Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3076825f-779a-33e3-b5cb-1e7a30184012.roa
File:                     3076825f-779a-33e3-b5cb-1e7a30184012.roa (raw, json)
Hash identifier:          a4IRHbVl1JRw69eyi5bvQm6wzmGqzEco0ua/AMPU/ZQ=
Subject key identifier:   3B:7B:74:D8:F3:89:7C:0E:2E:8D:2F:A5:18:D3:EB:8B:5B:6B:4F:25
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D0BEDA621F25FC600504BDEA0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3076825f-779a-33e3-b5cb-1e7a30184012.roa
Signing time:             Tue 03 Mar 2026 14:34:18 +0000
ROA not before:           Tue 03 Mar 2026 14:34:18 +0000
ROA not after:            Mon 01 Jun 2026 13:34:18 +0000
asID:                     3360
IP address blocks:        168.87.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0b:ed:a6:21:f2:5f:c6:00:50:4b:de:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  3 14:34:18 2026 GMT
            Not After : Jun  1 13:34:18 2026 GMT
        Subject: CN=e1f1c1b7-d60e-494f-8ed0-58c1af65ddaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:1a:c5:6f:ce:c5:37:40:5e:bd:1c:a1:2b:81:
                    f8:3e:22:a0:57:51:a6:c1:df:ae:d8:22:84:b0:13:
                    12:f7:27:31:18:17:05:ed:e7:06:0a:d6:23:7a:17:
                    6f:fb:6b:b9:0d:20:d1:97:c2:48:96:41:a4:8e:47:
                    45:ad:8b:32:76:bc:ba:f3:ff:9e:04:eb:c6:2d:65:
                    2b:61:5e:42:9b:72:0d:44:df:ee:04:d8:1d:be:64:
                    9d:88:d0:cc:8c:59:4f:63:8f:be:2d:90:39:10:02:
                    87:9a:fb:d3:fa:ba:ec:dd:e0:9b:55:92:f4:ee:40:
                    4f:d8:b3:b7:9c:c6:29:e4:e8:bc:26:e9:68:06:e7:
                    16:bc:9c:fd:85:dc:9f:40:9e:34:46:88:96:b6:32:
                    4d:f0:04:f1:31:14:68:ee:79:1c:46:12:5d:ca:57:
                    0a:b5:c4:18:31:30:b8:58:32:5f:bd:6e:5f:0d:de:
                    df:a0:0b:f9:6c:27:43:99:ab:2e:04:81:66:f1:c9:
                    64:11:c3:09:3a:7a:b0:bb:51:18:c6:b5:cb:ee:c7:
                    63:de:cf:c9:12:97:57:40:61:c3:02:bd:68:73:87:
                    64:40:f1:4d:38:35:0c:f3:f7:30:c9:b5:08:c7:42:
                    59:98:42:c2:f3:86:e5:22:a7:62:d6:a3:8d:ac:d8:
                    19:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7B:74:D8:F3:89:7C:0E:2E:8D:2F:A5:18:D3:EB:8B:5B:6B:4F:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3076825f-779a-33e3-b5cb-1e7a30184012.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:4b:4f:7a:31:cd:b6:03:bb:c7:24:35:57:4f:9f:74:13:2b:
         c2:12:c3:74:15:ea:ac:44:6e:7a:96:42:43:62:f4:5d:07:5a:
         e2:32:5b:45:0e:5f:8c:ef:e7:25:2b:f6:18:ac:be:ba:a7:52:
         33:37:08:9b:40:40:ad:10:01:85:bf:59:3e:7f:2c:3c:42:30:
         36:10:79:de:a5:59:46:65:18:b6:4e:be:6c:b0:85:e2:cd:fc:
         24:db:41:0b:97:1c:2b:4c:0d:b5:93:69:c4:e5:25:3d:0d:1c:
         d3:5c:a6:69:f9:59:09:cd:6a:56:fe:97:fe:4c:a2:7e:54:cc:
         a2:88:c5:30:07:c5:e3:4a:c3:83:94:13:b5:08:60:04:c9:09:
         6d:de:17:41:08:b7:89:28:07:20:4a:d4:64:8a:7a:71:df:c9:
         d3:47:4f:4a:52:96:16:4c:8d:33:1d:e0:62:34:14:a0:2e:ae:
         3b:4a:ff:9d:66:ec:9a:34:34:b8:ba:3c:8d:39:34:3f:38:5b:
         50:d1:b4:0e:79:cd:f5:23:d3:bd:1d:4e:94:94:da:24:c4:ac:
         2a:06:b3:dd:c7:40:5c:36:43:d5:47:3d:d4:79:5d:08:ab:bd:
         a6:42:73:6c:2d:87:ad:89:7e:e3:64:ae:be:57:17:cd:f3:8f:
         82:f2:cb:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0L7aYh8l/GAFBL3qAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDMwMzE0MzQxOFoXDTI2MDYwMTEzMzQxOFowLzEtMCsGA1UEAxMk
ZTFmMWMxYjctZDYwZS00OTRmLThlZDAtNThjMWFmNjVkZGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+RrFb87FN0BevRyhK4H4PiKgV1Gmwd+u2CKE
sBMS9ycxGBcF7ecGCtYjehdv+2u5DSDRl8JIlkGkjkdFrYsydry68/+eBOvGLWUr
YV5Cm3INRN/uBNgdvmSdiNDMjFlPY4++LZA5EAKHmvvT+rrs3eCbVZL07kBP2LO3
nMYp5Oi8JuloBucWvJz9hdyfQJ40RoiWtjJN8ATxMRRo7nkcRhJdylcKtcQYMTC4
WDJfvW5fDd7foAv5bCdDmasuBIFm8clkEcMJOnqwu1EYxrXL7sdj3s/JEpdXQGHD
Ar1oc4dkQPFNODUM8/cwybUIx0JZmELC84blIqdi1qONrNgZQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDt7dNjziXwOLo0vpRjT64tba08lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzA3NjgyNWYtNzc5YS0z
M2UzLWI1Y2ItMWU3YTMwMTg0MDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFdQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG9LT3oxzbYDu8ckNVdPn3QTK8ISw3QV6qxEbnqWQkNi9F0HWuIyW0UO
X4zv5yUr9hisvrqnUjM3CJtAQK0QAYW/WT5/LDxCMDYQed6lWUZlGLZOvmywheLN
/CTbQQuXHCtMDbWTacTlJT0NHNNcpmn5WQnNalb+l/5Mon5UzKKIxTAHxeNKw4OU
E7UIYATJCW3eF0EIt4koByBK1GSKenHfydNHT0pSlhZMjTMd4GI0FKAurjtK/51m
7Jo0NLi6PI05ND84W1DRtA55zfUj070dTpSU2iTErCoGs93HQFw2Q9VHPdR5XQir
vaZCc2wth62JfuNkrr5XF83zj4LyyxI=
-----END CERTIFICATE-----
Generated at Wed Mar 11 20:50:44 2026 by rpki-client