Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1e0c604d-04eb-3b5a-8a94-e93b287cb34d.roa
File:                     1e0c604d-04eb-3b5a-8a94-e93b287cb34d.roa (raw, json)
Hash identifier:          YiW9HseMzS6724UMOd9T0XtWNmSHv+PPVFolN5iapnc=
Subject key identifier:   F9:59:77:24:7B:53:F0:7F:31:1A:DF:B5:0D:E1:58:6A:06:20:3B:89
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EF7177AB9A048A0BFAED52700
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1e0c604d-04eb-3b5a-8a94-e93b287cb34d.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     3356
IP address blocks:        204.105.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:7a:b9:a0:48:a0:bf:ae:d5:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=653c1f4b-e533-414a-9d26-99b468085118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ba:2d:4f:23:39:68:26:cf:4e:ac:bb:2e:a1:
                    dc:6b:b3:d0:d6:8c:1b:44:72:97:6e:89:96:b5:26:
                    40:01:88:c8:16:90:cc:ab:6c:f9:05:37:0d:5f:d3:
                    93:76:cd:95:7e:aa:74:a4:62:89:8b:2e:eb:d7:8c:
                    81:86:0e:35:a5:87:b1:05:82:57:13:ec:40:dd:cc:
                    a8:11:8d:b3:ba:d8:bc:f1:4a:41:24:73:02:c5:67:
                    aa:72:74:0f:1e:f3:be:b2:53:ba:db:03:34:4d:e7:
                    7f:fe:ab:fb:f3:fb:d0:67:e8:33:e5:08:d0:3b:d1:
                    bb:38:ee:84:e5:98:8c:5f:ba:6e:23:53:58:e2:0b:
                    13:55:98:13:5b:b4:28:4d:5b:ff:6d:86:ac:8c:0f:
                    a1:f6:3b:d8:ae:6d:5b:ac:ca:9a:6b:36:30:af:a9:
                    c6:08:eb:a3:aa:1a:ad:78:ef:34:da:0e:89:1c:59:
                    f4:cd:cc:7d:20:a9:74:f5:af:44:bd:f4:d7:5c:94:
                    de:4c:49:3f:0c:2f:6f:48:e6:a8:62:39:f3:0d:ba:
                    0c:c2:3c:ef:3a:58:0a:d7:27:e6:73:36:af:64:49:
                    3d:d1:4c:ba:6a:4a:f4:c6:f5:4c:f1:5f:39:b8:ed:
                    eb:01:96:db:c2:d0:ef:17:4f:7b:dc:87:7e:ee:fb:
                    53:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:59:77:24:7B:53:F0:7F:31:1A:DF:B5:0D:E1:58:6A:06:20:3B:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1e0c604d-04eb-3b5a-8a94-e93b287cb34d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.105.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:d1:fa:de:27:12:6a:a5:9f:b2:84:09:69:70:4e:0d:1b:39:
         a1:b9:11:a7:d8:e7:0c:d4:40:13:63:7a:72:be:e3:72:e7:6f:
         32:80:52:14:db:aa:75:d4:b8:28:ba:a8:45:eb:51:4d:a3:a5:
         af:2c:64:5a:d4:de:c3:ef:ea:e9:85:92:1e:50:83:82:eb:66:
         fb:3f:d3:d6:1d:65:1c:c6:0e:56:22:9a:be:d3:4e:cd:62:36:
         72:9e:ba:90:f8:12:69:2a:e2:5f:b2:ee:01:2c:03:07:51:a2:
         78:b3:c1:59:1c:41:43:82:5c:15:2e:7c:d7:87:44:9c:ca:76:
         88:28:cf:84:f1:74:87:0f:95:34:ad:fe:64:35:aa:1e:a9:5c:
         e6:ba:ed:d3:55:24:15:cb:17:27:c6:eb:27:a1:76:c2:16:8b:
         9b:b4:60:45:e2:25:d4:56:37:80:fc:7e:3a:b6:ec:1a:f5:5c:
         10:c2:1c:b6:d7:26:b3:43:55:2a:a1:23:7b:13:0d:bb:72:2b:
         bb:e6:74:8e:a7:8d:79:4e:7a:d1:cb:1d:ff:b9:dd:d1:b0:aa:
         c2:83:54:1a:a4:c9:42:a7:ed:12:e1:18:6c:f2:ce:32:32:a9:
         01:8e:47:de:25:d5:f4:e3:5c:bb:d4:65:4e:18:ed:61:7e:e9:
         c3:89:a9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:55:47 2026 by rpki-client