Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/615e5ab9-af86-30b2-ab91-0233998ec4e1.roa
File:                     615e5ab9-af86-30b2-ab91-0233998ec4e1.roa (raw, json)
Hash identifier:          IqEs77nYOG5Mz7s4Ac28NWZAkl2J6i3GreUUSwNVFKE=
Subject key identifier:   B2:2D:73:A9:8C:92:E9:62:13:7E:57:07:06:36:8A:79:A7:E4:36:3D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D746FCF2462189E05008CD6D6
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/615e5ab9-af86-30b2-ab91-0233998ec4e1.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     3360
IP address blocks:        168.87.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:cf:24:62:18:9e:05:00:8c:d6:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=cdbf93bc-6abc-483a-a48f-215b5f6ada65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:29:53:b5:5c:c6:90:2d:7e:46:5f:4b:75:b6:
                    11:a7:49:e7:26:5f:9d:2c:8d:55:2c:c4:81:1b:0d:
                    2e:da:42:2f:aa:00:10:a8:39:91:0d:94:ce:c2:0d:
                    32:a4:40:82:a0:1c:a2:24:6d:09:eb:4f:52:97:f6:
                    ba:34:9b:b6:a7:8b:87:90:8f:4e:9b:19:48:ec:27:
                    f9:af:ea:86:66:f8:9b:17:eb:ff:bb:b6:32:f4:71:
                    78:48:de:7d:4c:a1:c7:be:29:b8:82:23:15:fd:b4:
                    32:92:d3:f5:22:cb:47:f7:f6:12:2f:a3:eb:a2:a0:
                    05:ba:1d:87:cc:0f:2c:fe:2a:eb:dd:2b:89:cf:32:
                    ab:b2:8d:04:cc:77:21:c1:41:cf:89:a3:83:3c:9b:
                    65:cd:79:69:db:76:cf:56:1e:1a:1e:e2:dd:ca:77:
                    3e:c2:37:30:26:44:e0:57:bf:32:04:4d:f9:ed:06:
                    35:cd:1f:b8:3b:93:cb:87:7f:e2:35:e9:65:b0:0d:
                    0a:78:a0:b7:57:dc:36:b1:5f:0e:8e:1e:50:cf:03:
                    f9:c9:50:d1:d9:c2:e6:76:37:02:06:21:86:76:a6:
                    df:2b:76:68:67:b3:a6:9d:55:ff:d9:89:69:cb:dc:
                    97:0f:7f:3b:d0:95:a5:02:4a:47:70:e4:fe:df:ab:
                    72:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2D:73:A9:8C:92:E9:62:13:7E:57:07:06:36:8A:79:A7:E4:36:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/615e5ab9-af86-30b2-ab91-0233998ec4e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:fc:b9:f4:e2:07:2d:84:15:a6:b3:0a:0f:bd:36:93:a6:f6:
         fe:0b:87:d0:37:f5:06:72:38:25:3a:8b:99:53:a0:1f:20:08:
         01:40:7e:61:67:bf:f3:c0:f4:49:99:e2:ce:45:c4:e5:d7:45:
         4e:b5:ed:df:a6:23:07:f8:fc:45:85:14:e0:7c:1c:7f:e9:fc:
         08:f0:6e:9f:30:13:2a:61:a2:fc:b3:c7:6c:d8:af:3e:3f:6a:
         b0:27:f5:b7:ba:4f:6b:12:a0:6c:c5:61:33:63:25:f4:17:fe:
         6f:2c:a3:85:11:5b:ae:79:d3:4c:3b:7c:16:3b:9e:aa:73:91:
         80:82:7f:62:58:c2:5a:cf:d8:51:b1:ff:8f:f8:e2:24:2a:dc:
         2f:17:75:74:76:2b:27:4f:74:bc:b5:45:77:62:97:cc:57:f6:
         31:12:75:dd:b9:da:a7:fd:75:cd:78:38:97:70:bc:34:ed:3c:
         71:f6:27:4d:d8:db:a0:f3:46:0c:c6:3d:67:e8:fd:98:e1:70:
         84:ec:e1:11:91:9c:ae:8a:18:4b:7c:5a:30:7f:ed:07:55:f1:
         53:cf:9c:7b:21:f1:be:3e:a2:2d:e5:fe:fb:5d:61:d9:4d:ee:
         a0:3c:8b:4e:00:42:50:de:5e:c7:f7:85:75:3a:e6:06:73:03:
         59:b4:6c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:55:39 2026 by rpki-client