Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ff52eb5b-3f24-3e24-9cd9-bfac8fe65e2f.roa
File:                     ff52eb5b-3f24-3e24-9cd9-bfac8fe65e2f.roa (raw, json)
Hash identifier:          uwtuFRA80q06ISkF3Xo46DBTQFsTngBuvQSL2AfKnxo=
Subject key identifier:   45:FF:4F:C2:10:45:E3:BD:CD:24:36:D6:38:B6:A1:B3:2F:02:33:49
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D0D426B3D574890BB593D1460
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ff52eb5b-3f24-3e24-9cd9-bfac8fe65e2f.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     202
IP address blocks:        216.240.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:6b:3d:57:48:90:bb:59:3d:14:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=21108c60-2f43-49f4-bb3c-a2e9ff1e988b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7a:45:af:d2:ab:ab:01:de:cc:12:58:66:04:
                    29:4f:cf:36:ac:8a:2f:aa:d6:54:b0:51:8e:87:fc:
                    51:96:cc:cd:0c:3e:cf:56:dd:0d:53:53:ed:49:5b:
                    71:1c:e0:68:6b:79:9b:0d:90:23:5a:13:49:55:5f:
                    82:31:28:73:33:2d:7a:05:be:62:ca:c4:ae:0a:c1:
                    18:89:23:ab:b4:2d:3b:e9:51:91:48:da:3e:87:a1:
                    58:cc:66:52:a6:de:24:7d:55:cd:b3:4d:27:ec:26:
                    0c:b3:82:bc:c5:5e:a1:4a:27:a6:b5:6c:4c:ef:59:
                    4a:1e:52:81:1a:22:90:a0:9b:cb:c0:05:6d:42:d0:
                    8f:cf:54:e9:3a:6d:aa:e3:26:74:60:05:04:87:ef:
                    bb:46:5d:89:01:67:5c:bd:8b:dc:8f:02:4a:01:c2:
                    cf:9b:cd:ab:8b:de:b8:28:d4:d5:1d:2e:53:cf:71:
                    1b:ab:77:17:5d:30:44:63:cb:34:74:51:f1:24:f9:
                    c7:d8:5a:9f:a2:80:d8:34:02:48:59:69:9a:fb:85:
                    2f:10:19:a2:8a:db:7c:78:8a:de:40:a9:cd:69:8e:
                    32:1c:ee:aa:2a:29:f7:87:cd:0b:13:2a:65:b8:9a:
                    45:33:9a:58:50:29:32:d8:58:f1:fd:b6:5a:ef:68:
                    6f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FF:4F:C2:10:45:E3:BD:CD:24:36:D6:38:B6:A1:B3:2F:02:33:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ff52eb5b-3f24-3e24-9cd9-bfac8fe65e2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.240.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:31:d9:bc:e0:03:3b:0c:24:7d:fb:a0:bb:e5:a8:62:ce:fc:
         af:6e:69:9d:b8:05:4a:fa:68:66:b8:9c:04:d9:f6:0a:19:d7:
         1a:db:6a:7a:4e:27:f1:68:7c:a1:f9:c7:e8:97:16:d6:36:63:
         a1:a0:30:13:7b:8a:44:8d:d3:be:3a:c6:88:46:36:e3:a8:85:
         62:90:ac:7b:14:8a:47:8e:16:28:d7:8b:bb:03:ac:e7:61:0c:
         55:b7:4d:48:e5:c8:d6:a5:36:f4:cd:9f:db:77:59:41:63:ea:
         3b:4e:e7:19:a8:1f:d7:e9:b9:99:11:b7:37:f0:f1:ca:22:88:
         ae:fa:c8:0a:e9:69:5f:3a:85:d4:fc:28:54:fa:bf:93:ba:9c:
         e1:63:d7:6b:80:f4:89:a3:6b:4c:14:43:e6:a9:69:65:d8:87:
         3a:a1:21:dc:21:f9:ba:09:b8:65:97:a3:95:a9:db:b5:9f:1e:
         10:39:60:ff:8a:42:42:a6:51:d9:34:76:10:79:8d:5d:7f:0a:
         03:7d:43:79:93:2a:58:b7:f5:b3:09:f9:83:61:60:11:8f:3f:
         6f:23:ff:b2:c5:b0:e1:e0:78:18:9e:b5:53:ff:dc:96:9d:12:
         51:61:5c:4d:6e:4d:19:db:b3:61:b6:c6:c0:46:4d:cb:a9:89:
         83:41:04:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 20:50:48 2026 by rpki-client