Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/066ae32f-8ec1-3824-bbbf-d06036e4d085.roa
File:                     066ae32f-8ec1-3824-bbbf-d06036e4d085.roa (raw, json)
Hash identifier:          uJlQzS0LO0dFZAQRGA+IDpCrEemwB1xXf04p/DuM42U=
Subject key identifier:   E8:7C:AF:26:EB:7B:A7:3B:C2:61:5C:08:7B:05:5C:8F:E9:92:2E:6A
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B4A4722426248347E85839900
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/066ae32f-8ec1-3824-bbbf-d06036e4d085.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     203
IP address blocks:        192.85.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:22:42:62:48:34:7e:85:83:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=bb6d7720-2243-4ce4-a7e1-3a95779cd3c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:05:b9:64:85:75:82:4f:7f:3e:c6:7d:30:16:
                    b1:6d:ca:d0:e4:1c:a9:24:e7:21:a6:7c:ae:8c:fc:
                    00:5a:ec:17:9f:a8:02:54:c4:0d:85:e9:4e:c1:c0:
                    da:68:bd:a4:dc:f0:fe:62:5d:f7:b2:b1:cf:32:95:
                    82:9c:55:09:42:31:d7:05:cb:cc:f6:e4:e8:0c:b6:
                    60:aa:37:74:4b:82:81:64:a6:3f:a4:e0:9d:f0:68:
                    0e:31:b5:d2:9e:ff:e5:02:7e:dd:fb:c3:e5:20:4a:
                    94:dc:48:da:f2:6a:13:19:5d:f6:6b:c5:5d:f7:f3:
                    dc:38:ab:9e:15:ec:dc:a1:a9:bd:dd:db:0e:1e:9e:
                    d7:e6:31:07:e3:f1:01:15:c4:96:db:ef:8a:2c:79:
                    83:b2:18:84:bd:f6:df:47:04:6d:5d:b3:36:9c:2c:
                    31:2a:5a:f6:56:c2:ec:f1:68:d1:c6:ba:54:15:73:
                    04:bf:b7:87:95:80:1f:f4:7b:b8:3c:a1:89:d8:fa:
                    68:f5:b3:43:ed:8b:46:82:44:b0:3e:ef:44:df:b7:
                    86:b9:5c:96:65:29:0f:79:42:d3:c3:22:06:79:ce:
                    f4:a1:48:cc:f9:e4:2b:34:af:ae:a4:9f:f1:0a:06:
                    70:2f:21:ac:47:a3:b2:20:ac:f9:0e:da:fd:00:e3:
                    d8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7C:AF:26:EB:7B:A7:3B:C2:61:5C:08:7B:05:5C:8F:E9:92:2E:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/066ae32f-8ec1-3824-bbbf-d06036e4d085.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:06:cd:72:9d:1a:20:f8:84:0a:47:f1:a2:b6:3e:79:90:61:
         da:91:35:f7:18:0c:29:97:96:f2:75:8f:86:29:48:44:5d:f5:
         d7:b5:99:d0:55:cb:f7:b8:b1:ab:ce:16:68:7e:b9:1e:62:3a:
         73:ec:da:98:4c:5c:43:30:f2:73:e6:bd:4a:27:67:cb:12:25:
         29:3a:a4:46:9d:3b:fb:36:8f:e6:89:66:04:9b:d4:d5:f6:dc:
         41:b0:28:d5:d7:f7:60:d7:a8:3c:a8:9c:a1:99:16:36:61:29:
         68:1d:88:51:46:34:03:8b:ff:5b:05:26:40:db:3c:2d:45:42:
         0f:a1:dd:bf:ae:7d:8f:c5:1c:5d:a8:d0:58:87:80:c5:15:85:
         df:07:0b:3c:f3:75:e5:3e:73:02:be:f9:75:6e:75:07:cd:1c:
         d8:db:d4:f7:6d:7a:27:a6:7d:18:2b:63:8f:15:3d:3a:1c:7a:
         0d:92:c3:26:eb:0c:b7:c3:29:15:07:50:2d:7b:5c:ce:0b:5a:
         d1:85:43:20:d4:97:8f:d5:e0:3f:1b:29:e0:a2:2f:8d:97:3c:
         65:8a:ce:6c:e6:39:e3:7e:34:6d:a1:43:5e:ff:23:0d:c9:6b:
         9a:6c:89:d7:85:7f:2c:4f:59:d4:63:43:0d:25:83:b0:27:73:
         34:20:56:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:12 2025 by rpki-client