Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/93ecb495-7f48-3c42-8d25-4fd7b69d556d.roa
File:                     93ecb495-7f48-3c42-8d25-4fd7b69d556d.roa (raw, json)
Hash identifier:          vnKkEoTSiIZ5al4f+xT7vU622p2bMcBpsfG4T+6MG7M=
Subject key identifier:   D1:32:F6:62:EF:10:A2:8B:3C:B5:CE:E8:A3:8D:08:A0:12:73:9B:AC
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D60E4EB1415734700B28E8698
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/93ecb495-7f48-3c42-8d25-4fd7b69d556d.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        168.87.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e4:eb:14:15:73:47:00:b2:8e:86:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=0ba687aa-2501-4913-b8aa-a8611c159b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:32:81:cb:09:0a:72:d1:1c:b4:c0:a2:7d:32:
                    10:83:b3:35:07:69:6b:63:2a:93:ab:6c:46:d7:7c:
                    de:46:6c:7d:7b:fa:5b:9b:7d:47:6e:c6:83:57:a7:
                    1f:e0:df:4a:c6:35:81:55:7b:c9:93:78:93:b9:bb:
                    cb:03:35:01:2c:51:69:d1:3d:2c:6d:09:54:7d:dd:
                    b1:af:aa:f2:fb:dd:e9:eb:b8:c5:1a:ab:ef:2d:f6:
                    83:e8:10:fa:a6:b3:59:d7:8e:9c:3a:42:76:f9:8c:
                    b0:36:c6:49:19:72:35:1c:77:6a:74:a5:c1:3d:35:
                    f4:07:83:c4:93:cf:51:ab:4c:55:ef:1c:07:99:2f:
                    b8:b9:6a:5c:5a:c3:15:7e:94:3b:09:07:a8:c7:44:
                    62:e8:18:75:27:e7:38:fd:db:b6:c6:c3:ba:d0:f0:
                    f9:46:5b:a8:4c:ae:06:5c:60:e8:8b:af:7a:78:66:
                    58:35:c2:b8:86:9e:2b:df:a6:ca:51:30:4f:d3:1d:
                    6d:56:0f:c8:4f:6a:d2:10:a6:3d:f2:55:ea:74:3a:
                    ae:76:c9:c6:50:13:02:a4:c1:36:d7:37:af:c8:e6:
                    a8:7f:af:33:2f:5f:c4:a4:a9:a6:3c:25:91:df:54:
                    91:38:aa:c2:da:ff:38:26:a9:07:1c:dd:24:ba:6d:
                    d2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:32:F6:62:EF:10:A2:8B:3C:B5:CE:E8:A3:8D:08:A0:12:73:9B:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/93ecb495-7f48-3c42-8d25-4fd7b69d556d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:05:85:7b:64:ff:f3:11:24:a9:f5:1a:89:46:75:6d:18:a6:
         ec:f2:f2:d1:a6:37:a1:c3:ce:af:2a:cb:b4:4e:65:5d:a5:d6:
         6e:1a:9a:cb:99:d0:0e:4c:31:10:9c:e7:2a:ec:57:25:20:a5:
         de:8c:49:69:43:72:fd:a8:1b:cc:09:d7:98:13:ed:36:d3:c0:
         31:31:34:39:31:33:d1:ec:2a:2a:12:5f:fa:ca:0a:bb:6d:14:
         fc:de:26:8f:8d:ec:36:20:12:73:76:b8:58:b4:74:0c:e5:84:
         ab:15:bf:e2:a7:bb:f6:22:9c:1f:6d:cd:a7:41:12:74:1b:9f:
         cc:05:b5:1f:4a:1e:11:9e:da:15:6f:93:75:6d:49:75:cb:2a:
         7f:bd:39:ea:8f:6d:5f:9a:84:21:bd:b3:88:1d:56:df:31:3a:
         2a:fc:60:74:93:5e:e2:8b:c3:69:d5:e0:ae:ac:e3:2e:be:7b:
         6b:9e:3b:0e:b5:a7:b4:b5:5c:d3:07:99:27:65:21:da:dd:e0:
         02:6f:92:36:09:c7:a8:69:8a:eb:71:95:61:98:b5:3f:83:2e:
         d3:fb:6f:08:b0:6b:5e:dc:4a:14:eb:cc:92:35:8e:fd:fb:d9:
         f8:33:72:a0:76:ac:f2:36:be:7d:9e:11:f2:be:6d:1a:f4:20:
         bc:2b:14:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:14:55 2026 by rpki-client