Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d2298a8e-cf78-387e-b47b-3e16d3a9a535.roa
File:                     d2298a8e-cf78-387e-b47b-3e16d3a9a535.roa (raw, json)
Hash identifier:          Ll11piOLmjUW/gK3Bz8OjVLuvs8s0gxeJAzljNZ77OE=
Subject key identifier:   05:F9:26:3F:97:9E:D9:F7:E9:02:29:5B:E2:87:FE:3A:85:CD:20:85
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D0D4263EBDC3002158B126F00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d2298a8e-cf78-387e-b47b-3e16d3a9a535.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     203
IP address blocks:        204.104.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:63:eb:dc:30:02:15:8b:12:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=e6479d5c-b666-46dd-a110-1634fb6e351e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cb:37:0f:4c:0c:a7:49:b9:92:43:e6:39:aa:
                    96:14:aa:ee:2b:6d:9a:35:dd:5c:8d:46:2b:ef:be:
                    bf:e0:ed:32:ef:43:0e:c3:64:d5:75:c0:95:e9:9a:
                    24:6a:ce:df:57:c4:b4:6c:81:3a:b8:a0:14:ab:45:
                    70:6f:04:57:60:e7:a9:19:1b:15:12:b7:c3:5e:0e:
                    c3:ca:9b:0b:5c:2b:9d:ec:38:a7:9d:1b:66:ea:b1:
                    35:83:ad:e1:79:9d:5f:c2:3d:79:c5:7c:3a:da:af:
                    03:84:96:1a:e5:b7:3f:56:93:7b:86:2d:99:57:fa:
                    97:9d:c2:7e:5e:b8:4a:a1:f8:e6:31:b3:fc:08:69:
                    7c:51:99:d7:31:55:ad:57:26:1f:d7:41:ed:6f:e5:
                    8e:38:7b:38:f7:cc:f8:bf:e9:c1:2a:d7:ed:50:b4:
                    65:95:ab:04:0c:a2:b3:84:e8:f6:70:88:41:bd:92:
                    d9:99:4e:d5:d6:b7:b6:bd:e6:f7:47:ed:ff:53:3c:
                    7e:35:7f:c1:88:e4:8a:89:18:bf:6e:91:69:ee:93:
                    3d:ef:b0:77:a0:4a:f3:74:47:de:50:db:0b:bf:f7:
                    ea:3b:76:06:30:74:c4:d0:10:89:d6:b0:e5:69:ea:
                    70:bb:f4:2e:d4:17:cd:db:96:4d:e0:a0:70:c0:eb:
                    cf:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F9:26:3F:97:9E:D9:F7:E9:02:29:5B:E2:87:FE:3A:85:CD:20:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d2298a8e-cf78-387e-b47b-3e16d3a9a535.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:3d:c7:a7:33:a3:a2:1c:84:1d:e9:70:eb:69:23:fc:0f:65:
         63:2d:fa:00:f4:79:cb:45:e8:f6:b0:2c:ea:93:89:e2:e1:02:
         5f:1c:ad:75:65:2b:dd:53:af:0c:47:e5:fd:dd:52:66:15:9f:
         0c:63:7d:45:71:22:34:b2:bc:0b:1a:9c:21:eb:78:6d:7d:17:
         bd:7d:d1:c7:97:df:db:a0:57:74:c6:ef:e8:d9:2d:0a:82:3a:
         e5:c3:f5:40:bc:f3:0d:98:74:c9:40:20:26:0c:53:7b:e6:d7:
         a0:26:2d:7b:b9:70:f8:42:cc:9f:fb:fe:84:7b:07:18:50:a2:
         6c:a4:d6:b5:92:6a:1f:65:14:5d:e7:c3:18:67:d6:c8:5b:b6:
         f6:1f:ae:4a:bc:f4:72:78:74:98:f5:0d:f5:b2:6f:d3:7e:60:
         60:e2:6a:ab:90:9c:22:8e:e0:05:8f:e7:cb:5b:3c:98:e5:81:
         84:5c:92:5b:78:62:e6:89:25:09:3a:b6:f3:8d:0a:20:04:b5:
         87:71:a2:19:2b:3d:bc:b2:35:60:ae:a9:4f:7e:35:bc:12:c9:
         ea:53:8a:7d:83:51:80:20:e6:ca:35:b7:c2:2c:a9:34:54:6b:
         9c:c7:b4:a9:b3:28:44:8a:5a:af:32:e7:1a:db:1f:6f:d8:7c:
         28:af:55:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 05:41:56 2026 by rpki-client