Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d7b8d1ff-6028-304f-9c22-4bee7cb99a4a.roa
File:                     d7b8d1ff-6028-304f-9c22-4bee7cb99a4a.roa (raw, json)
Hash identifier:          OZPkpL/lhvkGrDscAXSHF5oKM8Z+8n/uT9Sc1umuaH4=
Subject key identifier:   8A:0A:29:9E:61:6B:92:16:7B:DC:C6:BE:06:78:DB:2D:D3:CA:58:A6
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584DEB15F34EAA6C530A46A954C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d7b8d1ff-6028-304f-9c22-4bee7cb99a4a.roa
Signing time:             Fri 22 May 2026 13:00:31 +0000
ROA not before:           Fri 22 May 2026 13:00:31 +0000
ROA not after:            Thu 20 Aug 2026 13:00:31 +0000
asID:                     203
IP address blocks:        204.104.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:15:f3:4e:aa:6c:53:0a:46:a9:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 22 13:00:31 2026 GMT
            Not After : Aug 20 13:00:31 2026 GMT
        Subject: CN=cbc00255-a8fb-4546-804c-6cc91e02d657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b1:9b:a9:22:5e:c7:e0:4a:b9:6b:f1:1e:88:
                    da:51:c5:b7:42:fe:02:7c:94:76:07:4a:c1:a9:f1:
                    63:db:2c:80:ce:c8:c2:63:fe:4a:e2:9f:dd:3f:39:
                    a4:cd:87:02:45:75:83:05:56:05:19:24:2f:34:72:
                    a3:ed:aa:4d:ba:d5:9f:e1:4a:11:4d:cb:5d:77:ab:
                    bb:b8:f5:8f:71:4f:39:21:e1:7f:60:46:9a:e3:3c:
                    e4:03:11:ad:08:aa:3c:3a:d6:5d:a7:bb:b8:40:1a:
                    77:67:cf:98:51:54:bc:34:a9:48:d2:68:a3:83:9b:
                    5f:d0:90:9d:6c:c0:27:e9:d1:7f:64:b6:d8:23:05:
                    72:32:95:d0:c4:b0:28:03:49:6c:04:85:a6:4c:a0:
                    7e:6f:59:2d:a2:7d:59:5b:f7:82:9c:cf:90:bf:bd:
                    32:91:b0:18:f0:00:81:e3:4c:12:7b:5d:15:0f:e3:
                    f2:e0:e0:33:99:5e:f6:60:52:3a:cf:ef:20:54:06:
                    1a:fc:8c:7e:ac:29:3d:9a:18:d8:09:2e:41:6b:80:
                    51:8c:c1:09:f7:f3:5d:3e:cf:2f:db:f0:08:80:a1:
                    73:0d:95:2c:f1:c9:b4:cc:4c:a9:1d:50:a6:74:a0:
                    e7:a9:4b:fa:d5:6a:29:e2:65:f3:58:ec:a3:29:66:
                    ab:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0A:29:9E:61:6B:92:16:7B:DC:C6:BE:06:78:DB:2D:D3:CA:58:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d7b8d1ff-6028-304f-9c22-4bee7cb99a4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:2b:f3:1b:c9:51:e6:3d:1a:8b:69:ce:7d:54:b0:06:95:1e:
         e0:11:66:6b:4c:6c:01:ef:2e:7b:37:05:5e:2a:5c:72:17:35:
         d2:eb:4f:d1:b4:d4:92:31:6a:5e:35:f6:f7:d5:b1:3d:bf:ed:
         b4:68:ae:9f:bd:65:b0:b9:a6:6a:9b:dd:da:38:37:1f:03:b6:
         45:16:84:b8:82:bd:af:2c:0d:42:c5:10:28:0a:e9:31:2f:c1:
         8e:46:20:bf:6a:61:5d:d4:b4:eb:91:a6:2f:07:08:d8:33:a3:
         a0:1f:9a:4d:72:13:ca:3c:13:f5:2b:12:2a:62:74:a1:01:81:
         df:15:9a:c7:fe:3d:14:91:92:64:8d:6a:23:d0:f9:ba:1b:19:
         8b:7d:8d:81:47:2c:b2:c9:fd:c0:54:24:be:01:17:19:14:c5:
         e8:c2:0d:09:b5:d3:85:0f:4e:0f:ab:8d:b4:d9:9b:91:6e:69:
         b5:91:1e:b1:34:1f:42:7e:c7:94:3a:56:7e:13:35:71:5e:1d:
         de:b5:6f:ee:ff:49:6e:c2:a7:c0:2a:6a:9a:04:37:61:26:54:
         0e:da:11:8b:76:5e:3f:83:ee:bc:75:76:62:d9:31:12:ab:77:
         a0:e3:4f:52:68:33:77:d1:f9:4d:67:7c:34:0d:da:14:92:17:
         0e:37:6a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 17:51:52 2026 by rpki-client