Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d8f0e064-c046-3177-84e5-e5cac5777f75.roa
File:                     d8f0e064-c046-3177-84e5-e5cac5777f75.roa (raw, json)
Hash identifier:          QXDWupUixNkgAFVRxCvOGtk4KLggVV9akxC6W1QUco0=
Subject key identifier:   58:65:BE:75:3D:91:BF:08:BC:6D:80:5A:63:98:9F:E4:F9:E2:D8:9D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E0005EA44D145FD7741230E40
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d8f0e064-c046-3177-84e5-e5cac5777f75.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     3356
IP address blocks:        168.87.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:ea:44:d1:45:fd:77:41:23:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=b7ba9032-4c65-4aa9-ae21-0012d7329b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e6:22:c7:1c:63:65:b3:e7:24:62:df:c0:5e:
                    75:00:ed:c7:80:f5:d6:14:3d:89:eb:08:c6:2a:ef:
                    f4:12:13:b2:da:56:b9:5f:b6:79:8d:45:97:34:6b:
                    6a:e5:e3:9f:97:51:e9:9f:ad:9f:5b:44:45:a3:30:
                    9b:5a:d9:46:18:c9:a0:6f:05:af:16:42:5b:6e:bc:
                    5d:8d:e7:72:9d:ee:d9:df:01:31:1f:d7:6e:1d:f7:
                    bb:b4:95:db:18:3e:b1:b9:3b:4c:e8:87:fe:5b:b3:
                    3d:0c:60:ed:47:08:44:a1:c4:bc:92:80:b2:08:09:
                    5c:49:41:fc:54:94:39:fd:68:ff:81:08:a1:a9:f2:
                    77:00:2a:16:6a:a5:6c:a3:46:be:6b:1b:03:1c:8c:
                    f6:7c:b8:d7:cd:dd:94:1c:58:2f:8f:3e:9a:f9:97:
                    c9:1d:02:09:8c:3b:6d:3c:b6:b3:d1:cd:44:ec:8d:
                    ed:81:c7:90:f5:2d:d7:44:ed:80:20:ff:06:33:8e:
                    34:86:72:4d:16:f7:70:dd:a7:ce:28:2c:10:7f:cd:
                    e0:ac:75:09:c1:01:92:30:be:75:fe:1e:f7:6a:97:
                    c3:be:50:66:b5:02:c0:ed:38:dc:5d:f0:70:0d:3a:
                    b1:8d:d9:cb:3d:50:85:05:22:1a:02:95:a8:42:35:
                    50:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:65:BE:75:3D:91:BF:08:BC:6D:80:5A:63:98:9F:E4:F9:E2:D8:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d8f0e064-c046-3177-84e5-e5cac5777f75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:15:d4:39:f1:f8:06:c5:dc:98:57:8a:1d:57:7a:82:38:58:
         e3:8f:b2:24:18:b2:5c:a8:0c:40:09:72:10:92:3f:ab:6d:1b:
         22:2a:7d:63:e7:3b:cb:4e:a8:53:04:47:4b:76:a7:71:5c:b2:
         6c:69:43:1c:69:65:58:95:8d:4f:b3:4f:9d:ec:04:a3:e3:ac:
         3a:2d:b0:14:e9:20:ae:03:56:a5:d7:5c:b7:2d:8f:30:cb:7b:
         57:63:49:12:8d:35:18:0c:3b:17:ac:d5:98:0e:cc:79:75:cb:
         e1:38:04:c9:fb:7b:6f:71:77:f1:79:cc:9a:6d:52:80:47:89:
         f9:57:88:75:61:e7:b7:b5:ad:63:84:6e:7a:e3:a8:b4:dc:c2:
         a4:3b:32:7c:97:69:b4:ec:8b:1e:06:4d:26:30:01:75:1c:c7:
         5c:26:27:eb:d1:6a:d3:f8:c7:b0:79:22:a8:4f:37:64:88:04:
         e4:56:4f:2e:2c:0c:72:2a:64:4a:ea:6f:3a:db:69:60:22:a5:
         1b:23:e8:1e:69:c4:d2:0c:1c:6e:9c:21:fb:cd:e5:f2:3f:b7:
         0c:8a:db:ff:9b:96:43:74:b4:0a:cb:9a:3e:96:f2:50:bb:87:
         7f:2b:c1:44:52:38:52:db:ad:f9:fb:91:b4:87:d6:ee:41:0d:
         54:5c:eb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 12:42:35 2026 by rpki-client