Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/34c5d29c-c64c-3f9f-a777-daab22681140.roa
File:                     34c5d29c-c64c-3f9f-a777-daab22681140.roa (raw, json)
Hash identifier:          UOjLyjWnzZ7Lla1MFMuxwquJIHjjfrUUR/sLyinplds=
Subject key identifier:   42:3A:58:22:F4:CE:79:58:FE:6E:E1:51:74:5E:ED:0A:64:D3:F7:0E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D0A77B9F57E56FC806DDAED00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/34c5d29c-c64c-3f9f-a777-daab22681140.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     202
IP address blocks:        206.164.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:b9:f5:7e:56:fc:80:6d:da:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=4b6a40ec-5376-41b8-912f-3d994d5624e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b0:c2:2f:47:68:31:b8:6f:d4:ce:3e:a2:86:
                    31:9f:4c:ff:61:04:b0:96:8d:cb:11:32:bc:fd:fd:
                    e8:1a:28:12:98:21:9a:db:f5:97:7b:cc:56:fb:ea:
                    79:e2:7f:db:5a:22:30:fd:21:08:8b:05:e5:57:f9:
                    26:63:bb:e9:01:77:a9:54:7f:64:3d:8a:19:e9:2b:
                    d0:35:0b:2e:f8:c2:29:4f:47:0f:d9:88:c3:7b:94:
                    72:8f:a2:4f:d3:04:2c:ea:01:94:a8:bb:89:32:2b:
                    a8:3d:ce:b1:a9:50:fb:a3:32:4d:f6:63:40:de:e0:
                    6c:1d:a0:59:43:46:1f:97:03:34:e2:e6:d0:3c:ac:
                    86:37:9c:9e:e9:49:8f:08:32:a4:54:d3:3f:26:57:
                    94:1d:d0:5f:45:5d:aa:14:8d:b7:5b:e6:fc:2b:c9:
                    7a:14:13:0f:3a:d0:34:3d:9e:fb:eb:64:ec:4d:da:
                    ff:30:26:71:fd:11:d6:63:f4:a1:49:b5:1c:1b:22:
                    28:14:b7:9f:f5:c4:71:1e:0f:78:68:c7:05:bb:ae:
                    4d:1a:0a:19:73:1a:e5:10:67:ae:b6:2d:80:7d:38:
                    b1:71:8f:87:59:bc:b7:fd:97:e7:1e:1f:47:0f:e6:
                    56:57:ad:c2:92:e7:c7:99:34:ca:77:f8:10:ca:26:
                    f8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3A:58:22:F4:CE:79:58:FE:6E:E1:51:74:5E:ED:0A:64:D3:F7:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/34c5d29c-c64c-3f9f-a777-daab22681140.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.164.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:5f:b2:73:0a:84:c1:ca:f0:88:bf:d4:01:d7:93:e9:14:7b:
         09:3b:4e:19:d7:34:97:49:78:05:bc:96:7f:bd:a7:9b:ef:ba:
         b0:68:13:70:af:ea:72:ee:17:48:d9:36:07:30:c6:41:89:5e:
         19:b6:1e:c4:9d:bc:d8:b5:d0:59:87:a0:69:c7:5f:a7:f5:23:
         6f:2e:7d:fa:2a:bd:64:4b:e6:d8:b6:7d:1f:8e:d5:54:8b:c7:
         ef:ce:d0:da:d8:6c:68:34:6a:87:8b:16:de:04:92:7d:6d:53:
         f0:94:b2:4d:a6:de:c9:32:fd:cd:af:b5:1f:45:bb:d6:f8:22:
         86:bb:51:91:e0:18:6c:f1:eb:1b:a4:08:2e:54:35:21:b1:1e:
         e9:28:40:dd:60:fe:16:38:f5:7d:35:ba:6f:6e:04:1e:58:19:
         1c:5e:2d:c8:aa:11:8d:96:54:4d:6b:33:8d:5d:64:c4:93:2d:
         a8:57:18:2e:77:a7:85:7e:8c:d5:0e:ab:16:6e:63:95:5a:99:
         3a:da:27:8d:78:e5:37:cc:ef:97:ee:d6:a1:4e:02:f2:d4:16:
         c2:8d:fe:39:81:50:7e:de:c1:70:d4:fc:c7:57:fc:16:8a:db:
         28:40:8f:a9:a3:d6:04:57:71:38:c5:4d:fb:02:47:d6:d0:4a:
         88:a9:f2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 20:53:34 2026 by rpki-client