Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/76f14843-e2cf-31da-a1e8-bb52d751b599.roa
File:                     76f14843-e2cf-31da-a1e8-bb52d751b599.roa (raw, json)
Hash identifier:          6hQPHUFhdVqrLakfrg3XekjlcbCix/XDZEL+e7soidg=
Subject key identifier:   F1:0C:79:D9:7C:24:78:89:E7:D4:1A:B9:6E:DC:F1:6D:93:41:B8:68
Certificate issuer:       /CN=762c45fd-61f9-43a6-8ad5-fea5ef27b187
Certificate serial:       010D0C9F4328584EA78F63BE9B7A9A6E60C78B00
Authority key identifier: 8D:C3:30:A2:3D:E2:01:CB:19:30:E7:68:F2:13:0E:A8:3E:36:F9:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/76f14843-e2cf-31da-a1e8-bb52d751b599.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     5065
IP address blocks:        192.190.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/762c45fd-61f9-43a6-8ad5-fea5ef27b187.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/762c45fd-61f9-43a6-8ad5-fea5ef27b187.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:63:be:9b:7a:9a:6e:60:c7:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762c45fd-61f9-43a6-8ad5-fea5ef27b187
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=86d38768-925b-484f-9f69-71dc49c6193e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6a:0d:f6:75:52:3f:23:6a:16:7b:05:7f:b1:
                    b9:55:9f:43:c8:c9:7f:d7:e7:a5:58:36:fc:57:af:
                    6f:20:3c:0c:7e:e9:91:c9:44:7b:47:d2:bf:b0:1f:
                    45:5f:2d:77:48:56:32:97:51:e7:60:2b:4b:60:9d:
                    89:d6:3c:30:13:b2:4e:ab:77:77:24:b4:74:94:85:
                    a4:9b:9c:af:a3:e2:13:a7:6c:d4:76:d5:cf:af:cc:
                    17:43:99:df:5a:bc:9b:11:2a:8c:b4:73:12:39:51:
                    cd:57:29:7c:35:0f:22:d3:93:67:f5:fe:8b:49:87:
                    1e:b8:76:e2:7e:0a:61:b6:c4:7b:f0:c7:04:f0:9d:
                    0d:27:30:1e:c1:0f:36:06:71:b0:23:03:16:3b:9e:
                    98:4c:ee:e9:06:e6:03:00:49:8e:42:e8:b7:00:8d:
                    72:c7:24:7b:9e:b9:c4:fd:34:93:f5:b1:89:90:87:
                    0b:3e:0d:58:01:16:37:e2:33:44:5a:1e:a4:90:0f:
                    6a:a8:c3:ad:f7:10:3d:11:88:7f:22:cf:fa:66:33:
                    eb:f5:dc:59:bc:03:22:e5:ef:57:b5:57:f7:03:52:
                    3f:77:71:98:15:f1:1a:94:e1:e5:cb:c3:9c:ef:81:
                    c8:dd:c3:32:e9:21:bb:26:67:a2:9b:78:5b:2a:22:
                    21:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0C:79:D9:7C:24:78:89:E7:D4:1A:B9:6E:DC:F1:6D:93:41:B8:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/76f14843-e2cf-31da-a1e8-bb52d751b599.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/762c45fd-61f9-43a6-8ad5-fea5ef27b187.crl

            X509v3 Authority Key Identifier:
                keyid:8D:C3:30:A2:3D:E2:01:CB:19:30:E7:68:F2:13:0E:A8:3E:36:F9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:48:9e:51:0a:51:c2:be:49:9b:7e:2b:b4:ce:26:0f:7a:40:
         d4:9d:2f:85:b1:49:fc:d9:8b:7d:8c:fb:e9:ac:8b:5b:46:1b:
         69:00:dc:61:70:a8:5b:0f:45:c4:65:37:54:de:2b:57:80:9e:
         49:0e:06:56:08:74:3d:9f:e8:4d:6c:15:7a:5e:00:f6:0e:7b:
         de:a6:1f:2f:09:c5:3c:b4:7f:63:66:4a:7f:97:15:06:ef:31:
         62:9a:fa:9f:f2:84:98:ce:f8:81:40:d5:dc:92:5c:26:ab:4e:
         28:a0:e2:4c:63:ec:c9:7e:8d:ab:81:3b:cf:9c:82:3e:2a:b0:
         0d:3c:1c:be:73:16:91:c2:22:ad:a0:dc:a4:5a:58:56:ec:6c:
         a1:b4:60:1a:5a:20:1f:c6:a4:1c:73:2a:46:e5:44:e4:84:19:
         84:82:75:ab:8f:f6:b9:d6:f3:20:ec:93:e7:ba:05:9f:b4:bd:
         27:a6:93:70:9f:f2:c5:44:63:e9:c4:7a:d9:d1:2e:40:11:90:
         95:a8:c3:91:c6:e4:88:50:ef:53:b5:d7:5a:1b:33:7b:43:23:
         9f:1b:c4:06:b7:88:ed:18:83:5e:6e:13:f9:82:b6:32:b9:26:
         93:f2:de:46:33:51:55:2b:00:9f:78:a6:d1:f8:44:bd:58:fb:
         5c:5c:21:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:07:20 2026 by rpki-client