Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/12642247-c341-3abe-abc9-33d525569e32.roa
File:                     12642247-c341-3abe-abc9-33d525569e32.roa (raw, json)
Hash identifier:          xzMaFTb3aZHqBCGpO0UNKe2EpgQ1pUiAFVGnR28SlMc=
Subject key identifier:   82:06:42:14:D9:A6:B1:87:56:BA:60:01:20:23:32:17:F4:AD:56:6D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584F2ABD1B81B0470FADDB5E3500
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/12642247-c341-3abe-abc9-33d525569e32.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     3360
IP address blocks:        204.103.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:1b:81:b0:47:0f:ad:db:5e:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=de70df6f-b402-43a6-ae4a-28083c31a4b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:93:c3:7c:6e:00:19:4b:1b:59:72:ef:9b:f1:
                    51:8f:fb:9c:68:66:e4:d2:5e:1e:31:9a:25:c0:ec:
                    71:bc:f6:36:ce:54:7c:11:55:53:6b:a4:dd:eb:40:
                    9d:09:08:c4:54:b1:10:2d:19:32:cd:3b:e9:70:7e:
                    65:32:e4:3a:ca:4a:ce:25:08:59:38:74:9d:b9:71:
                    5d:fb:55:60:31:cc:50:2a:c7:1d:93:2b:89:69:cf:
                    62:27:71:bf:97:82:23:f8:c0:ba:65:d9:60:ca:23:
                    77:61:14:72:d7:62:9f:e5:95:6d:f3:68:75:40:0c:
                    97:f7:32:31:a3:94:e8:7d:b4:a1:78:7a:19:09:fa:
                    94:7a:45:19:41:f8:60:34:94:bc:8c:71:04:8e:f0:
                    88:bb:c5:2a:9f:48:9f:bd:82:4d:40:bf:ef:84:a5:
                    35:47:af:f2:c5:71:05:12:20:93:9c:55:5e:05:de:
                    0c:bf:59:d7:33:45:8b:bc:dc:98:2e:d0:df:e3:f5:
                    32:50:8e:20:d3:45:02:8c:a4:19:40:41:f8:a9:1a:
                    64:3e:1f:b5:eb:da:3a:2b:71:0b:7f:ec:7c:66:2e:
                    a0:02:c4:fa:10:a5:33:f6:eb:02:37:41:fd:81:76:
                    51:88:ac:46:7d:40:e4:3b:9d:82:3d:bd:be:71:1d:
                    78:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:06:42:14:D9:A6:B1:87:56:BA:60:01:20:23:32:17:F4:AD:56:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/12642247-c341-3abe-abc9-33d525569e32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.103.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:09:d2:b0:bd:c5:d4:d3:02:e1:20:94:41:b9:c3:31:93:75:
         51:2d:d1:fd:39:7f:39:40:da:04:b2:4b:e0:3c:0e:05:da:b5:
         61:59:66:bc:69:f9:d0:18:37:54:3d:a3:07:7c:51:db:3e:05:
         a8:69:b9:3e:2e:cf:19:53:6c:4a:3a:d5:a4:19:0b:38:25:8d:
         d2:be:24:db:59:81:b2:76:51:19:2d:af:fb:a8:46:52:17:cf:
         1d:ff:e4:93:0c:8c:0b:fc:b2:ec:ac:96:26:7d:eb:09:1c:67:
         43:c3:8a:ab:9c:2f:79:a2:95:05:d2:3a:ed:0f:fc:bf:85:c8:
         26:2e:b6:b1:bd:1e:e6:d8:79:1a:b6:0a:9e:b2:73:ea:09:c1:
         cd:1f:30:fe:bf:ce:5c:a3:f3:d0:e0:f3:bc:be:6a:86:af:5b:
         41:9c:fb:ff:30:51:67:41:50:2d:72:cc:b3:84:c9:88:a9:5f:
         8e:ed:b2:15:92:f1:ff:7c:7c:98:72:bb:dc:69:e6:84:09:b3:
         d9:cb:96:50:c3:dd:d7:c2:97:fe:06:b5:ff:d0:b7:05:23:2e:
         cb:73:7e:5c:44:6e:cf:66:a1:4e:a5:fa:c3:c1:5c:33:86:ac:
         f9:ac:1e:43:7b:75:f9:a8:1e:a8:d9:cb:b7:fe:d2:d4:92:1b:
         fa:72:e6:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvRuBsEcPrdteNQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk
ZGU3MGRmNmYtYjQwMi00M2E2LWFlNGEtMjgwODNjMzFhNGI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJPDfG4AGUsbWXLvm/FRj/ucaGbk0l4eMZol
wOxxvPY2zlR8EVVTa6Td60CdCQjEVLEQLRkyzTvpcH5lMuQ6ykrOJQhZOHSduXFd
+1VgMcxQKscdkyuJac9iJ3G/l4Ij+MC6ZdlgyiN3YRRy12Kf5ZVt82h1QAyX9zIx
o5TofbSheHoZCfqUekUZQfhgNJS8jHEEjvCIu8Uqn0ifvYJNQL/vhKU1R6/yxXEF
EiCTnFVeBd4Mv1nXM0WLvNyYLtDf4/UyUI4g00UCjKQZQEH4qRpkPh+169o6K3EL
f+x8Zi6gAsT6EKUz9usCN0H9gXZRiKxGfUDkO52CPb2+cR14BQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIIGQhTZprGHVrpgASAjMhf0rVZtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTI2NDIyNDctYzM0MS0z
YWJlLWFiYzktMzNkNTI1NTY5ZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzGcuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABgJ0rC9xdTTAuEglEG5wzGTdVEt0f05fzlA2gSyS+A8DgXatWFZZrxp
+dAYN1Q9owd8Uds+BahpuT4uzxlTbEo61aQZCzgljdK+JNtZgbJ2URktr/uoRlIX
zx3/5JMMjAv8suysliZ96wkcZ0PDiqucL3milQXSOu0P/L+FyCYutrG9HubYeRq2
Cp6yc+oJwc0fMP6/zlyj89Dg87y+aoavW0Gc+/8wUWdBUC1yzLOEyYipX47tshWS
8f98fJhyu9xp5oQJs9nLllDD3dfCl/4Gtf/QtwUjLstzflxEbs9moU6l+sPBXDOG
rPmsHkN7dfmoHqjZy7f+0tSSG/py5qw=
-----END CERTIFICATE-----
Generated at Sat Oct 10 06:06:16 2026 by rpki-client