Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2b8b37d4-6402-313e-8eec-4b3538fb036e.roa
File:                     2b8b37d4-6402-313e-8eec-4b3538fb036e.roa (raw, json)
Hash identifier:          Ob3iP6vSqWLCDIDPgtNpawhoVDY3QgPuK5M88LgiS7A=
Subject key identifier:   9E:C3:ED:44:71:2A:34:3A:82:2E:E3:9F:14:97:6E:00:75:71:A8:9C
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EA7942303ABD4A3F67567AF08
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2b8b37d4-6402-313e-8eec-4b3538fb036e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     3360
IP address blocks:        168.87.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:23:03:ab:d4:a3:f6:75:67:af:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=cfa1a0b8-f1d1-417b-90c7-ff2db3c2f37e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ae:fa:23:fb:c4:6f:e4:e9:1e:98:2c:de:4d:
                    62:87:f7:d8:a8:bf:fa:a9:e4:15:b0:8a:14:0b:94:
                    77:d0:81:bd:4b:b6:4e:b1:b8:29:6b:86:40:7d:1f:
                    5c:6d:a9:e7:39:f7:fb:95:09:be:a1:e6:df:be:c5:
                    a2:ab:8a:ea:ea:95:6c:d2:45:4c:87:f1:3c:e1:1e:
                    0e:ed:50:f3:26:94:8b:ef:c2:e2:cb:0a:64:01:22:
                    09:ac:02:14:16:62:34:b4:e4:81:dd:0b:1b:72:b8:
                    af:32:25:37:48:9f:d9:13:7f:c7:eb:25:70:25:d7:
                    cc:15:80:11:fb:20:e7:bd:96:ed:a6:3f:5c:4b:80:
                    dc:52:84:87:0d:bc:05:7a:46:b2:ee:1d:b7:a5:66:
                    30:b4:88:50:44:9b:d6:f4:17:a5:22:b5:15:0e:7e:
                    9e:12:01:00:61:22:ee:52:e2:34:18:cd:93:a4:7a:
                    5d:27:f3:d3:aa:a4:be:94:4a:6e:90:80:82:29:7c:
                    82:12:0e:93:31:49:97:3c:38:54:71:b0:75:df:fc:
                    3e:5f:33:d1:ca:4b:06:28:57:1d:8b:5d:aa:5d:e2:
                    c9:a0:7e:f5:59:df:1c:38:6f:10:46:cc:d9:23:4e:
                    6e:49:c6:5c:3e:ca:34:54:d7:6f:84:4e:3e:a8:53:
                    69:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C3:ED:44:71:2A:34:3A:82:2E:E3:9F:14:97:6E:00:75:71:A8:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2b8b37d4-6402-313e-8eec-4b3538fb036e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:8d:b4:6f:e7:dc:0f:46:e5:db:6d:12:61:ed:35:5d:62:ce:
         1c:f7:53:54:6a:e8:a3:99:b8:6e:b6:f8:9a:4b:6b:8d:13:39:
         20:27:62:ae:9c:c6:24:ba:75:2f:bc:c7:6f:67:9f:d1:4b:00:
         26:f9:71:a5:c3:25:65:98:ab:1c:0a:c3:7e:6a:42:a8:ea:93:
         3e:56:ce:5f:ea:99:fa:af:3e:59:14:c1:f5:ab:cd:6c:85:5f:
         c0:f3:c6:92:2a:15:71:35:e2:61:59:2d:10:c5:25:18:84:85:
         b8:9f:73:fd:62:a8:a8:f0:74:b6:c3:65:11:0c:12:16:34:c1:
         07:d3:3a:d6:d8:98:f0:c4:39:7f:83:98:5f:5e:b3:81:ea:d3:
         49:4d:44:aa:5b:6b:f6:f5:86:49:3d:3d:e9:13:b4:73:ae:e2:
         3b:fc:ad:c4:e2:25:28:85:e3:b4:eb:12:ae:d8:ca:6d:12:b8:
         9c:c3:71:a1:cb:49:62:99:e4:23:80:af:e9:05:76:fc:a3:69:
         a7:80:d7:6d:76:ff:11:c7:d1:7a:a4:33:09:a3:f5:da:85:1d:
         b6:d4:95:d0:91:a8:97:22:cd:dd:92:db:98:8d:77:0f:e3:5b:
         6d:d6:d8:3e:9b:8f:6e:85:5e:0d:9b:2f:27:6b:c7:17:b0:e8:
         34:96:ee:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:12:23 2026 by rpki-client