:e8:e4:49:d3:bc:b5:90:da:f9:31:81:05:
         92:1f:98:a4:f0:88:4f:9a:e8:50:b8:93:db:30:48:ef:31:63:
         a1:9c:f1:a8:b5:10:87:5d:3f:88:98:12:38:92:35:9f:af:d9:
         fe:dc:b9:b8:4a:42:6b:48:34:5c:c8:42:69:3f:3f:14:29:d3:
         84:53:4a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:52:16 2026 by rpki-client