Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/99f88e91-3533-30b8-a2ff-b408d1c6585c.roa
File:                     99f88e91-3533-30b8-a2ff-b408d1c6585c.roa (raw, json)
Hash identifier:          T9wBz2bfdKQF4ZWH1oKELPUyITP+EFp5K2GtQmnStJ0=
Subject key identifier:   72:BD:3E:3A:DF:EE:B5:2F:31:01:CB:00:9D:79:AC:5A:64:9A:93:EF
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584DEB15EC20F879246DFE3E6D80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/99f88e91-3533-30b8-a2ff-b408d1c6585c.roa
Signing time:             Fri 22 May 2026 13:00:31 +0000
ROA not before:           Fri 22 May 2026 13:00:31 +0000
ROA not after:            Thu 20 Aug 2026 13:00:31 +0000
asID:                     203
IP address blocks:        192.85.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:15:ec:20:f8:79:24:6d:fe:3e:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 22 13:00:31 2026 GMT
            Not After : Aug 20 13:00:31 2026 GMT
        Subject: CN=a82e35d0-31d7-44f7-a140-974cf8680dc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:29:fc:57:2c:d5:c8:89:84:35:ad:b8:1b:b5:
                    99:5e:76:10:da:e7:9e:1e:6d:55:e8:95:fc:c4:4e:
                    31:3f:ae:21:3a:58:13:53:b5:94:ec:35:4c:ec:56:
                    9c:15:8b:5b:87:82:43:9e:15:85:37:ab:aa:9d:48:
                    7f:e9:8b:1d:3d:3d:60:50:93:83:83:6b:1e:4c:99:
                    86:02:6a:1a:0a:c1:e1:b3:00:f0:74:d0:9c:f0:03:
                    30:6b:3d:84:b3:aa:2e:3f:99:b0:ee:b6:17:79:1b:
                    83:d4:11:c8:3e:d0:4c:03:69:29:6b:61:78:ec:d8:
                    18:9b:d5:7e:c4:02:a5:02:93:5f:00:60:59:fb:27:
                    71:63:78:bc:b3:92:b5:13:9f:ed:1d:f0:b2:cd:eb:
                    b1:93:6e:d9:77:0d:fb:c2:54:93:f2:e5:ef:d4:17:
                    7e:8d:d6:80:1b:8d:69:a9:16:87:a4:c5:56:ac:3e:
                    78:f0:1d:14:bc:cf:8f:ed:7b:2b:1b:71:7b:f0:bf:
                    90:20:1c:a3:d5:0f:d4:69:1b:8c:c0:64:5e:37:b8:
                    8f:31:78:63:c3:c4:09:66:17:0d:d3:33:2d:c5:c7:
                    c7:d6:e3:c6:7b:9c:38:d8:37:e5:ee:15:8b:77:be:
                    79:43:42:18:9e:e6:9d:00:4f:0d:a4:8e:a3:2f:bb:
                    34:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BD:3E:3A:DF:EE:B5:2F:31:01:CB:00:9D:79:AC:5A:64:9A:93:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/99f88e91-3533-30b8-a2ff-b408d1c6585c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:4e:4b:10:54:ec:9c:bc:02:23:87:c2:23:0e:73:6f:94:2d:
         04:08:05:df:92:0d:05:95:8a:1f:80:91:a5:a6:86:b5:fb:27:
         b4:17:92:cf:63:c8:be:d1:04:83:24:eb:3d:56:81:37:4a:00:
         df:91:87:37:9e:0e:68:53:37:08:e3:1f:03:4d:09:bf:66:5e:
         bd:bb:e2:89:b7:80:88:68:ec:99:bc:c2:40:57:39:47:a8:96:
         c3:17:22:9e:fa:bf:5c:07:d3:74:65:54:f7:9f:b0:76:e5:27:
         1a:f5:a6:a7:e8:2a:e6:83:3a:a2:9e:cd:0a:5d:42:0c:bf:2f:
         eb:d5:83:93:e5:e3:2e:49:da:12:47:8b:4f:3e:07:48:e7:b8:
         88:1f:66:b5:de:bf:40:e2:04:5b:1b:f5:ca:32:79:50:42:c6:
         20:f6:0c:ac:52:40:0b:55:00:a6:98:70:4e:5f:c9:06:45:8e:
         32:98:a1:05:ee:9a:4d:2d:ea:d6:d2:72:53:11:8c:6f:5f:a3:
         99:6a:9f:e1:e9:8f:fb:d7:7a:44:25:d1:f1:f7:f0:3e:b4:c0:
         29:bd:b9:2c:ed:57:6d:18:30:4e:e9:6b:3c:af:ff:da:f6:03:
         dd:d3:4b:52:c5:aa:b3:46:9d:ea:df:99:d7:01:45:15:6b:04:
         d6:d3:d1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 17:55:09 2026 by rpki-client