Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c31c0e68-cb58-3b27-98be-258a8c64e534.roa
File:                     c31c0e68-cb58-3b27-98be-258a8c64e534.roa (raw, json)
Hash identifier:          4vo4k5DuaEz9AsKf67FCOOvIzharhFQwGDkNoJy2eG8=
Subject key identifier:   A8:86:15:5C:2C:06:8B:AE:E4:27:3D:F0:27:7E:D5:3F:23:AE:91:B2
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E07008ADF2A3F0D04F2514C7F
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c31c0e68-cb58-3b27-98be-258a8c64e534.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     16509
IP address blocks:        168.87.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:8a:df:2a:3f:0d:04:f2:51:4c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=1319fa16-aae2-4d2a-a618-a5ab3eb38961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:23:a9:97:c4:4c:f8:ae:b7:12:f2:29:ec:cd:
                    88:b0:60:b4:64:ed:b7:52:91:5d:64:a9:cf:59:fb:
                    c2:68:ff:d0:ba:d3:12:a2:0d:51:2c:cd:92:5e:10:
                    76:fa:ff:2e:8b:97:dd:4f:6c:40:77:96:ac:d3:bc:
                    9b:6f:75:b6:e8:23:ef:c6:a8:8e:6e:52:1b:3d:2d:
                    a2:6d:ed:aa:bb:1d:f4:50:e5:56:c9:64:c3:50:44:
                    93:3e:6e:68:6f:a3:5e:02:cc:e2:4d:e2:e3:26:dc:
                    d5:89:dc:9d:f3:91:00:e2:e7:39:23:eb:3e:74:ba:
                    15:dc:76:5d:c3:f6:fa:27:a4:1c:cb:6c:74:6a:95:
                    5f:b4:47:98:a2:d8:2f:0a:6d:08:ac:0a:a8:9f:bd:
                    fa:b0:24:b6:4f:10:e4:7b:f2:50:8d:2a:dd:e8:d7:
                    2c:2b:42:8c:cc:8f:71:79:69:d8:a6:8e:e1:5e:e2:
                    46:bb:a4:b0:bc:7f:45:45:bf:e5:09:f9:ee:93:ce:
                    89:8e:1e:9b:43:8d:64:0a:76:8f:8d:94:aa:11:95:
                    e3:72:ae:2c:33:ac:23:6e:cc:95:f9:9c:d5:d3:8c:
                    b2:f5:02:b8:52:13:75:76:48:93:1c:ff:9c:e4:5d:
                    ae:07:9e:31:ee:ec:87:70:e7:c7:ea:cf:e3:a1:df:
                    db:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:86:15:5C:2C:06:8B:AE:E4:27:3D:F0:27:7E:D5:3F:23:AE:91:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c31c0e68-cb58-3b27-98be-258a8c64e534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:ac:04:a6:66:e3:73:d2:9d:b6:1a:86:23:52:b9:6d:b8:28:
         b8:f7:be:ef:52:8f:81:ce:21:d0:31:f7:0a:c0:3a:35:44:cd:
         9e:ff:c6:ed:f0:d5:8c:5f:ab:c8:31:a5:fd:45:68:74:8b:26:
         ec:d8:c0:7a:74:84:3f:b6:f2:ca:7e:55:c4:c0:29:87:df:a8:
         09:c8:51:34:6e:e9:1b:bb:49:fa:78:8c:18:cc:fa:78:f8:1d:
         22:48:a9:89:2e:b0:6b:d8:59:b2:4b:b2:33:09:32:f5:bd:2b:
         0e:80:8b:e6:87:ce:e8:2b:21:ea:73:26:f6:f6:18:b9:aa:84:
         7b:29:30:c5:f2:99:70:80:c6:13:73:c4:84:29:87:f4:32:aa:
         b0:9a:1c:9b:92:5f:c8:10:4e:38:c2:65:79:f7:1a:1b:53:1c:
         69:83:2f:05:6b:22:9c:32:a1:38:fc:d4:dd:97:f1:51:04:e8:
         8b:95:18:9e:d3:dd:d7:58:5a:71:0f:60:c2:5a:a7:d0:4f:81:
         c1:6d:86:41:6e:9d:6f:16:97:73:97:48:e8:58:20:7b:3a:60:
         50:c0:35:97:fb:05:ad:cd:d5:7f:90:7d:3d:0d:a8:a6:31:b4:
         31:82:4e:30:c8:fd:2f:5a:22:0b:f3:d2:77:e5:0d:dd:a5:70:
         fe:ae:53:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:45:25 2026 by rpki-client