Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4c35de0f-c4b7-34cd-b096-e01bc4e0fa37.roa
File:                     4c35de0f-c4b7-34cd-b096-e01bc4e0fa37.roa (raw, json)
Hash identifier:          fiHXui5lE4sQNXEnjZiW+QzJDrNeuZpIHjeDcVJEC0M=
Subject key identifier:   74:6B:3E:0C:A4:6B:E6:D9:2E:8F:7C:3B:9A:32:44:20:E8:98:EC:1D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584F4977309442C0499D0E346620
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4c35de0f-c4b7-34cd-b096-e01bc4e0fa37.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     202
IP address blocks:        205.141.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:30:94:42:c0:49:9d:0e:34:66:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=aa2fbb2f-f842-403c-af45-6e391e616eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f1:fb:b0:11:00:6f:5c:2d:c4:64:5b:04:98:
                    88:fb:82:c2:28:4c:c9:8d:76:2f:e0:f8:5e:20:0f:
                    fe:9e:99:aa:5b:bb:e1:bb:ae:c2:50:4b:4f:15:92:
                    9e:1e:3a:de:ec:be:06:4f:06:60:fb:12:c6:19:0c:
                    45:13:6c:c1:5b:15:06:43:d6:4b:dd:f2:2f:c1:33:
                    79:15:2d:41:7b:fe:4c:18:80:bc:30:3e:d6:70:2f:
                    05:94:00:7f:ba:b2:1d:50:b8:3b:f4:d1:46:71:7c:
                    d1:2d:d1:88:ce:6b:e8:73:19:75:97:c4:f5:d8:c2:
                    68:f7:55:46:c2:4f:d3:63:47:21:6d:22:44:f2:61:
                    2b:d1:fc:6f:3e:4c:b8:29:e8:96:77:82:dd:89:7c:
                    18:bf:9a:ca:b1:a3:e0:db:63:c8:f6:27:2b:05:cf:
                    a2:e7:06:d7:52:d7:9a:57:1e:74:f4:26:d2:66:f8:
                    07:54:f4:d8:2a:19:44:64:a1:73:e7:a8:1b:2f:11:
                    11:4e:b8:29:d1:60:2b:9a:78:22:6b:3c:1a:88:e1:
                    5b:90:7d:c1:6e:43:69:78:60:12:38:cd:53:d6:fd:
                    bf:da:a6:a9:1f:9d:ca:c1:01:6e:f8:39:df:97:71:
                    f9:19:42:db:a1:1f:9f:d7:09:fc:a4:0d:9c:b9:1b:
                    92:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:6B:3E:0C:A4:6B:E6:D9:2E:8F:7C:3B:9A:32:44:20:E8:98:EC:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4c35de0f-c4b7-34cd-b096-e01bc4e0fa37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.141.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:43:0c:e8:d6:4b:1d:69:d1:a7:db:c7:43:51:d3:5d:12:fe:
         12:da:49:f3:3f:8e:cf:10:96:9d:69:50:80:cb:28:2c:d6:35:
         f2:5c:b5:45:57:aa:5c:de:9e:d7:9c:a8:a7:c7:6f:d5:f0:ab:
         a2:c6:74:fa:ab:ed:e9:88:dd:73:ea:f4:8d:7d:95:0a:3a:30:
         b1:0f:87:d0:c1:e7:46:b9:c2:9e:df:2c:f0:8a:99:27:97:58:
         0c:9b:48:dd:2f:66:7b:76:91:3e:ae:d0:d5:2a:df:b0:99:81:
         08:13:c1:02:85:8d:72:23:84:64:b8:83:48:e2:6e:b7:76:73:
         8f:09:34:a6:42:47:fe:3f:46:62:85:32:43:da:c1:01:d2:5f:
         86:8c:8a:97:e6:4a:c2:e1:b3:c4:ad:11:3d:43:7f:87:6e:e9:
         ca:4b:0e:6d:cb:ec:b5:d8:d6:e9:5a:7d:67:ce:ac:22:36:8b:
         83:61:b8:10:ab:e8:a6:c5:a9:d1:91:a9:32:8d:9b:0c:19:ba:
         3c:fa:d4:1d:8f:aa:d9:c3:72:09:74:c0:18:cf:ab:64:76:db:
         7c:79:a1:b4:06:0b:3b:cd:b0:1b:99:2e:47:03:01:89:77:bc:
         8f:12:76:a5:38:65:36:4c:27:ce:d7:9e:ad:77:8b:b8:52:2a:
         d4:c8:40:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:57:35 2026 by rpki-client