Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2212b82e-48ef-39d3-bc69-7f64c6197522.roa
File:                     2212b82e-48ef-39d3-bc69-7f64c6197522.roa (raw, json)
Hash identifier:          cUY93oLQAjIlKPOljYVL21bHeNSpzS7ullPbFtPskMA=
Subject key identifier:   DC:E1:33:54:13:BE:B0:EC:A7:98:E3:35:63:7A:8A:0F:19:F1:13:D9
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584CE362120A407D932F40BBBA00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2212b82e-48ef-39d3-bc69-7f64c6197522.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     202
IP address blocks:        170.30.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:12:0a:40:7d:93:2f:40:bb:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=7bb97f2b-27f5-4f55-922c-d54ce82e44a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:df:c0:a1:d0:89:df:05:18:91:3c:d3:e6:e9:
                    61:1a:84:0e:38:e9:33:57:b9:65:b8:b3:82:5b:7a:
                    c2:40:50:13:5e:4d:8b:a8:95:ce:0b:77:0c:0d:63:
                    9d:50:cd:fd:18:e5:96:d6:11:64:21:cc:5b:e6:d2:
                    3a:b9:be:51:91:35:88:78:12:80:e2:a9:85:58:36:
                    d8:fa:7f:79:47:86:a6:b6:76:06:45:43:52:f1:94:
                    e1:8d:44:3b:fa:30:31:c5:ab:35:ce:e0:15:cc:d7:
                    d2:a5:b2:6c:eb:a0:38:64:30:4b:ac:0d:8e:3f:66:
                    b2:e4:04:14:5d:f9:f5:64:96:29:6d:89:af:57:33:
                    ff:bb:51:e9:3f:53:da:98:2a:1d:b0:25:7d:2f:eb:
                    22:17:05:66:c2:97:36:8b:10:a2:09:30:63:aa:aa:
                    30:ad:c7:8a:ee:5f:62:80:0e:a6:50:c8:e4:cb:cd:
                    9b:c9:7b:3b:97:b6:82:6a:91:cd:b9:ec:7a:a2:d5:
                    a8:d6:bb:39:a0:6b:2f:e5:0d:ba:95:5f:27:07:43:
                    4d:7a:7e:d4:77:96:dd:24:cb:2c:5a:08:79:20:5f:
                    ca:b5:9e:74:96:fb:99:b0:cf:51:07:3d:9d:62:a7:
                    1a:be:35:d1:d8:22:b8:fe:ab:b9:8a:71:1f:0a:26:
                    05:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E1:33:54:13:BE:B0:EC:A7:98:E3:35:63:7A:8A:0F:19:F1:13:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2212b82e-48ef-39d3-bc69-7f64c6197522.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.30.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:1f:1d:32:ac:73:22:00:7c:bb:ba:ad:7e:29:b4:0e:a8:ae:
         fe:d3:a6:bb:d1:10:5f:63:b1:e8:25:1e:e2:41:85:89:55:68:
         6d:bb:f4:c1:36:ef:9b:50:d4:af:87:6e:2e:dc:52:3c:55:dd:
         7e:e1:42:e3:9b:18:49:31:46:46:86:84:1f:22:18:0c:69:f3:
         5c:d0:76:fa:b9:4e:24:b1:e4:b8:18:61:fc:39:68:c2:3f:65:
         ab:14:42:de:2f:4c:0d:dd:5a:7e:7f:34:3e:12:e3:1d:72:1b:
         ef:af:15:b4:67:b3:bc:40:80:d0:e0:5d:61:5e:00:bc:d7:c8:
         8a:91:7d:97:9b:a2:4d:77:0d:33:c9:17:1d:db:d6:40:46:2f:
         24:15:b6:d6:19:9c:60:23:ca:a8:81:75:99:37:d3:6d:0c:a2:
         b0:de:cb:b2:83:fd:73:1c:1a:ca:8b:ef:7c:88:62:79:4b:b5:
         95:e6:bd:a2:1e:e7:68:7d:15:ea:c2:03:bc:b6:35:f5:58:53:
         db:44:95:c3:46:37:97:59:d5:63:a6:1a:8e:8b:8f:8c:19:8b:
         37:af:9a:de:1a:26:b7:a2:6b:18:fd:4e:34:10:cd:81:5e:f6:
         f4:cb:18:c7:4a:c6:01:cb:1b:8e:62:be:18:53:ad:e1:de:fc:
         2a:1d:a7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:56:08 2026 by rpki-client