Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a72c3134-21a1-398b-a377-6fdc6ca88997.roa
File:                     a72c3134-21a1-398b-a377-6fdc6ca88997.roa (raw, json)
Hash identifier:          f7Fpgwl7M2wvnIEs/ivvN/o9GrpQQiWLIRWxYgSVpsY=
Subject key identifier:   EF:79:ED:AF:27:8B:A6:A5:CE:F5:30:74:F3:7F:19:7F:83:96:19:99
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D0A77B634DAE95490EEB2A560
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a72c3134-21a1-398b-a377-6fdc6ca88997.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     202
IP address blocks:        205.141.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:b6:34:da:e9:54:90:ee:b2:a5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=cce0fd17-5c56-4d98-b1d9-14d6f4569a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:da:68:1f:3c:22:08:9e:0c:fb:ed:36:4f:ee:
                    04:c2:ee:89:31:4e:a4:9f:21:3b:67:35:14:a5:ec:
                    23:06:e2:03:02:ea:0d:4f:94:16:d2:04:7d:79:8a:
                    ae:06:58:55:db:35:fc:02:b3:28:fc:1b:16:70:b0:
                    f4:74:83:8c:79:a4:8e:88:0c:34:31:81:e7:f3:f5:
                    80:fb:04:71:aa:95:ad:bc:73:37:5f:84:dc:91:60:
                    af:1b:98:5a:cd:f8:39:da:9a:d4:1f:27:67:40:11:
                    be:b6:da:bd:3a:bf:f7:40:ea:80:f5:69:9a:b3:17:
                    a6:48:f8:77:6c:91:1a:fd:cd:b3:82:24:64:72:4d:
                    2e:bc:85:d6:bc:d5:7c:52:29:4d:bf:3d:63:fb:94:
                    67:b1:6a:b5:1e:be:67:be:84:8a:34:7c:cf:1d:78:
                    c6:ca:aa:6e:b3:5f:c0:83:f3:f1:c8:c1:6a:e1:a2:
                    e8:93:7f:af:f2:58:7f:14:03:cc:db:62:b5:3d:d7:
                    b5:1e:3a:1a:80:4a:6c:41:89:74:ef:a5:a3:44:27:
                    60:f6:ea:8b:b1:ea:a2:de:30:ca:13:3e:33:5b:e9:
                    0f:05:82:68:59:68:79:88:66:a0:f7:70:9b:5e:c8:
                    26:45:19:55:65:d6:0e:17:d7:df:0d:22:64:32:73:
                    7b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:79:ED:AF:27:8B:A6:A5:CE:F5:30:74:F3:7F:19:7F:83:96:19:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a72c3134-21a1-398b-a377-6fdc6ca88997.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.141.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:22:bb:fd:06:41:cf:f4:be:7d:74:84:2b:57:c8:68:e1:1f:
         e7:5a:1e:51:60:3d:bf:9c:2f:33:47:b4:c7:3d:d5:09:b3:66:
         68:d2:70:80:1a:66:b8:d1:f4:05:c4:77:f4:97:96:af:55:02:
         19:0f:e6:48:96:d6:87:02:67:e2:07:57:6c:a8:ca:b2:89:3d:
         2e:65:8d:af:60:59:23:e3:8d:b0:0d:b7:60:52:4a:ab:0d:93:
         99:11:63:55:35:75:d4:77:4b:11:29:48:58:b8:5a:50:72:6f:
         75:44:3a:17:2b:95:ce:e0:d1:60:6d:0b:6c:c1:dc:96:e1:e4:
         e0:2c:05:be:6b:79:d0:c0:88:cb:14:cb:61:d5:71:84:6e:9d:
         8c:30:36:4c:57:3a:95:24:6d:7f:d6:a8:92:ea:af:fb:db:e7:
         29:80:9d:ab:0e:ae:c9:6d:d6:2c:09:c3:2d:de:bb:2c:86:23:
         43:d5:23:9c:22:b6:a6:4d:31:9d:74:68:51:c5:1e:cf:95:24:
         29:3a:1d:f0:90:9e:b8:88:30:99:1c:41:e0:4e:37:6a:c2:3d:
         0d:a8:24:ee:1c:39:3c:e0:04:90:54:4d:d7:8f:2b:24:a3:ba:
         5f:52:21:bd:6f:34:d9:de:6a:cc:e9:76:d1:05:6b:d6:59:ea:
         0a:b9:ff:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 20:54:43 2026 by rpki-client