Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7fb21dfd-3e04-3a67-a9bb-af94afa62413.roa
File:                     7fb21dfd-3e04-3a67-a9bb-af94afa62413.roa (raw, json)
Hash identifier:          uBdmlqoI7MX/cRHj7VMb7jDT1nkxL11OQ0zyz6O/RfY=
Subject key identifier:   45:75:01:F2:BE:95:9C:02:C5:D4:9B:8D:F3:F6:8E:4B:D2:A8:AB:59
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D0A77AC50BD4B8469592E6480
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7fb21dfd-3e04-3a67-a9bb-af94afa62413.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     202
IP address blocks:        192.238.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:ac:50:bd:4b:84:69:59:2e:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=04630207-bd4c-4386-b3be-157c1af80a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:18:37:01:95:e7:d6:7a:c0:15:95:1f:38:80:
                    63:fa:48:fe:f6:a6:2f:bf:fd:86:e8:a3:78:2a:cf:
                    23:9b:07:5c:f3:ae:33:54:72:25:8c:b2:ea:4b:60:
                    ec:e7:fe:e8:bd:52:20:f1:76:02:c1:c9:ce:1d:ca:
                    df:bb:5c:0a:37:80:40:47:ab:1b:2b:d2:6a:42:ef:
                    42:8c:fa:41:0d:60:91:1c:3f:14:84:63:c9:14:6e:
                    67:e8:21:6b:56:d2:68:41:27:b9:6c:58:9c:68:8f:
                    fb:d0:c2:19:0b:99:e3:57:49:76:56:d5:4f:de:37:
                    a6:56:54:d3:d7:71:2b:40:30:5d:4b:d4:f8:d4:14:
                    45:e5:00:60:62:b1:97:98:23:f2:b6:d4:68:1c:e5:
                    3c:83:c6:2b:74:35:93:0b:55:91:ff:2e:ac:2f:aa:
                    51:96:91:dd:85:8e:89:80:34:19:da:66:13:a6:77:
                    3f:8a:a8:68:ec:a9:30:1a:50:2a:14:28:93:20:ea:
                    90:af:ff:be:69:84:f4:ae:4f:82:b4:19:11:5c:78:
                    ab:b7:84:fe:09:dd:17:a5:09:12:68:5d:94:65:11:
                    b3:d3:56:c2:2c:bc:a4:e7:a2:f2:25:83:fd:bc:55:
                    3b:bd:81:42:a5:ef:bb:4e:60:49:5a:43:75:3a:72:
                    99:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:75:01:F2:BE:95:9C:02:C5:D4:9B:8D:F3:F6:8E:4B:D2:A8:AB:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7fb21dfd-3e04-3a67-a9bb-af94afa62413.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.238.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:cf:f9:46:30:d9:ff:7c:f0:aa:39:92:82:69:73:e1:6a:af:
         17:97:9f:50:b6:a1:e0:76:c9:f3:e4:6c:26:4e:56:65:47:ca:
         9e:25:7b:75:8c:f6:9e:80:f2:b6:88:79:3f:7d:93:1f:c2:db:
         8e:e9:52:af:b5:56:b8:90:06:cf:d9:f2:66:16:1d:2c:ef:22:
         78:92:3a:48:6a:34:51:f9:a6:e5:8c:54:62:91:ef:03:b1:83:
         73:af:81:d2:09:37:fa:3c:a8:4e:7d:44:5b:4c:1a:6c:d0:dd:
         f0:1b:ae:e5:a4:17:c1:0b:ee:f6:96:97:95:d8:a0:ac:2c:2c:
         0f:da:b9:f2:d7:e3:a0:21:17:19:4b:da:7a:41:71:01:e7:4c:
         fe:4b:41:95:15:34:41:4b:6f:d3:e0:b1:54:3f:22:70:c9:9b:
         b1:d3:a4:4f:e4:65:d9:f1:b8:f0:0f:e9:5e:54:53:be:09:dd:
         19:ca:3f:4b:ed:e5:11:b6:80:4d:5d:a0:59:02:ee:37:4d:60:
         d1:2b:7a:c7:e3:4f:36:ef:28:a5:e3:09:8e:c3:38:b1:36:58:
         5d:53:27:f9:95:dd:d0:32:b4:69:71:b9:22:fd:97:55:61:3b:
         2c:8a:62:ba:81:a6:58:e6:22:43:e0:d9:27:43:2f:c2:29:70:
         36:38:bd:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd6xQvUuEaVkuZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk
MDQ2MzAyMDctYmQ0Yy00Mzg2LWIzYmUtMTU3YzFhZjgwYTU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRg3AZXn1nrAFZUfOIBj+kj+9qYvv/2G6KN4
Ks8jmwdc864zVHIljLLqS2Ds5/7ovVIg8XYCwcnOHcrfu1wKN4BAR6sbK9JqQu9C
jPpBDWCRHD8UhGPJFG5n6CFrVtJoQSe5bFicaI/70MIZC5njV0l2VtVP3jemVlTT
13ErQDBdS9T41BRF5QBgYrGXmCPyttRoHOU8g8YrdDWTC1WR/y6sL6pRlpHdhY6J
gDQZ2mYTpnc/iqho7KkwGlAqFCiTIOqQr/++aYT0rk+CtBkRXHirt4T+Cd0XpQkS
aF2UZRGz01bCLLyk56LyJYP9vFU7vYFCpe+7TmBJWkN1OnKZswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEV1AfK+lZwCxdSbjfP2jkvSqKtZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvN2ZiMjFkZmQtM2UwNC0z
YTY3LWE5YmItYWY5NGFmYTYyNDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwO46MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACbP+UYw2f988Ko5koJpc+FqrxeXn1C2oeB2yfPkbCZOVmVHyp4le3WM
9p6A8raIeT99kx/C247pUq+1VriQBs/Z8mYWHSzvIniSOkhqNFH5puWMVGKR7wOx
g3OvgdIJN/o8qE59RFtMGmzQ3fAbruWkF8EL7vaWl5XYoKwsLA/aufLX46AhFxlL
2npBcQHnTP5LQZUVNEFLb9PgsVQ/InDJm7HTpE/kZdnxuPAP6V5UU74J3RnKP0vt
5RG2gE1doFkC7jdNYNEresfjTzbvKKXjCY7DOLE2WF1TJ/mV3dAytGlxuSL9l1Vh
OyyKYrqBpljmIkPg2SdDL8IpcDY4vRc=
-----END CERTIFICATE-----
Generated at Wed Mar 11 20:50:50 2026 by rpki-client