Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/afaa7e92-3710-3407-a613-62a75839ed04.roa
File:                     afaa7e92-3710-3407-a613-62a75839ed04.roa (raw, json)
Hash identifier:          4Za6gHF+DsPexWjy2RkQf4H3rOrAvbcmtWaJnr8esMA=
Subject key identifier:   68:A7:2B:1D:74:EB:14:9D:C5:45:08:B9:A8:3E:8E:28:44:04:C9:79
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EA79426304D25539B8A898FC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/afaa7e92-3710-3407-a613-62a75839ed04.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     202
IP address blocks:        204.104.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:26:30:4d:25:53:9b:8a:89:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f1ccb707-6321-4765-80a6-4d832fd0ec0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c2:b0:f0:57:80:5e:c1:d7:8d:41:0a:04:2f:
                    de:c4:c3:be:0c:ec:8c:17:3d:25:76:c0:b9:02:7a:
                    39:8c:96:54:d8:92:76:ab:65:32:20:ef:88:ee:f9:
                    27:bb:f6:d9:c8:04:d1:f5:f3:64:ae:53:3d:81:2f:
                    48:5d:73:4b:52:28:74:99:0e:3b:fe:83:d9:1e:ef:
                    95:7b:bf:63:ad:ee:2e:76:63:51:d8:e6:98:54:ba:
                    f2:1a:30:12:e5:6f:60:43:8a:cd:0e:ea:24:30:7a:
                    2f:db:2f:1b:32:cf:63:bf:f5:0a:cc:36:14:e6:33:
                    a4:84:3b:b3:cb:2f:77:80:17:86:67:e5:cd:be:56:
                    39:1b:03:f9:f9:55:45:f9:12:aa:41:7b:92:61:8c:
                    83:9a:ae:c4:f9:6d:53:d2:33:d4:d3:15:24:da:96:
                    8f:5f:4d:0e:83:43:ef:49:44:6f:38:39:6c:64:7f:
                    c4:db:3a:74:dc:3a:9c:e7:db:6a:e3:a7:63:17:5b:
                    0d:99:0b:3d:cb:e6:f5:f8:5b:69:e2:74:b3:24:bd:
                    e9:93:48:a5:c3:7a:40:5e:47:29:17:b0:0c:7e:11:
                    9c:74:cd:f8:78:8d:b2:cd:d8:cf:ed:71:8f:42:d8:
                    bd:29:8d:f7:d0:b2:8a:36:b4:5c:1c:86:af:7b:b5:
                    60:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A7:2B:1D:74:EB:14:9D:C5:45:08:B9:A8:3E:8E:28:44:04:C9:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/afaa7e92-3710-3407-a613-62a75839ed04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:6a:62:47:54:a0:66:13:66:31:f6:01:f3:1f:af:4e:c0:70:
         29:1f:d3:c1:f8:11:0a:4d:ed:52:22:86:e9:e3:d0:9b:e1:7e:
         9b:1d:c9:d0:75:c4:0a:cf:7f:ce:42:b9:00:72:04:66:89:51:
         8c:33:12:3f:0d:3a:23:64:70:a4:5d:98:42:e5:c2:66:26:ec:
         fc:45:f5:ef:9d:db:7e:de:26:b2:96:87:29:0b:5b:22:ca:e4:
         c5:76:6b:e7:92:c2:9f:f7:ae:8e:63:f9:72:51:10:c4:6f:d9:
         94:61:ff:d4:b7:33:b9:9b:c7:b9:c1:38:33:34:c3:1b:80:43:
         bf:0d:58:2a:df:25:e4:d6:84:fd:33:82:67:38:05:e7:aa:21:
         78:f6:a5:4e:96:c1:da:d9:24:09:06:45:47:cd:e9:19:42:5a:
         2d:bb:24:14:e5:ff:bf:79:19:80:d9:03:1f:25:8e:db:95:84:
         5d:f3:bc:df:48:c6:68:37:8b:aa:10:bc:31:db:93:16:dc:70:
         f9:20:dd:b4:e4:67:c8:43:1e:0d:fb:fd:23:1f:42:c5:8f:a4:
         76:32:7a:63:8b:da:44:c2:e3:f3:82:bc:74:fa:5b:c6:80:01:
         cf:38:a8:84:48:85:4b:92:7a:c1:4a:19:48:c8:1e:df:7d:db:
         f9:dd:e9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 03:42:53 2026 by rpki-client