Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d285b726-e3ef-3abf-8761-d6f1f21f4450.roa
File:                     d285b726-e3ef-3abf-8761-d6f1f21f4450.roa (raw, json)
Hash identifier:          CdXhA2zo7sRdlYVLDK6VYgMkGTVISABX9dmaILh97jU=
Subject key identifier:   FE:2E:44:EF:6E:8D:72:3B:C6:6C:5F:39:A8:E1:85:75:14:11:10:60
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EA79A69DB6A18126C11D15D80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d285b726-e3ef-3abf-8761-d6f1f21f4450.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     202
IP address blocks:        168.87.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:69:db:6a:18:12:6c:11:d1:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a4750d76-c8e3-46cd-acd0-be7b4922078d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:77:86:69:c9:62:77:b2:0f:7e:c7:74:d4:06:
                    ae:56:96:93:f1:bf:df:0d:d4:a4:ba:14:a7:70:3a:
                    0e:7e:fe:cd:64:0c:58:0a:ac:02:28:b8:65:63:f8:
                    a2:5e:e9:39:88:e7:1b:b0:45:1d:fd:c0:c3:1e:df:
                    3d:c0:97:4f:94:aa:97:c1:5c:b3:9c:83:9c:0a:b2:
                    12:74:2c:af:64:24:ac:d1:e3:25:50:41:72:8a:ae:
                    aa:f0:af:9b:29:ee:a2:54:f9:f9:15:7a:a5:eb:55:
                    d7:8f:c5:38:06:30:a0:b5:4d:7f:bc:29:f9:87:e9:
                    f5:34:2f:6e:4f:d5:c6:fc:7c:e7:db:ab:e7:ba:5e:
                    80:02:2f:3a:55:01:bc:11:1b:59:9a:cf:83:f9:72:
                    9b:de:cc:c4:a8:b3:56:f3:1b:91:45:15:12:59:82:
                    3c:8e:63:b5:cb:3e:7e:7a:89:9a:8e:16:be:7e:7f:
                    b6:61:d8:35:5d:63:cb:12:3a:df:d0:1c:36:fe:d6:
                    2d:50:7b:20:26:ec:d8:5b:f3:2a:d0:80:f7:87:0d:
                    71:11:54:35:05:15:06:67:93:e9:45:9a:a3:51:99:
                    5a:e5:69:db:28:72:26:7b:d8:33:17:0c:aa:1c:1a:
                    ea:2b:7e:72:3a:0b:0d:6a:aa:50:84:1a:a4:ee:de:
                    eb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2E:44:EF:6E:8D:72:3B:C6:6C:5F:39:A8:E1:85:75:14:11:10:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d285b726-e3ef-3abf-8761-d6f1f21f4450.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:d5:91:49:e3:83:e8:92:50:b7:1f:96:37:cf:e3:5a:ac:9f:
         81:70:0a:4f:6c:4d:3a:94:17:de:14:86:de:5a:67:53:bc:c9:
         04:c6:f2:4d:3d:c9:cb:fb:f3:2c:61:04:95:2a:54:25:d5:44:
         f3:63:83:1b:a1:f4:01:19:2f:90:60:c3:67:b3:ed:5a:a6:5f:
         17:7a:8f:88:fe:38:8b:4b:6d:b1:38:60:56:6b:4d:76:08:27:
         4a:d4:6d:dc:a7:be:be:85:95:14:31:99:d6:74:49:7e:97:9f:
         5f:d1:7f:ef:5d:e9:e6:09:dc:06:a0:67:e2:96:c0:f2:5c:65:
         1e:91:6d:75:3c:37:f9:a5:f5:17:60:af:cb:76:19:ab:4f:0f:
         89:bb:09:cc:c0:bc:f6:d8:5d:61:09:1f:14:79:85:07:df:68:
         7d:60:72:d5:58:67:7b:65:f3:de:fd:c0:c9:a9:be:5e:0d:a9:
         c6:70:3f:07:14:3b:95:11:db:63:5d:18:78:0a:8b:06:35:80:
         0c:6d:10:26:2a:14:9c:ab:d5:0d:3d:a4:a6:0c:ae:6b:18:70:
         58:d5:81:8f:4a:c8:21:62:4b:18:3b:14:43:bc:58:72:bc:63:
         61:83:9b:2c:b0:f3:e3:b5:bf:1d:a2:bd:cb:04:ad:e4:8d:4b:
         09:39:5e:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmmnbahgSbBHRXYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YTQ3NTBkNzYtYzhlMy00NmNkLWFjZDAtYmU3YjQ5MjIwNzhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHeGaclid7IPfsd01AauVpaT8b/fDdSkuhSn
cDoOfv7NZAxYCqwCKLhlY/iiXuk5iOcbsEUd/cDDHt89wJdPlKqXwVyznIOcCrIS
dCyvZCSs0eMlUEFyiq6q8K+bKe6iVPn5FXql61XXj8U4BjCgtU1/vCn5h+n1NC9u
T9XG/Hzn26vnul6AAi86VQG8ERtZms+D+XKb3szEqLNW8xuRRRUSWYI8jmO1yz5+
eomajha+fn+2Ydg1XWPLEjrf0Bw2/tYtUHsgJuzYW/Mq0ID3hw1xEVQ1BRUGZ5Pp
RZqjUZla5WnbKHIme9gzFwyqHBrqK35yOgsNaqpQhBqk7t7rvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP4uRO9ujXI7xmxfOajhhXUUERBgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDI4NWI3MjYtZTNlZi0z
YWJmLTg3NjEtZDZmMWYyMWY0NDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqFf4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAHVkUnjg+iSULcfljfP41qsn4FwCk9sTTqUF94Uht5aZ1O8yQTG8k09
ycv78yxhBJUqVCXVRPNjgxuh9AEZL5Bgw2ez7VqmXxd6j4j+OItLbbE4YFZrTXYI
J0rUbdynvr6FlRQxmdZ0SX6Xn1/Rf+9d6eYJ3AagZ+KWwPJcZR6RbXU8N/ml9Rdg
r8t2GatPD4m7CczAvPbYXWEJHxR5hQffaH1gctVYZ3tl8979wMmpvl4NqcZwPwcU
O5UR22NdGHgKiwY1gAxtECYqFJyr1Q09pKYMrmsYcFjVgY9KyCFiSxg7FEO8WHK8
Y2GDmyyw8+O1vx2ivcsEreSNSwk5XnY=
-----END CERTIFICATE-----
Generated at Sun Aug 16 22:41:34 2026 by rpki-client