Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/668cfb6c-3232-30b8-96de-de01a02876e4.roa
File:                     668cfb6c-3232-30b8-96de-de01a02876e4.roa (raw, json)
Hash identifier:          zAF5fw3H7xcH7WCV+pSvNSKdML2UfbFJO8UcfEkE9ZY=
Subject key identifier:   70:49:36:D8:2D:42:A7:52:F6:7B:40:7E:4C:4C:E5:2C:62:D3:07:78
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D8EF579F593269F31A3584F00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/668cfb6c-3232-30b8-96de-de01a02876e4.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     202
IP address blocks:        15.176.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:79:f5:93:26:9f:31:a3:58:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=92ab5062-3be3-402a-8ff6-84f66d2ae91d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:fd:14:d6:0a:92:18:dd:af:07:c1:cb:1c:
                    66:e4:b9:8e:77:33:75:c5:1a:ac:c3:07:c7:d4:ef:
                    b6:a4:09:77:fe:f1:b5:86:05:43:95:f2:a1:e1:3f:
                    18:94:5d:d2:28:d7:db:91:d3:72:11:8e:e6:15:3d:
                    9d:38:30:0e:fe:ad:3f:0d:aa:f4:23:70:de:4f:06:
                    19:60:ca:29:84:6c:9f:e8:e2:20:c4:3b:5f:1a:ba:
                    10:db:66:e4:ac:91:45:27:48:86:04:e1:c4:a4:ac:
                    65:fb:f9:c7:ee:4a:91:48:59:d9:6c:1b:2e:e0:a6:
                    54:81:b2:62:17:a9:32:73:6d:fa:ee:18:95:f3:4e:
                    55:26:2e:a3:3b:f3:6d:0a:eb:16:ec:38:6f:63:6d:
                    1d:10:8c:75:9f:98:d4:a7:0a:27:ca:ea:04:ac:bd:
                    ad:2a:ee:d3:e1:88:c7:f6:96:d6:fd:76:81:60:e7:
                    71:91:5d:98:f7:18:5b:5e:f5:1b:44:72:ce:a1:c5:
                    e3:8a:fe:7f:60:4b:f4:46:eb:aa:87:7a:09:02:6b:
                    7e:8d:b4:e4:54:65:78:30:a2:c0:37:eb:7f:2b:db:
                    5d:ae:f8:99:84:52:49:6c:51:31:8d:55:f4:21:ac:
                    be:83:98:30:b7:cc:96:4a:1f:2c:bd:a1:49:5a:60:
                    ea:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:49:36:D8:2D:42:A7:52:F6:7B:40:7E:4C:4C:E5:2C:62:D3:07:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/668cfb6c-3232-30b8-96de-de01a02876e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.176.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:11:d4:40:1c:32:63:bc:a7:9f:88:22:b5:0f:8c:02:85:97:
         35:18:fb:6a:5e:77:a8:28:ac:18:94:76:98:b4:84:48:e4:2e:
         35:df:a6:d5:57:3e:20:77:e0:9d:07:85:15:95:51:77:0a:fe:
         0d:e5:a0:5e:0e:ef:ec:82:55:c4:fd:8f:84:5e:5a:18:12:ea:
         66:d8:ee:50:79:46:04:04:7a:0e:c8:28:1c:14:da:bd:69:90:
         87:27:90:9a:e8:bd:4f:97:9a:95:22:7d:b8:0a:47:89:21:70:
         71:3b:bb:93:01:0b:00:ed:bd:1e:96:91:d7:5a:61:be:f7:a4:
         12:d4:34:9e:a0:48:5a:96:55:93:30:a8:07:5c:4b:af:b5:26:
         d7:75:cb:8e:a8:a2:eb:4b:15:61:2e:46:47:98:20:59:83:01:
         11:24:9f:7d:1a:08:76:44:c7:fb:57:80:9e:94:d6:f3:41:59:
         aa:da:d6:ec:32:0b:bf:b3:2f:d3:93:49:d8:ca:b4:fc:36:3c:
         4c:7d:b0:f3:c0:f5:95:0d:b2:f1:45:86:45:c0:8e:44:80:1b:
         d6:79:a8:ad:8f:5e:fc:e4:e2:c1:49:af:fa:2d:b4:6e:a7:1c:
         f9:7b:15:ea:b5:af:d4:88:4d:f4:36:60:70:ef:c8:28:fe:fd:
         85:ea:bc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 17:32:12 2026 by rpki-client