Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8b41c2fa-e50f-3a94-9a50-475a88935f33.roa
File:                     8b41c2fa-e50f-3a94-9a50-475a88935f33.roa (raw, json)
Hash identifier:          sx3C+BwbWxPqYtMN9LrGbC+So6aFyNJ5g9rQIZggkp8=
Subject key identifier:   D0:2D:D9:D2:71:C8:03:44:4A:7A:DB:22:80:F6:F1:69:4C:D6:48:D0
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BB2F7BFEE6BC84C2E0A56BE00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8b41c2fa-e50f-3a94-9a50-475a88935f33.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     203
IP address blocks:        168.87.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:bf:ee:6b:c8:4c:2e:0a:56:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=eea8f4df-4011-4e35-9b74-9505e3a4a845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:60:95:2a:e1:09:62:8b:57:02:c4:b5:d9:3b:
                    cd:f8:a5:24:73:76:66:ad:bf:23:7d:a8:28:42:14:
                    b4:79:fa:b2:85:7e:44:21:67:03:e7:52:d4:51:8b:
                    5a:44:d8:1f:9d:b0:6d:97:37:ac:b9:a6:c8:c1:d8:
                    98:61:e2:42:c6:15:14:4f:a2:af:52:f4:be:ff:21:
                    07:63:5a:6d:d0:25:e1:20:ae:26:7d:58:c2:1b:fb:
                    e2:46:41:ac:53:4f:34:10:6f:64:fe:f8:b9:62:25:
                    a4:78:25:42:1f:20:0e:ac:2b:98:62:b1:ee:ba:80:
                    56:ed:6b:77:f3:9a:ac:12:84:76:06:93:ec:7b:7f:
                    8d:5f:35:04:ce:83:b8:aa:1f:60:d7:54:15:20:81:
                    5c:78:21:2c:97:90:06:7b:af:cc:4b:64:d5:09:8b:
                    8b:9b:97:a4:f0:92:cd:79:8a:da:1b:91:99:5b:fa:
                    b0:f5:4d:bb:cf:4c:77:c0:c0:df:cd:af:9a:9d:dd:
                    bf:08:d6:1c:42:3b:68:0e:6c:2f:d0:68:10:ee:2a:
                    e6:22:90:bb:44:20:2d:ed:2a:50:bf:d8:82:20:bf:
                    c3:e4:38:47:3b:c2:e8:d5:2e:f4:39:c4:29:d6:e6:
                    6e:7d:db:82:48:69:08:f1:7a:c7:06:f0:57:71:3d:
                    c3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2D:D9:D2:71:C8:03:44:4A:7A:DB:22:80:F6:F1:69:4C:D6:48:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8b41c2fa-e50f-3a94-9a50-475a88935f33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:43:dc:a8:21:7c:ec:d1:32:79:70:13:29:a6:c4:c2:06:34:
         52:bb:67:87:72:83:0c:f3:06:40:56:e0:28:82:49:53:a2:45:
         86:15:f9:5b:64:64:57:c2:a9:3e:07:0f:41:10:62:cd:e9:69:
         4a:3e:3f:63:7a:a8:1c:b4:1d:43:4e:94:8d:f8:8a:0a:b5:34:
         e8:2d:30:73:0c:a7:d7:ba:7d:58:9d:fa:65:f9:66:4a:da:fd:
         2b:18:1b:bd:4a:0a:fd:ae:16:d8:c9:e2:95:43:71:5d:c0:60:
         d0:87:1a:00:8f:c4:78:b8:70:36:1e:9a:2a:2f:23:87:dd:3e:
         7a:5e:22:f2:45:ed:26:60:d3:d5:21:7d:15:3f:b4:9d:0d:12:
         02:1e:25:23:57:ae:e0:9d:86:43:e0:f2:f5:2b:78:ca:64:c1:
         1f:93:d4:bc:5d:be:a3:ea:c0:b3:c8:8c:87:23:60:23:94:c4:
         7b:e6:9d:27:7c:cb:1b:7d:7d:e5:8e:c0:55:87:e9:4a:d2:68:
         32:14:9e:e4:fc:0b:4e:f2:4b:9f:86:35:92:46:40:3b:ff:5d:
         b5:95:98:bb:e2:ef:97:41:cd:a3:3c:88:67:21:20:14:16:f9:
         a9:94:d0:c0:ad:3a:c0:9f:57:26:88:01:0c:88:f2:16:45:54:
         27:27:ba:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy97/ua8hMLgpWvgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk
ZWVhOGY0ZGYtNDAxMS00ZTM1LTliNzQtOTUwNWUzYTRhODQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mCVKuEJYotXAsS12TvN+KUkc3Zmrb8jfago
QhS0efqyhX5EIWcD51LUUYtaRNgfnbBtlzesuabIwdiYYeJCxhUUT6KvUvS+/yEH
Y1pt0CXhIK4mfVjCG/viRkGsU080EG9k/vi5YiWkeCVCHyAOrCuYYrHuuoBW7Wt3
85qsEoR2BpPse3+NXzUEzoO4qh9g11QVIIFceCEsl5AGe6/MS2TVCYuLm5ek8JLN
eYraG5GZW/qw9U27z0x3wMDfza+and2/CNYcQjtoDmwv0GgQ7irmIpC7RCAt7SpQ
v9iCIL/D5DhHO8Lo1S70OcQp1uZufduCSGkI8XrHBvBXcT3DuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNAt2dJxyANESnrbIoD28WlM1kjQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOGI0MWMyZmEtZTUwZi0z
YTk0LTlhNTAtNDc1YTg4OTM1ZjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFeeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJdD3KghfOzRMnlwEymmxMIGNFK7Z4dygwzzBkBW4CiCSVOiRYYV+Vtk
ZFfCqT4HD0EQYs3paUo+P2N6qBy0HUNOlI34igq1NOgtMHMMp9e6fVid+mX5Zkra
/SsYG71KCv2uFtjJ4pVDcV3AYNCHGgCPxHi4cDYemiovI4fdPnpeIvJF7SZg09Uh
fRU/tJ0NEgIeJSNXruCdhkPg8vUreMpkwR+T1LxdvqPqwLPIjIcjYCOUxHvmnSd8
yxt9feWOwFWH6UrSaDIUnuT8C07yS5+GNZJGQDv/XbWVmLvi75dBzaM8iGchIBQW
+amU0MCtOsCfVyaIAQyI8hZFVCcnupE=
-----END CERTIFICATE-----
Generated at Mon Nov 3 21:12:15 2025 by rpki-client