Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9fd3d05a-2a7f-3fe4-8465-b11ccde6b726.roa
File:                     9fd3d05a-2a7f-3fe4-8465-b11ccde6b726.roa (raw, json)
Hash identifier:          XPA0wxbdNVgwerhccVFjSdjtq26TqbaB9ulqzhF/C7I=
Subject key identifier:   00:29:33:10:15:F4:CB:73:E8:C6:38:43:4B:2F:A8:05:2A:C9:15:70
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D091269C8E0E42B37B184E000
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9fd3d05a-2a7f-3fe4-8465-b11ccde6b726.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     202
IP address blocks:        192.57.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:69:c8:e0:e4:2b:37:b1:84:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=884dadb7-14dc-4351-9f7d-e91c7d971a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a0:e0:5e:79:51:e9:d5:b4:93:ca:de:98:34:
                    15:f2:16:a8:6d:e0:b3:7c:b3:50:5a:c8:e3:0f:bf:
                    fc:a3:ce:47:5b:70:f1:95:07:85:d8:d6:df:b1:92:
                    5e:55:e9:49:16:34:2d:4a:11:75:39:b4:ee:f4:b1:
                    44:25:55:e4:8b:b8:61:0c:24:aa:c7:c9:6d:dc:b9:
                    5e:bd:aa:39:26:62:51:fe:d9:58:83:e3:8d:8d:53:
                    c7:b5:0a:37:8a:2a:ae:43:d3:04:f4:21:f0:07:40:
                    b6:60:a1:05:c5:b0:eb:6f:0a:5f:48:d4:7a:ca:7b:
                    21:8d:d1:69:31:ec:4d:b2:b2:4f:01:a0:f6:66:a9:
                    c0:79:11:ed:78:95:1c:75:c2:90:dd:9c:be:ea:34:
                    2c:03:76:7e:cd:63:66:97:8a:91:46:15:4f:87:90:
                    e7:a9:12:ff:a7:d7:ea:f8:29:4c:b1:5c:38:66:b7:
                    47:fd:d5:c7:8c:35:13:53:47:32:f5:b3:6c:1d:c3:
                    16:6e:2f:03:be:0c:dd:b1:df:d0:d9:c4:b2:9a:b5:
                    9d:7d:07:46:6f:50:a6:e8:80:c7:54:28:18:2e:28:
                    f8:ff:0f:6d:f7:fc:e8:92:73:d1:87:75:70:85:69:
                    4b:8d:28:03:c0:9d:59:ff:c4:82:fe:b9:4d:68:68:
                    ad:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:29:33:10:15:F4:CB:73:E8:C6:38:43:4B:2F:A8:05:2A:C9:15:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9fd3d05a-2a7f-3fe4-8465-b11ccde6b726.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:37:84:39:f9:09:7b:02:dd:99:e2:43:db:4f:9d:b7:5b:45:
         67:d1:70:f9:72:32:da:2e:e0:a8:6e:7e:b8:5c:54:90:1c:76:
         49:ad:f3:18:ae:82:40:ce:fa:68:82:03:c1:80:4d:00:84:79:
         5c:e5:90:1c:d9:83:68:43:7d:21:00:5e:35:01:4a:ba:34:20:
         e2:f7:f7:f5:53:b1:f5:86:9f:63:10:f6:07:d0:30:f8:bd:5b:
         2a:2b:6c:8e:fe:d1:2d:79:10:74:1b:c3:f9:c3:bb:2c:4e:92:
         1f:58:c1:c2:02:b9:6f:7b:4e:47:3e:38:a2:e5:24:78:94:2f:
         c5:42:1b:2f:ae:72:fe:98:84:30:e8:95:8d:38:2f:3f:3f:a9:
         6d:16:b9:b8:46:7a:15:13:3b:e8:76:80:be:ae:ef:a4:54:c9:
         17:b7:50:81:bd:d3:f6:94:e3:9c:b0:cd:f8:ee:32:e1:a7:c5:
         b2:c9:6a:0d:1d:14:85:03:5e:38:2f:3f:fa:8e:1f:48:0f:d0:
         2a:f0:03:11:dd:5c:2a:10:47:66:9b:4a:5c:8a:74:19:c3:d2:
         a7:6a:f0:6b:11:34:87:17:1c:02:28:fd:aa:30:ed:82:0c:17:
         e5:bf:eb:1c:f9:59:ac:cf:7c:56:f7:75:42:e1:c9:fa:6b:38:
         76:f3:fa:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 20:54:40 2026 by rpki-client