Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/449832cc-00a9-35f1-a1f3-2bd1e16cb88b.roa
File:                     449832cc-00a9-35f1-a1f3-2bd1e16cb88b.roa (raw, json)
Hash identifier:          t5HpetsmKVS9a80OieSRZRG7NCYcqC9a5xgSwMcBQjw=
Subject key identifier:   35:54:A8:B4:97:2E:B3:8F:22:D3:72:8E:48:98:B2:C7:1F:95:2C:30
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D0A77B5E0528FD0DC6D831980
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/449832cc-00a9-35f1-a1f3-2bd1e16cb88b.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     202
IP address blocks:        205.141.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:b5:e0:52:8f:d0:dc:6d:83:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=3a18db72-2102-4234-8ef5-80353e3163b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4b:8a:8d:7d:c2:b8:3e:59:da:69:a8:da:86:
                    d4:a0:cd:33:15:22:15:65:a1:ac:b1:23:09:7d:22:
                    b6:2c:ef:9f:0a:67:1b:3d:48:72:bb:c8:23:7c:be:
                    6a:7f:51:a6:b3:83:b4:0c:75:d5:8b:50:06:21:be:
                    02:c4:71:23:11:c2:75:d2:3f:5b:8c:95:93:2a:36:
                    17:24:5f:7e:6f:9a:41:75:62:90:94:8b:a0:af:06:
                    82:39:64:fe:79:85:58:bd:42:e5:d4:2c:d2:bb:30:
                    e4:c6:8e:af:d9:29:be:36:71:59:5f:68:fb:d1:cc:
                    cd:74:51:07:84:9d:d0:5b:d7:94:97:4e:7c:8e:f4:
                    93:aa:5d:51:18:a9:99:62:3a:50:1a:af:77:58:1c:
                    e4:58:42:b3:30:38:79:9d:54:a5:1a:96:4b:0f:84:
                    85:c0:20:e2:af:03:7f:80:e5:18:59:f1:74:44:da:
                    f8:fc:f4:94:b1:71:76:ad:8a:f5:ef:f6:5e:77:21:
                    3d:bb:98:f5:07:fe:d6:de:7c:e1:16:e3:23:6b:43:
                    f8:48:86:92:c1:20:fc:3b:aa:43:5f:86:4a:d0:32:
                    9c:29:be:61:66:1d:f9:90:da:52:b1:83:13:02:fb:
                    9b:0d:63:68:79:96:23:4e:34:3d:ce:17:34:65:c3:
                    8a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:54:A8:B4:97:2E:B3:8F:22:D3:72:8E:48:98:B2:C7:1F:95:2C:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/449832cc-00a9-35f1-a1f3-2bd1e16cb88b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.141.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:8f:eb:92:7f:22:b2:e7:23:0e:60:b0:0f:c4:2e:59:5f:5c:
         5c:7e:74:c9:c4:97:a3:2c:eb:e3:37:3f:04:79:87:8e:c4:c5:
         1d:86:ee:93:f2:b2:d2:88:3c:0e:7f:cc:9c:b5:40:6b:ea:69:
         a1:8a:5e:bc:0b:11:e0:26:f1:c5:56:6f:4b:ec:b3:1a:ab:5c:
         5f:84:47:1c:08:c1:e0:21:bf:a7:c0:77:9c:04:80:68:ae:55:
         c0:c4:aa:cb:59:ed:5d:4b:27:c4:69:95:0d:69:1a:35:20:77:
         19:b2:31:23:10:a6:38:48:68:a5:8b:e4:fe:f8:f0:f8:94:81:
         92:3c:df:7e:af:ab:c2:ae:0e:37:eb:f4:eb:c9:bc:27:19:06:
         65:d2:c7:37:5a:c0:fb:7b:3a:20:a6:7a:7d:19:0a:fa:da:9d:
         a7:cf:0a:5a:11:5c:c2:41:bc:74:68:b1:02:33:b1:82:34:72:
         51:30:a0:e0:39:63:7d:0f:8b:1f:e9:22:4e:57:ed:83:08:ed:
         ed:03:33:7b:50:04:a8:5b:ad:e2:8b:09:99:59:cf:87:76:37:
         e7:90:f9:52:86:4c:3d:38:5a:b4:17:e6:fb:e6:51:91:e1:ec:
         a9:d6:ea:d7:74:db:a7:f6:fd:bb:e3:13:d0:21:74:18:e6:98:
         8f:ae:7b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 20:50:49 2026 by rpki-client