Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/610adf60-4be1-374e-a08b-7c855b0b7743.roa
File:                     610adf60-4be1-374e-a08b-7c855b0b7743.roa (raw, json)
Hash identifier:          74mCtfVyBljs67oiOpJbam1AWFvshA2BuIisGL69WM4=
Subject key identifier:   C7:8B:CC:C3:9E:BD:89:B6:7C:BE:19:93:05:78:7E:FF:71:AC:86:14
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584DEB15EF9973F9814AED3B75A0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/610adf60-4be1-374e-a08b-7c855b0b7743.roa
Signing time:             Fri 22 May 2026 13:00:31 +0000
ROA not before:           Fri 22 May 2026 13:00:31 +0000
ROA not after:            Thu 20 Aug 2026 13:00:31 +0000
asID:                     202
IP address blocks:        192.238.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:15:ef:99:73:f9:81:4a:ed:3b:75:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 22 13:00:31 2026 GMT
            Not After : Aug 20 13:00:31 2026 GMT
        Subject: CN=20d2e833-feb4-431e-b408-6fa51e31e773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5a:41:75:1c:ec:4f:67:df:78:43:85:9f:df:
                    0b:0e:b3:66:7a:8c:cb:22:1d:7b:68:dd:f3:5b:1a:
                    47:74:a6:3b:2a:ed:8d:a3:80:1d:d2:74:17:85:dd:
                    aa:47:1d:3a:e2:99:ec:35:14:81:29:9e:3a:f5:cb:
                    0a:1a:c8:a8:0f:1b:2b:38:2c:a9:30:34:83:0d:a9:
                    d7:b4:77:15:15:1b:4a:92:5f:5f:7e:e0:77:bf:76:
                    64:6b:93:c8:aa:2d:93:ca:c0:25:cc:51:37:3d:ee:
                    63:2f:a4:39:f9:a5:e5:76:b5:e7:ca:63:20:8f:30:
                    63:8e:4d:26:69:4f:c9:f1:1f:fa:44:18:60:c4:41:
                    ca:00:48:fb:e2:e4:1d:f4:f3:8d:ca:2a:2d:c0:ab:
                    58:c8:d2:f1:c6:8d:c3:79:d6:73:a1:8f:56:57:5c:
                    02:4d:71:ee:f5:b9:01:2e:bc:90:29:0c:8f:a0:04:
                    c8:c1:4b:4d:8f:4f:ee:19:29:1e:96:3d:89:67:c7:
                    4f:33:34:40:3b:3c:ae:0b:bd:a5:52:56:88:47:3b:
                    39:d9:cc:a3:3b:5f:ed:af:d6:cf:29:d9:ab:1d:ea:
                    05:0c:c4:44:d2:0b:26:8d:67:37:df:2a:0e:3d:30:
                    d3:10:11:1a:84:da:f7:28:07:2f:af:6c:37:93:41:
                    7d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8B:CC:C3:9E:BD:89:B6:7C:BE:19:93:05:78:7E:FF:71:AC:86:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/610adf60-4be1-374e-a08b-7c855b0b7743.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.238.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:e2:b2:b1:b7:12:27:be:bd:eb:ee:01:28:84:a7:c8:ff:ef:
         96:d5:ec:9a:e4:48:06:86:dd:05:e7:18:43:f2:07:f0:d9:0c:
         b8:4b:8d:2e:e3:76:2b:00:b5:9e:a4:b7:74:6c:29:2f:54:ab:
         93:6d:18:26:38:dd:b6:fa:10:6b:95:7d:f9:9e:fd:a8:ea:0f:
         49:60:7e:7b:99:ad:45:c5:87:55:ab:3b:e2:c0:35:ac:6b:ed:
         9a:14:97:d8:4a:c9:d0:fe:48:f1:65:5b:87:0e:6d:ed:e7:01:
         25:09:49:92:17:fd:4e:ac:40:bc:33:68:23:f0:33:d0:71:b0:
         8b:6d:a6:dc:67:24:a9:c8:37:1a:ad:b7:b0:9d:ec:05:ac:69:
         6f:a2:1a:fa:57:ac:0c:9a:70:78:c9:44:9a:01:84:88:1f:2b:
         e6:9d:33:65:6b:e6:e1:9b:3a:4e:59:11:ef:e7:fc:88:0f:58:
         7e:2a:30:72:d2:6b:7f:0d:0e:03:c1:03:fe:04:f9:00:00:91:
         21:4a:ae:b2:89:43:7b:ec:83:51:ed:fe:f5:94:1d:b7:ea:23:
         04:6f:d9:b7:75:a2:54:82:22:a3:b5:81:bf:08:e6:4a:02:99:
         e7:c1:a3:f6:3e:a3:d1:29:85:0a:f2:48:b3:39:8f:fd:df:b0:
         1d:3a:7f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 11:57:24 2026 by rpki-client