Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/122705b2-78d4-3c36-885c-458994ce9745.roa
File:                     122705b2-78d4-3c36-885c-458994ce9745.roa (raw, json)
Hash identifier:          LG9RCgJXtH5Q9WEzqso1WE3bJhlZ4aiwp120U2IwhzU=
Subject key identifier:   39:0D:B3:0E:DD:E6:76:71:49:E7:22:6D:59:3B:D3:45:E5:4C:E4:6E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EE38CA003CBEB1B0A5E799400
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/122705b2-78d4-3c36-885c-458994ce9745.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     16509
IP address blocks:        168.87.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:a0:03:cb:eb:1b:0a:5e:79:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=c38f6b60-5b86-432a-939e-a42f250e4847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1a:d4:37:bf:58:e4:93:5c:50:ac:86:d3:fe:
                    a3:8e:b9:48:0b:ac:3e:0d:3d:4d:f9:75:54:23:c2:
                    72:b4:d7:54:eb:27:15:17:62:f5:7a:95:a6:6c:fe:
                    fd:00:b8:42:8e:5d:00:c7:0b:be:f0:e5:46:45:f7:
                    42:bc:97:03:9e:4b:f6:d9:b5:18:23:3a:5b:10:62:
                    06:ef:22:2a:a6:86:d8:b2:32:7e:7b:bb:ff:7e:97:
                    23:7c:30:5d:30:c7:ff:a4:d6:ec:94:3f:8b:85:19:
                    e8:42:c0:bd:53:89:ad:a7:38:34:19:49:8f:63:cc:
                    8b:61:5f:10:ed:55:de:cf:80:be:9e:1f:e0:d0:0c:
                    8d:c0:8d:ad:eb:6c:23:f4:35:eb:45:73:74:4d:bf:
                    9e:28:af:21:86:ab:60:92:de:2a:03:20:cf:63:72:
                    3c:e7:09:c6:7b:50:b9:35:b6:77:0a:e5:dd:fc:4a:
                    62:e3:57:18:d8:f7:56:30:eb:81:82:4a:14:42:3c:
                    b2:4d:f1:ba:af:ad:9f:4b:11:e9:8f:33:9d:e9:4f:
                    4a:73:bd:91:64:ca:ff:ea:c9:e4:37:50:30:dc:76:
                    54:40:5f:59:01:6c:75:db:f0:84:ce:a6:69:95:1b:
                    fc:42:ac:0f:fe:30:fe:ea:ee:c6:1b:01:65:f0:25:
                    4e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0D:B3:0E:DD:E6:76:71:49:E7:22:6D:59:3B:D3:45:E5:4C:E4:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/122705b2-78d4-3c36-885c-458994ce9745.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:0d:b3:b8:46:0d:ff:ce:9e:b9:e6:31:ad:ce:70:ff:00:de:
         ae:a8:e4:13:8a:48:fb:fd:b2:cb:33:4f:f1:17:fc:14:e4:7c:
         63:82:b0:98:8f:01:4b:b9:62:16:85:e5:e2:77:06:17:fb:a2:
         fa:89:0f:f3:41:f0:9e:82:d6:87:a7:90:6c:21:5e:22:c4:b2:
         e2:6a:cb:a3:03:4c:d0:4b:ab:6c:e9:d0:0a:7a:4c:dc:e0:f9:
         45:29:be:01:03:70:c2:3a:3f:aa:31:af:28:3e:cd:ba:df:76:
         96:b0:e4:1e:ae:3f:59:70:19:fd:2f:de:a3:9c:ba:82:30:7b:
         64:98:77:80:c7:2b:b0:49:ef:5f:96:e3:cc:49:7d:99:a5:c1:
         f4:21:ef:99:5b:f0:7b:f5:da:09:15:80:9f:31:87:27:2a:c7:
         fd:a3:09:76:f4:57:0e:fe:bb:bf:5d:22:74:1f:df:03:f1:b5:
         40:48:59:e1:65:41:83:27:70:39:72:4f:17:66:ca:c2:e6:a1:
         09:52:af:88:28:bd:14:7d:32:f7:66:0c:54:01:b0:4b:10:3e:
         ad:4c:0d:7d:08:97:d1:04:b2:b7:75:af:b0:ce:5f:fa:18:05:
         9f:25:bc:e9:3a:14:43:c8:a8:48:c3:36:44:5e:4c:20:a5:4a:
         79:29:71:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjKADy+sbCl55lAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk
YzM4ZjZiNjAtNWI4Ni00MzJhLTkzOWUtYTQyZjI1MGU0ODQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBrUN79Y5JNcUKyG0/6jjrlIC6w+DT1N+XVU
I8JytNdU6ycVF2L1epWmbP79ALhCjl0Axwu+8OVGRfdCvJcDnkv22bUYIzpbEGIG
7yIqpobYsjJ+e7v/fpcjfDBdMMf/pNbslD+LhRnoQsC9U4mtpzg0GUmPY8yLYV8Q
7VXez4C+nh/g0AyNwI2t62wj9DXrRXN0Tb+eKK8hhqtgkt4qAyDPY3I85wnGe1C5
NbZ3CuXd/Epi41cY2PdWMOuBgkoUQjyyTfG6r62fSxHpjzOd6U9Kc72RZMr/6snk
N1Aw3HZUQF9ZAWx12/CEzqZplRv8QqwP/jD+6u7GGwFl8CVOqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDkNsw7d5nZxSecibVk700XlTORuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTIyNzA1YjItNzhkNC0z
YzM2LTg4NWMtNDU4OTk0Y2U5NzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFe5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEwNs7hGDf/OnrnmMa3OcP8A3q6o5BOKSPv9ssszT/EX/BTkfGOCsJiP
AUu5YhaF5eJ3Bhf7ovqJD/NB8J6C1oenkGwhXiLEsuJqy6MDTNBLq2zp0Ap6TNzg
+UUpvgEDcMI6P6oxryg+zbrfdpaw5B6uP1lwGf0v3qOcuoIwe2SYd4DHK7BJ71+W
48xJfZmlwfQh75lb8Hv12gkVgJ8xhycqx/2jCXb0Vw7+u79dInQf3wPxtUBIWeFl
QYMncDlyTxdmysLmoQlSr4govRR9MvdmDFQBsEsQPq1MDX0Il9EEsrd1r7DOX/oY
BZ8lvOk6FEPIqEjDNkReTCClSnkpcYM=
-----END CERTIFICATE-----
Generated at Sat Oct 3 08:07:08 2026 by rpki-client