Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1f9d3c35-acaa-3f57-b2df-111fe6f945b4.roa
File:                     1f9d3c35-acaa-3f57-b2df-111fe6f945b4.roa (raw, json)
Hash identifier:          vj4AwpTX8Ei68rU8WokNQiqg0h9hWhRBAROhFgyLXnI=
Subject key identifier:   C7:57:9D:8E:4F:CC:8A:01:5A:2E:0C:2B:6C:B4:3C:F5:96:A9:E4:3B
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D0D4263008E1D9D13768E39F0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1f9d3c35-acaa-3f57-b2df-111fe6f945b4.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     203
IP address blocks:        199.228.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:63:00:8e:1d:9d:13:76:8e:39:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=2bf75cca-ef5f-44c4-a50d-2e69efce4a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bc:aa:8a:35:de:58:f6:b0:c1:19:9b:b2:02:
                    ea:85:b3:2e:03:5f:c9:b0:5d:e0:33:01:1b:cc:87:
                    87:54:c9:b1:0d:42:0c:2c:ec:19:08:9f:65:0f:ed:
                    20:d5:9e:dd:2c:be:9a:22:fd:9b:66:ff:55:1b:00:
                    32:db:d4:72:f0:72:45:79:5d:3f:3e:14:86:2d:0f:
                    8d:ea:ee:e9:84:d6:59:e8:5a:fd:44:eb:09:51:7a:
                    14:61:13:99:89:ad:57:4b:95:61:e2:03:1d:15:f8:
                    f5:20:13:41:17:d0:8d:7f:45:c2:59:c8:cb:ff:6d:
                    86:74:61:95:57:14:79:6f:7f:4c:2a:38:84:37:f3:
                    0e:62:75:cc:b7:76:88:5e:d5:f9:64:96:26:2f:ab:
                    96:3f:3a:db:5b:de:8f:3a:3b:74:55:bd:53:ce:14:
                    2e:15:2a:3c:b7:13:78:68:d1:a9:5c:d5:58:94:38:
                    6b:fa:b6:34:5f:17:29:5d:78:1e:37:c9:c0:f5:36:
                    da:ca:7e:5e:e0:6b:00:9c:1a:a2:24:27:9e:fa:12:
                    45:77:a7:ae:f1:4f:ce:13:8f:09:35:42:7d:30:ca:
                    cc:0b:72:bd:2e:af:95:84:2d:c6:bc:d1:c4:65:0c:
                    42:19:5a:03:bc:75:09:31:8d:c6:a3:57:46:29:dd:
                    88:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:57:9D:8E:4F:CC:8A:01:5A:2E:0C:2B:6C:B4:3C:F5:96:A9:E4:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1f9d3c35-acaa-3f57-b2df-111fe6f945b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.228.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:c6:96:b7:a5:61:e2:3b:05:c2:56:c9:f1:0b:63:89:e4:2a:
         ae:7d:95:96:1d:ce:09:ec:ed:44:a9:76:6a:cd:ca:ef:d7:4f:
         0c:4b:73:35:ba:23:56:06:f9:10:a6:49:29:21:fc:aa:9b:f8:
         70:e2:d9:cc:be:10:e1:b9:0d:aa:52:93:40:63:40:0b:3a:ae:
         90:b2:94:1a:49:98:c2:3f:63:15:d4:30:3c:31:be:a0:d9:bd:
         90:3a:ee:41:03:11:0e:ce:ca:84:53:e7:48:bb:30:ad:9f:c9:
         f9:75:0f:49:80:d8:58:a4:f4:55:f0:03:6f:63:0c:43:46:09:
         c6:13:d1:ee:eb:3c:39:7b:77:3c:e5:47:a8:a1:9b:60:f5:7c:
         bd:78:ca:b4:ea:79:22:b8:15:98:a8:81:93:93:3b:e8:45:da:
         a0:29:e1:ec:31:bb:d3:f0:e1:18:91:20:bf:8f:45:8d:f9:25:
         03:44:40:1a:8a:8a:bc:0a:3c:b0:de:62:51:68:ef:44:16:30:
         63:0a:93:cb:57:f1:6c:ca:86:11:c1:c7:35:f4:aa:8f:6c:7d:
         d9:7b:2a:8c:df:34:0a:0a:fc:5c:65:06:c8:e6:5f:af:87:ed:
         2d:4f:37:c5:85:b6:89:d7:fa:55:bd:16:14:56:80:96:a8:92:
         b0:70:ad:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 05:37:43 2026 by rpki-client