Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/38af7f86-7c7b-3de3-a063-278249ef1fed.roa
File:                     38af7f86-7c7b-3de3-a063-278249ef1fed.roa (raw, json)
Hash identifier:          O51Iy1MzBZMfuLyZy7/rgWW/oWFFxAlQUMN7igcrb5o=
Subject key identifier:   9B:AC:BF:8E:53:FF:AE:9C:8B:7A:C6:CB:DF:1A:D0:DA:5F:9A:81:CD
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584CE3620BDBD7A4A06BD786AC80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/38af7f86-7c7b-3de3-a063-278249ef1fed.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     3356
IP address blocks:        170.30.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:0b:db:d7:a4:a0:6b:d7:86:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=7dcfb5c6-6a62-4b21-b230-a0efc0f692cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:af:da:fe:16:30:91:86:53:c1:46:66:a5:ba:
                    19:65:a4:ea:9c:de:62:60:55:24:dc:2e:eb:2e:7b:
                    95:c6:70:e2:d3:11:65:63:0e:6d:69:a1:b0:ae:e8:
                    38:95:2a:54:fa:02:92:f9:98:25:43:4c:2a:13:1d:
                    78:37:91:b0:65:f4:d1:62:dd:06:5d:37:13:73:f1:
                    da:df:91:be:71:bf:41:42:73:35:85:fc:09:96:f8:
                    19:d9:fb:86:57:03:e2:c3:74:cc:ea:33:62:17:80:
                    f6:12:ab:df:2a:d8:a4:63:68:79:a8:75:00:36:05:
                    2b:7b:8c:2c:b2:09:14:31:d4:75:46:8d:79:a6:dd:
                    a0:0d:0b:09:b0:ce:89:76:bc:37:c5:b5:13:27:9e:
                    02:33:00:33:ac:ef:59:67:12:fb:9e:77:3b:90:91:
                    f4:a3:a7:c2:cc:07:0e:b6:82:16:20:7d:69:42:a7:
                    03:4f:30:e7:49:26:76:c9:43:c2:5f:c4:f0:5e:b0:
                    dc:c4:25:b9:4f:00:6b:2e:27:05:d3:37:73:72:ee:
                    3f:cc:d1:f9:96:6d:e8:39:65:b5:78:92:c9:b0:a8:
                    d0:16:a5:b9:64:c1:33:3a:56:86:88:eb:a2:f7:e2:
                    91:39:fa:61:91:df:b2:42:de:b3:dc:45:6b:d3:b3:
                    58:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AC:BF:8E:53:FF:AE:9C:8B:7A:C6:CB:DF:1A:D0:DA:5F:9A:81:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/38af7f86-7c7b-3de3-a063-278249ef1fed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.30.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:7e:26:87:6c:4a:4c:36:90:08:b6:42:73:de:be:a8:36:e9:
         e6:16:50:2d:08:04:25:86:6d:ad:8f:d5:0b:2a:53:c2:d4:cb:
         47:47:22:7d:45:81:98:39:24:85:ea:be:b0:a7:41:b8:10:7f:
         c1:fe:78:ab:9d:9d:90:5b:c9:1f:f3:22:24:3c:c0:61:dd:c9:
         d7:0f:3d:1b:83:f8:51:53:1e:cb:20:79:4a:b3:ff:d3:3c:6c:
         82:db:7a:2f:80:b9:64:3f:9b:3e:e9:c6:f7:c9:2e:db:16:cb:
         d5:47:89:ba:2e:ac:bb:51:c4:98:4e:74:07:c4:54:dc:e9:82:
         54:e5:14:38:ca:71:e4:26:e9:04:62:c2:07:ed:63:ce:2e:0d:
         d9:d5:58:14:65:79:a8:90:5e:64:b3:a2:a1:85:a7:c4:e2:f7:
         53:d9:98:85:12:2f:0b:1d:37:9f:63:43:c9:f4:cd:7b:8b:ae:
         21:e8:1a:19:d9:cd:05:b1:dc:b1:cb:69:a7:db:0a:fb:fa:85:
         67:11:99:f5:bb:66:86:8e:9d:f2:90:07:8f:d9:30:75:bd:9b:
         e5:15:6c:c9:3b:f2:bc:ff:ce:22:e2:53:a7:62:e0:c0:2f:77:
         52:50:fd:a2:66:04:99:2f:f6:d9:2d:fb:02:39:93:da:21:d5:
         8a:e7:f2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:26:27 2026 by rpki-client