Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fa746abc-4b66-3a74-baa2-78cac410dcb4.roa
File:                     fa746abc-4b66-3a74-baa2-78cac410dcb4.roa (raw, json)
Hash identifier:          zm3ZefsF4i2zrmrj9sh9uw15pUSM3zq0qSl+YxT5lx8=
Subject key identifier:   70:C2:FB:8E:DE:9F:12:4A:34:4F:63:D4:00:48:67:24:AA:38:78:5B
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584F46A7E8902D51C44AF35F7380
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fa746abc-4b66-3a74-baa2-78cac410dcb4.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     3356
IP address blocks:        170.30.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:e8:90:2d:51:c4:4a:f3:5f:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=85e3b64b-df9e-4d54-b1f3-aed0fd62bb6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b0:81:ff:4c:00:71:38:a2:78:f0:21:f2:36:
                    40:4a:29:27:a9:cb:41:6f:8f:c1:3b:9a:4a:55:79:
                    a6:0f:73:cb:72:7d:8e:83:24:7c:d9:a0:7c:56:64:
                    ec:92:6e:46:30:0b:3d:95:86:90:f6:97:7a:af:18:
                    1b:9a:bb:e7:7f:ba:22:86:ce:4f:b3:32:63:a4:4c:
                    f4:15:89:3e:6a:be:18:b2:bb:b0:c9:c6:ce:81:af:
                    88:0b:3c:72:a9:92:54:e2:00:e5:8d:c8:ee:c4:0b:
                    dc:af:cb:76:bc:88:09:3b:2b:d8:2a:98:e9:a8:e7:
                    f9:d6:ee:31:ca:ba:a9:70:e2:b4:70:11:99:7f:69:
                    ef:d7:e3:62:9e:5d:10:64:06:b7:e5:9d:e1:a6:7a:
                    f5:1c:7b:36:b9:70:21:f4:97:32:78:94:54:b2:19:
                    e4:55:64:d5:65:92:70:91:cd:44:3b:fa:0e:c6:11:
                    e3:76:8c:33:e0:5e:cc:25:2d:69:42:73:b7:e1:e7:
                    55:f4:87:ff:4f:fe:0b:3b:20:86:e3:99:0d:8a:e0:
                    cd:bd:7b:e0:c7:a0:b6:9b:ed:d4:00:df:e2:e5:22:
                    cb:00:cd:5d:0d:1c:36:9d:fc:0d:1f:0c:b1:d6:ff:
                    3b:6e:63:f6:7f:03:22:eb:16:20:8b:49:69:c6:ea:
                    6f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C2:FB:8E:DE:9F:12:4A:34:4F:63:D4:00:48:67:24:AA:38:78:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fa746abc-4b66-3a74-baa2-78cac410dcb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.30.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:ba:82:7c:97:d0:bb:c1:64:72:22:cb:22:b6:b3:39:42:f3:
         56:5c:2a:ea:8d:6e:2a:6f:81:12:81:6f:14:af:5c:f7:90:7d:
         c3:24:85:b5:f2:89:9b:be:1f:2f:9e:94:3a:ea:ea:a6:a9:16:
         c8:df:01:e6:df:d6:35:08:53:14:bc:8b:3e:31:97:84:bf:3f:
         89:d3:10:7e:28:ed:a9:2f:9e:d2:c2:d0:d6:59:2b:95:68:4e:
         5c:86:7b:0c:1e:4a:70:f9:6b:9d:3c:5d:71:d8:ad:c4:64:99:
         28:3b:0d:72:3b:08:06:00:6e:f4:6c:a4:4f:a4:12:84:b2:70:
         9f:cd:e8:80:a9:2e:60:58:91:23:14:b2:98:4a:53:84:6b:4b:
         af:6d:01:71:3e:33:4d:7a:76:3a:8c:76:7c:a0:7a:55:64:20:
         59:24:64:4c:8f:06:3f:1b:8c:f7:bb:68:83:49:35:fa:68:d6:
         cb:98:b1:ce:3c:76:00:88:ec:ba:27:85:ed:e2:34:e4:41:1f:
         60:6d:da:c9:7b:e7:16:9f:42:b2:1e:46:96:5c:1e:ba:c1:78:
         23:68:6d:8d:a3:72:be:00:ec:4d:b7:36:6a:2e:1f:96:25:b8:
         54:a2:2e:82:33:a7:f9:95:d7:7a:82:13:8c:c2:ec:9e:27:aa:
         c7:20:db:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:50:00 2026 by rpki-client