Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0b1dfdb6-5561-31a2-837a-dd7bfbea90b3.roa
File:                     0b1dfdb6-5561-31a2-837a-dd7bfbea90b3.roa (raw, json)
Hash identifier:          KNySH5DfyW5nNjtholgGx5HFRNfF+J/y4UWviQtWQrc=
Subject key identifier:   CA:AB:14:33:9F:80:EA:0A:1C:EA:99:A0:3E:EF:14:E2:95:F3:AB:8A
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E2AD461EEE5CB5A1A8437B900
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0b1dfdb6-5561-31a2-837a-dd7bfbea90b3.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     202
IP address blocks:        199.228.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:61:ee:e5:cb:5a:1a:84:37:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=8cff1559-1f00-416e-804c-6d9088272576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:24:48:6a:cf:eb:b7:fb:ed:5a:28:f1:d7:1a:
                    b0:84:0a:b7:6f:a6:14:96:11:f0:14:73:37:4d:47:
                    37:fe:ae:b2:6d:be:7f:08:f6:4b:c5:a0:90:32:bc:
                    d1:da:50:17:c3:f7:de:59:05:79:d3:e2:75:94:82:
                    69:0f:b9:1c:aa:a5:e7:8e:fc:a1:c0:55:62:fb:2b:
                    47:71:d2:b6:b9:27:8b:4a:da:ea:0f:8f:17:db:0f:
                    e7:08:54:48:83:b9:b8:92:7b:8a:5b:7a:7b:5d:d3:
                    90:af:2f:28:e2:b0:c2:2e:e2:d3:41:55:f4:20:4b:
                    91:77:83:63:f2:ac:d1:93:e8:eb:e2:13:6d:af:5a:
                    0e:c7:c0:5b:82:5f:08:03:89:c2:0e:5b:76:80:9c:
                    80:6f:df:4d:80:98:53:a0:2c:72:e8:ed:15:62:01:
                    da:d8:49:e5:da:74:89:d5:3d:6b:27:22:5c:89:b7:
                    f0:c9:ac:a9:1e:18:13:90:49:40:8d:62:38:f6:59:
                    9a:4d:38:65:bf:ca:5d:75:a4:7f:2c:af:f1:10:31:
                    02:c4:6d:06:3a:8f:61:86:d8:43:01:11:e4:bb:21:
                    c7:c8:0e:d2:e1:53:b5:bc:ce:c3:65:52:ef:7e:10:
                    93:8b:21:ad:57:34:c2:12:91:fa:b6:5b:86:8b:58:
                    d5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AB:14:33:9F:80:EA:0A:1C:EA:99:A0:3E:EF:14:E2:95:F3:AB:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0b1dfdb6-5561-31a2-837a-dd7bfbea90b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.228.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:9c:45:eb:2f:b5:da:75:73:cc:f4:f0:22:1e:7f:ac:a5:ab:
         2b:df:a0:5a:63:61:7a:a9:53:fc:dd:78:a8:68:01:4a:f9:35:
         36:26:ab:2b:d9:f7:a5:78:a6:63:9d:86:cd:a0:16:8f:95:15:
         89:c2:a3:40:4a:52:a9:24:36:2c:94:ae:97:fd:c9:e4:8c:c7:
         58:dd:a0:10:21:b5:b6:dd:f3:9b:18:05:f7:47:55:69:42:36:
         4e:f8:73:95:29:34:17:02:98:39:1b:c3:cd:04:38:89:a4:4d:
         05:7f:58:ed:65:02:34:27:f9:f5:4b:2f:07:5d:d3:f7:de:59:
         57:d1:1d:3f:8e:4e:9b:7e:25:dc:07:b6:5f:f5:96:d0:98:24:
         ef:a0:8d:ac:6c:9b:fa:ec:87:19:8d:9c:6f:47:5f:ba:bc:4c:
         15:a8:2d:bd:a8:6e:2e:c5:7a:34:70:63:68:81:8e:bc:55:54:
         13:78:67:2a:d8:bc:db:50:df:a6:d0:c8:ef:c9:7c:40:a4:11:
         48:e9:de:cc:94:24:06:aa:76:eb:41:57:19:d6:b4:e1:53:00:
         33:bc:90:4c:5c:11:56:1e:a4:87:3e:b1:b1:fa:2b:0f:e5:45:
         9e:00:78:49:82:4d:33:4b:c5:02:73:0a:02:39:1b:f0:4c:2e:
         0c:69:45:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 14:41:27 2026 by rpki-client