Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/47dc945c-a5b6-3ef0-833e-e1e7093222e6.roa
File:                     47dc945c-a5b6-3ef0-833e-e1e7093222e6.roa (raw, json)
Hash identifier:          7GVfkkj6F0l4W/dM+wpnggqij0mhsOfhhM1hJWNr/04=
Subject key identifier:   D4:9E:38:9C:67:01:20:79:41:29:FB:25:AD:51:20:D9:55:5E:46:A7
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EA445180B0330DA85731E0360
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/47dc945c-a5b6-3ef0-833e-e1e7093222e6.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     203
IP address blocks:        170.30.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:18:0b:03:30:da:85:73:1e:03:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=951e8cd5-8c10-4745-a686-9b7bcd6fd341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b9:64:a6:7e:c8:3d:5b:dc:3a:63:c2:8b:6e:
                    f4:ef:f7:59:4d:9b:87:d0:50:32:d7:94:8d:6c:f7:
                    10:69:48:d7:fd:be:e4:7a:bd:b5:4f:15:9a:a6:ac:
                    a7:75:59:36:27:85:06:f2:63:37:65:1b:c5:2b:8c:
                    35:ba:8b:38:12:74:d1:aa:b7:d8:44:e6:26:db:10:
                    16:4d:1f:dd:39:20:20:10:5a:5a:76:2a:bc:96:de:
                    4b:f1:c1:3c:3a:38:f1:2d:c2:67:e2:dd:20:c2:8e:
                    ad:25:ae:dd:4f:ad:2e:bf:c2:6d:38:7e:3b:8e:62:
                    88:95:4f:7b:95:03:2d:64:eb:33:60:17:f9:08:44:
                    a8:70:1f:2e:f2:2f:76:79:b1:9f:e8:3e:06:b2:f0:
                    ea:4c:e3:a2:55:25:98:14:5f:19:d1:4b:55:63:0c:
                    5a:61:b5:a3:b5:64:b6:94:df:a8:80:35:5a:cb:9d:
                    76:5b:7e:ed:30:d9:9a:81:ba:73:66:c1:63:13:17:
                    81:e6:9d:b9:eb:9b:8e:2d:19:d9:4c:a0:6f:98:3c:
                    3c:05:2e:d8:e8:2f:bd:ed:50:ae:ed:90:ee:d0:b3:
                    46:01:e4:19:3a:e0:f9:81:6b:f2:90:8e:08:7a:38:
                    41:69:9d:cc:8f:bf:3c:7b:2b:bc:7e:4b:62:66:60:
                    d6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9E:38:9C:67:01:20:79:41:29:FB:25:AD:51:20:D9:55:5E:46:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/47dc945c-a5b6-3ef0-833e-e1e7093222e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.30.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:bf:87:2e:24:b3:55:34:de:2e:cb:e7:ed:cf:8a:72:c2:f3:
         bd:9d:04:68:a5:da:c4:5a:2f:41:91:03:83:14:8b:57:e2:0e:
         ae:79:36:d1:0e:a2:ac:28:21:00:75:2a:a4:59:8d:d0:5c:87:
         63:99:e8:b7:3a:3c:e3:c5:50:85:c3:1b:12:46:ed:11:81:b0:
         55:94:28:09:e9:ce:0b:a4:8f:ee:13:ba:dc:dd:96:74:ed:7d:
         de:29:6b:63:20:f4:e3:5c:55:58:6f:f8:f9:ad:da:41:05:6f:
         df:1b:14:5b:73:a0:4e:cf:8c:23:8d:09:ac:d7:32:b5:6a:f7:
         24:6a:db:ee:51:d4:cd:bf:65:e8:53:a1:10:9b:d0:a9:e7:30:
         cb:c1:34:0b:5f:7d:86:9d:05:c4:2d:b9:17:df:02:23:64:8d:
         e8:5e:49:90:ca:51:d2:4c:df:30:d4:8e:11:b1:63:67:96:14:
         46:fa:e5:5a:3f:c4:f9:0a:c0:be:b4:36:dd:cf:eb:64:19:72:
         88:62:72:d0:51:31:58:59:05:0b:14:74:e6:8a:da:ed:41:d1:
         63:64:6b:f1:ec:27:ea:75:81:88:af:31:10:21:0b:bf:e2:55:
         43:04:89:c6:cc:86:59:12:23:9d:5c:05:7a:5a:31:3d:5f:6d:
         20:a4:b5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:12:12 2026 by rpki-client