Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1e28a981-bf95-316a-9130-d61db42db8c2.roa
File:                     1e28a981-bf95-316a-9130-d61db42db8c2.roa (raw, json)
Hash identifier:          XXmaLElp9r0cGIdj8DdqDgW76FuBXgmwLaJIGzKXC40=
Subject key identifier:   B6:66:D1:62:25:A6:68:8D:7C:57:1C:BC:23:EE:53:E7:6A:1A:9A:E2
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D0A77B833017507CE53E8BA80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1e28a981-bf95-316a-9130-d61db42db8c2.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     203
IP address blocks:        205.141.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:b8:33:01:75:07:ce:53:e8:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=8523c2a0-ce27-4df0-870e-c448fdc882b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:38:57:be:8a:fd:26:7b:cb:0e:dc:44:b4:ba:
                    b6:2c:6d:4a:d4:fa:24:2c:fd:f8:a0:d7:f6:4d:4f:
                    cb:b1:c4:9d:72:15:9a:9b:4f:c1:fd:36:3f:58:46:
                    d2:5b:b4:37:0f:2c:b9:f5:59:31:75:66:76:53:ea:
                    67:77:1e:03:8a:fd:f9:67:00:fa:55:fd:5f:cb:5b:
                    fa:51:bc:29:55:c7:6f:aa:10:7c:1e:d4:2b:1c:6f:
                    d5:a9:d5:2f:ff:88:55:d0:41:c9:e1:1c:08:f2:c7:
                    65:6a:7e:88:4f:dc:ef:3d:5a:9c:e5:aa:55:48:cd:
                    16:fb:88:b5:bb:06:1b:28:b5:62:30:23:a5:2e:07:
                    27:30:9b:a1:9e:7b:d4:71:b4:c0:30:82:f6:47:29:
                    e3:3b:35:d0:e8:75:0e:20:92:13:c0:25:2c:bf:27:
                    05:a4:49:58:bc:0f:16:a8:2c:8d:1b:a9:ff:d7:0b:
                    50:41:fd:bc:59:b7:e7:da:f4:62:9a:b7:f2:ea:68:
                    a2:b8:37:3a:54:d4:42:02:f5:a4:0a:33:e8:a1:8c:
                    27:bf:08:88:ed:b0:4c:99:90:45:87:d2:43:90:ed:
                    46:60:5a:8f:bf:2c:cf:1f:ff:08:da:7a:80:aa:97:
                    29:91:7a:6a:d9:c5:52:5d:bb:80:1d:e2:e3:a9:03:
                    32:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:66:D1:62:25:A6:68:8D:7C:57:1C:BC:23:EE:53:E7:6A:1A:9A:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1e28a981-bf95-316a-9130-d61db42db8c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.141.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:c7:bc:4c:f5:6b:73:1d:a3:78:f9:e0:18:7d:9f:19:53:0d:
         fd:6a:ef:8e:f0:07:1c:b0:c8:1b:1a:8b:77:2a:23:1e:d7:6f:
         c3:76:af:5f:bd:49:07:63:71:ca:0e:db:db:c6:08:67:87:46:
         98:4a:c6:0f:20:17:a0:49:53:6c:b0:30:36:12:95:8d:38:d9:
         08:c8:c5:1f:74:f5:aa:df:4f:86:e1:6b:78:b5:2c:d0:90:a0:
         23:3c:38:47:e7:74:cd:e0:71:86:a0:67:fd:80:0e:20:04:5c:
         7f:cd:ec:15:08:d4:95:b3:c6:90:e3:5c:cd:97:44:fe:35:f2:
         ab:02:04:0e:dd:12:76:1e:9e:bc:c0:8e:46:ff:20:88:15:ce:
         8a:f7:42:11:5d:9b:34:82:a2:c6:cc:e1:f6:4c:c8:da:47:e2:
         54:89:2b:85:48:00:68:c8:44:d0:c6:07:ee:73:ca:d6:1f:da:
         b3:ab:83:aa:47:4d:86:fd:08:51:8b:76:cc:b8:61:55:94:67:
         e5:43:0f:89:96:56:57:43:83:bc:13:90:fc:9e:84:82:db:6a:
         2e:62:94:7a:b8:0d:ca:21:5d:2d:f1:db:ac:ad:0b:a3:1a:65:
         41:1d:e6:6d:ae:d4:86:40:ba:fd:c0:7f:b6:40:2f:da:45:ad:
         db:52:3e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 05:39:02 2026 by rpki-client