Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b8caf72d-4885-3c6b-a035-6ad6075d7ede.roa
File:                     b8caf72d-4885-3c6b-a035-6ad6075d7ede.roa (raw, json)
Hash identifier:          HV1Wv5wJdLIY31sRJ4+Zv9+W7BE9Oedl9hpWDYn3ab8=
Subject key identifier:   45:3D:98:F8:4E:79:8C:1E:3F:EA:BF:23:D1:9C:6D:33:AF:AB:3B:D1
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584CC611F95F527947EA07B45F00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b8caf72d-4885-3c6b-a035-6ad6075d7ede.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     3356
IP address blocks:        168.87.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:11:f9:5f:52:79:47:ea:07:b4:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=aa0b94a3-d7a8-4962-9234-ec6fe88090d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f5:df:5b:b4:3b:6d:4a:e3:07:8d:3c:c6:84:
                    08:9e:32:f0:c2:bf:07:a3:ee:7e:28:b5:2e:fe:b6:
                    c5:ca:cc:58:04:83:8f:e5:e9:d5:6a:ad:3b:82:75:
                    45:65:9c:74:24:85:d3:42:49:81:83:e5:35:bd:9d:
                    7b:a9:e0:e0:81:b9:ea:a5:5a:f6:4a:23:cc:ff:be:
                    b1:69:af:98:e7:ce:46:89:33:ff:ed:33:74:4e:a8:
                    49:10:bd:e0:6f:f3:01:e0:f4:1d:98:ed:2d:07:d6:
                    d3:2f:a4:50:96:1f:7a:de:71:19:18:5d:3e:ff:36:
                    60:75:67:f4:7d:87:8a:6e:6d:7e:08:30:d0:ea:63:
                    69:c9:91:0d:c1:3b:41:7a:d9:1e:be:aa:c3:38:6c:
                    9c:1e:ee:32:40:ff:22:02:aa:3c:0e:f6:ff:8a:08:
                    2d:8e:b8:4a:e4:10:fc:20:78:dd:b9:33:82:aa:d5:
                    1c:03:fd:72:97:cb:92:f8:9c:a4:1c:28:a8:c2:c6:
                    61:ff:e8:cc:00:b3:0a:13:42:8d:a5:41:07:7e:c9:
                    6c:83:ae:a4:20:fe:c5:ba:0a:0f:bf:bb:8f:19:18:
                    b2:ca:06:d4:13:48:6c:75:9a:8c:b8:f1:c8:cb:a1:
                    11:1d:fa:45:73:10:86:e1:6d:e1:a7:98:a0:8d:60:
                    ec:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3D:98:F8:4E:79:8C:1E:3F:EA:BF:23:D1:9C:6D:33:AF:AB:3B:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b8caf72d-4885-3c6b-a035-6ad6075d7ede.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:12:5f:03:c5:e4:5c:e2:0e:63:9a:56:1f:d1:98:1e:aa:a8:
         19:eb:44:08:0e:12:2c:a3:3e:d0:0c:72:df:38:cf:1a:07:db:
         77:90:94:49:8c:6c:9c:49:bb:8f:50:00:bc:c0:f8:0a:c1:19:
         66:e8:19:1a:b9:c9:d0:1c:3b:9a:bc:2e:06:5f:c2:a8:e6:18:
         97:23:3a:21:e1:e1:30:9f:0a:15:25:4e:41:f6:5e:df:33:d3:
         62:44:e4:e4:ad:a0:32:36:45:05:76:92:9b:d3:64:38:50:a5:
         4f:71:9a:0d:c4:8b:6e:be:ed:e9:d5:70:05:c4:e6:84:ce:ae:
         71:a2:9d:07:fd:b9:59:86:33:7e:0b:e2:aa:30:c2:d5:5f:99:
         b1:ba:4b:ce:c5:f6:a2:28:b7:96:89:51:80:8b:03:88:c0:56:
         c7:e4:25:cc:78:fe:56:2a:98:4c:f0:26:01:ea:c3:a0:31:05:
         d0:12:ec:9e:64:09:43:36:41:e3:d0:48:ae:ba:bb:c1:23:e9:
         6a:44:50:e9:dc:05:eb:6f:bc:e3:30:6f:99:5c:6b:a4:9c:b5:
         22:c0:02:4d:82:e5:07:9b:13:f3:9b:95:4c:3e:df:bc:99:f0:
         af:af:d4:8f:6c:15:1c:1b:e1:77:7b:2a:d7:a0:7b:ce:65:e1:
         83:43:f1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:36:56 2026 by rpki-client