Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e0fbdb2a-5dc8-31a0-bf73-7df44880408b.roa
File:                     e0fbdb2a-5dc8-31a0-bf73-7df44880408b.roa (raw, json)
Hash identifier:          RimDAgU6hGv6mYMDvrDvvfCftLy56MDsJrj2EECmAs8=
Subject key identifier:   76:CD:07:C4:42:A0:42:28:CA:2D:B2:23:8D:92:17:D3:7C:0C:0B:4F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D0A77B3C096A5122C831A9900
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e0fbdb2a-5dc8-31a0-bf73-7df44880408b.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     202
IP address blocks:        204.105.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:b3:c0:96:a5:12:2c:83:1a:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=c825c7ab-3c9c-4f68-bea4-347bd9d3ff28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c1:43:f3:96:cd:be:78:7d:ab:50:34:96:84:
                    d0:51:fa:9a:7e:89:0a:49:22:f7:d2:03:15:c7:10:
                    50:c9:33:e8:9f:51:aa:36:63:bf:74:ea:47:1b:07:
                    8f:40:c8:48:84:2a:f8:99:30:cf:64:e4:b5:6b:b0:
                    4e:ee:4b:6e:72:63:34:2a:97:45:82:ba:75:a1:0d:
                    64:1a:b9:8b:81:63:30:cf:07:88:7f:e6:94:91:44:
                    4c:53:be:e6:f9:9a:ef:0d:52:6a:52:2f:ba:15:69:
                    d7:9a:94:ed:cb:93:f3:09:39:57:fb:9f:1a:2c:22:
                    73:27:c1:bb:e0:bc:fe:94:66:d3:50:05:0b:1d:0e:
                    62:47:96:c3:de:99:b5:b3:37:4b:53:b9:11:7f:f3:
                    38:f0:4f:dd:a6:aa:52:b6:67:98:83:ac:5a:53:da:
                    15:4e:bd:8a:f0:2e:ca:9f:f3:f5:3a:df:a4:a5:91:
                    e9:86:15:3c:cf:f0:6f:65:77:38:6c:01:85:b3:67:
                    5e:43:d4:99:07:f0:7c:e9:d8:fd:b9:cc:36:66:98:
                    d9:d0:fa:e2:9c:5f:10:d5:69:cc:0e:12:34:66:4e:
                    75:67:a6:0a:e8:fd:2a:a0:4c:69:99:d6:71:3f:d6:
                    8a:b0:cf:65:e3:43:ef:ab:a3:ea:dd:5d:8d:73:07:
                    76:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CD:07:C4:42:A0:42:28:CA:2D:B2:23:8D:92:17:D3:7C:0C:0B:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e0fbdb2a-5dc8-31a0-bf73-7df44880408b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.105.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:74:6b:ba:fd:e8:6a:9c:32:fd:64:5e:d7:84:f0:ae:34:52:
         cc:7b:6b:f3:5f:b9:d0:0f:41:ef:db:36:09:74:e7:e0:d3:56:
         2c:a9:fa:96:ba:3b:44:fd:56:07:d0:ae:70:fa:09:e1:4e:82:
         0a:da:f8:1f:63:48:88:ea:6e:5a:d5:c2:c3:78:79:83:1f:8b:
         af:e4:45:70:a2:f5:c5:8f:ac:23:4a:69:fd:b2:62:66:02:c5:
         5c:4e:1c:d0:dc:9c:4c:76:17:3a:93:59:63:83:9f:37:b0:12:
         2c:3d:77:40:13:31:68:fe:bf:44:87:ee:61:21:fd:77:42:84:
         64:75:5d:73:80:b0:fa:8b:02:26:7e:b6:58:a1:48:57:e2:6b:
         25:cc:cf:20:cd:4a:05:70:71:e0:89:7c:86:99:af:51:ba:22:
         7c:80:61:9b:94:c8:4d:0e:9f:d2:3e:65:20:47:ec:e4:1b:28:
         d3:f5:1a:ef:49:3c:ba:6c:2e:ee:db:75:33:56:3c:09:34:4c:
         dc:8d:98:56:54:a5:82:81:d5:f6:bb:17:c6:36:86:df:36:38:
         e5:e6:7f:0f:00:4d:cb:68:7b:b3:51:4d:19:01:6c:8d:2f:a5:
         05:af:66:a0:51:2b:44:6f:9f:00:c9:6b:01:b7:0b:df:47:79:
         3e:8c:0f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 20:51:35 2026 by rpki-client