Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e6cfff56-5ce0-3945-804a-d9cd726dc7c0.roa
File:                     e6cfff56-5ce0-3945-804a-d9cd726dc7c0.roa (raw, json)
Hash identifier:          PO7Sxn+zjXaTQ0KeBJVOXB+pUyJHYcq6NdLveJ5zS1I=
Subject key identifier:   B8:4D:10:C3:0B:F8:B6:69:5D:45:14:54:3F:6C:65:49:FF:2A:DA:84
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EF7177CCD6ED94D6E38A65400
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e6cfff56-5ce0-3945-804a-d9cd726dc7c0.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     203
IP address blocks:        204.105.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:7c:cd:6e:d9:4d:6e:38:a6:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=6360a74c-f0ce-4e97-9e4a-d63cb1305594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ef:5c:7c:54:07:c1:f0:d2:ae:f3:f1:11:ed:
                    de:8e:b2:2b:5c:ed:bb:98:5b:e8:86:91:ca:d2:b5:
                    2f:3e:78:36:97:4c:9d:2f:36:20:92:dc:06:81:ed:
                    23:86:5f:db:2a:37:17:3a:03:82:b8:2e:c2:91:d0:
                    0e:01:cb:e5:b5:29:f0:44:0c:6e:b3:c5:bd:68:73:
                    ce:36:0f:62:d3:cb:bd:96:a5:3f:73:d5:c6:22:d7:
                    a9:82:27:21:14:8a:41:39:c2:8b:45:48:b4:48:42:
                    11:38:02:6f:e5:00:b9:c2:de:20:38:d0:41:26:9a:
                    a1:17:e8:92:ca:fb:93:26:37:00:6c:ac:17:c5:27:
                    f0:88:55:39:08:67:92:7f:b3:64:f8:65:53:61:53:
                    a9:d6:21:6d:2d:09:67:e1:97:a4:92:91:99:27:82:
                    bd:7e:46:f6:d3:c7:cc:d7:b6:1e:e3:1f:91:b1:38:
                    6e:6c:11:08:d0:87:00:02:c5:e8:68:3f:cc:ce:24:
                    42:6e:e2:50:ab:ea:0f:1d:29:e4:d4:42:6e:af:0d:
                    bd:9e:8b:04:7f:98:2e:75:6c:82:a0:60:d7:ce:2b:
                    a1:6a:e8:ff:ed:c5:0b:f5:47:9c:11:7d:ab:52:f2:
                    c1:23:75:c9:5d:56:f4:c1:95:fc:a5:16:22:43:e0:
                    da:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4D:10:C3:0B:F8:B6:69:5D:45:14:54:3F:6C:65:49:FF:2A:DA:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e6cfff56-5ce0-3945-804a-d9cd726dc7c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.105.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:48:a8:29:41:76:1f:d8:b6:f7:98:e2:5d:f3:97:44:8f:b4:
         08:e4:ba:90:40:2c:8a:43:2d:64:01:6a:1f:56:cc:46:bf:d5:
         ad:d1:c8:92:2e:ce:1e:e3:e7:fc:2a:37:75:34:c8:2d:a9:57:
         3b:a0:9e:a0:3a:7d:81:31:0a:df:fe:2e:de:25:20:76:17:96:
         8a:74:47:7a:b5:f9:64:f9:14:a8:be:f9:a0:53:0f:d2:bc:83:
         10:5f:70:23:a1:98:a4:f7:c7:c8:23:e8:6d:01:8c:d5:f1:25:
         17:cc:0d:90:c7:53:8f:e0:ab:c2:00:ed:30:e8:92:e0:3d:db:
         ce:e2:d8:f2:81:6d:e8:91:ba:aa:2a:d4:50:86:43:26:34:02:
         84:31:aa:be:cd:13:31:e7:cc:8a:0c:6d:2a:f5:94:bc:ae:e8:
         40:64:b1:64:0b:c2:49:19:86:da:4b:2b:87:03:a3:db:9e:a9:
         18:23:af:37:9e:04:22:5f:84:01:69:a5:ac:88:12:d5:56:7d:
         23:a6:db:66:66:4b:52:ca:ba:59:6d:05:a3:95:1e:91:c5:6e:
         b5:29:06:ba:9f:42:19:f3:3d:83:5b:b7:f4:38:79:70:6d:77:
         63:aa:b2:a8:53:f8:aa:5e:14:b4:21:40:56:09:cf:b8:1c:e6:
         47:65:4f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 00:50:49 2026 by rpki-client