Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/54fa30f9-30ac-3ec6-a2fe-9d30984ad118.roa
File:                     54fa30f9-30ac-3ec6-a2fe-9d30984ad118.roa (raw, json)
Hash identifier:          qca6ehJqSQsk83hHGrPyX9UxRGt6x9SMsSvNAO3bYr0=
Subject key identifier:   A3:5E:34:D5:2D:7D:FA:03:D0:B9:EF:E7:DE:B5:CF:76:84:A6:BB:8C
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584F82AD946D35A5C07AC5028080
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/54fa30f9-30ac-3ec6-a2fe-9d30984ad118.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     203
IP address blocks:        206.164.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:94:6d:35:a5:c0:7a:c5:02:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=00d1545b-635b-496c-b1ea-2c754b334aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3e:24:09:af:e6:0a:45:92:a2:be:1b:12:16:
                    18:00:8a:f0:32:e0:43:19:9b:92:69:1e:9e:31:ec:
                    43:b2:18:b8:88:e5:f8:96:63:0b:d5:68:4e:19:3c:
                    08:2e:8e:13:cf:48:ad:ae:1d:6b:45:55:be:af:fa:
                    51:54:d1:a9:7a:de:57:62:d0:c0:5a:4b:9e:a9:fe:
                    1e:21:8b:bf:56:5c:a5:b3:39:9b:f3:53:75:1a:07:
                    58:e9:94:68:c7:04:52:66:40:97:fc:08:8a:50:b7:
                    36:87:d4:1e:14:74:cd:e0:38:9a:b2:1a:a7:cd:29:
                    cf:05:a6:06:60:61:f4:6e:af:4a:60:df:6e:79:6b:
                    bb:e2:48:ff:72:a9:8e:80:86:1f:ea:0e:7d:1b:df:
                    22:19:b7:9d:81:b6:41:10:59:8f:40:31:4e:36:f8:
                    c4:8c:bb:e2:fb:26:81:be:e3:56:30:d5:1d:11:af:
                    be:ad:77:06:95:c7:79:39:00:9f:00:b3:07:11:50:
                    96:9e:c6:27:3a:1d:d6:d1:93:94:9c:b0:49:e6:25:
                    2d:44:01:d4:d6:a7:e3:31:8c:e1:ba:9e:79:62:a8:
                    3b:d6:3e:5e:3d:be:18:7b:4a:c9:05:e7:41:cf:06:
                    27:ef:ca:26:95:a2:b9:6d:50:97:a8:03:7c:02:94:
                    8e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5E:34:D5:2D:7D:FA:03:D0:B9:EF:E7:DE:B5:CF:76:84:A6:BB:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/54fa30f9-30ac-3ec6-a2fe-9d30984ad118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.164.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:e1:56:07:6b:b2:0e:d6:48:53:cd:a7:40:8e:74:e9:e6:f1:
         de:d6:a8:41:d8:7e:de:ce:09:f8:8a:8d:fb:6e:b7:f5:b6:07:
         27:b0:aa:84:2f:95:4b:5b:28:60:2d:9d:fd:8a:29:4c:cc:26:
         3d:6d:e6:e5:64:07:af:16:6a:ac:cc:e4:92:48:1a:da:59:67:
         7a:88:66:1e:69:48:de:b2:c4:45:e6:eb:78:05:c8:19:c3:19:
         38:91:b4:2f:80:4b:0e:8a:73:24:8b:75:0f:91:a4:05:c6:f7:
         34:17:40:fa:97:b4:7d:b7:7f:76:ba:1b:0b:7c:6d:90:d5:18:
         01:15:eb:79:95:6b:c6:a5:05:09:e6:21:e5:66:4c:20:bc:da:
         7d:f9:9a:97:86:4e:f9:75:c9:26:16:b3:44:ad:fe:18:46:11:
         c3:11:2b:71:91:9e:ce:19:f3:3e:97:74:6f:b1:d9:23:7e:db:
         d2:32:2d:a7:86:33:1c:1f:ce:83:9e:10:b4:ac:e2:d8:20:81:
         3f:7d:5c:af:16:df:f3:24:cd:1f:be:0e:d3:ec:3d:1b:a0:b9:
         9d:cd:ad:70:cd:99:09:27:3b:0a:20:ff:b5:45:c8:4e:57:ab:
         0b:b2:92:cd:40:4f:8e:17:bf:14:40:34:41:a1:df:a2:d2:eb:
         84:d8:a3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:18:36 2026 by rpki-client