Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0bf462af-9a76-3762-a297-14cc5e7b1f19.roa
File:                     0bf462af-9a76-3762-a297-14cc5e7b1f19.roa (raw, json)
Hash identifier:          j2uHBIqPBVAtU9WmNCgwgQMBaU/B9DYu35XWMo3/dFk=
Subject key identifier:   9F:B9:C5:F2:CA:25:6B:9D:0E:54:EB:26:D4:36:DA:EE:43:3C:70:EB
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584F497612EFBB65B29AEB7A3C80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0bf462af-9a76-3762-a297-14cc5e7b1f19.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     203
IP address blocks:        192.57.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:12:ef:bb:65:b2:9a:eb:7a:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8808116f-35d8-4c05-a3c7-f21cb434e384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:de:a9:a7:d0:39:37:0a:49:68:a5:ef:38:e8:
                    ff:d6:79:f0:e0:71:49:6b:7c:b3:0f:37:79:1b:ea:
                    10:71:79:50:9c:66:f1:56:38:03:27:48:e3:af:c4:
                    50:b7:f7:81:67:ee:1c:f9:fb:77:83:f2:04:eb:ad:
                    aa:bc:fb:a9:7a:28:b8:e1:7a:4e:d9:e4:35:5c:df:
                    e3:19:e0:5d:80:04:35:4d:10:52:b9:89:8a:11:6b:
                    3c:3f:b4:34:ca:5d:99:94:39:3e:d0:16:21:19:9d:
                    d0:87:26:8d:49:e2:36:4d:f2:14:f9:4d:f3:29:1f:
                    9a:6d:f8:d7:e3:a4:67:83:8a:67:5c:c5:03:ae:ea:
                    af:01:a0:36:e0:75:34:1c:9d:e3:d9:ad:c5:64:0c:
                    d9:16:09:10:91:b8:25:a5:25:d3:fe:fd:fb:c1:78:
                    6c:e8:36:8f:1d:2d:13:ee:c3:2f:fd:28:1a:cf:64:
                    0a:ce:09:3f:8d:ad:64:8f:da:f0:3e:52:0e:8f:c2:
                    d4:d4:7c:94:da:12:23:74:95:b9:11:e6:c0:bf:77:
                    8f:41:04:78:cb:66:22:66:e1:17:2a:3f:78:4b:39:
                    cc:48:59:87:e3:e8:83:10:58:94:63:d9:b2:1c:b7:
                    6b:93:09:f8:55:2e:6c:c3:c9:a8:01:35:a8:b8:de:
                    d2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B9:C5:F2:CA:25:6B:9D:0E:54:EB:26:D4:36:DA:EE:43:3C:70:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0bf462af-9a76-3762-a297-14cc5e7b1f19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:36:44:00:dd:3f:ef:62:56:cd:ff:5a:f6:bc:08:ad:9d:71:
         fd:bd:97:72:fe:1a:2b:d2:ad:62:bb:a1:c9:e0:05:c9:de:b5:
         1a:7c:cf:e8:f2:6f:3d:26:0d:40:78:5d:b8:72:7d:1c:d2:7d:
         9e:43:e7:0c:a1:73:52:8f:1a:e2:6c:7b:c7:bd:09:1c:04:1f:
         5f:d0:8c:66:bd:29:dd:91:17:20:b2:1e:50:ce:7d:bf:23:b2:
         66:f7:ae:6b:c0:d2:51:2d:2f:3e:ef:89:5f:da:d3:f4:2e:04:
         3d:50:97:34:53:31:4b:2f:2a:88:5b:a8:ce:3c:62:08:c9:e5:
         69:fb:a4:a2:92:3d:c7:5c:5b:b5:d6:21:7f:ae:61:a1:c2:d6:
         b2:ec:b3:ae:44:06:84:fb:96:df:10:d8:43:da:b6:86:20:cc:
         ce:88:a3:01:2c:26:1c:e6:43:8e:50:f4:66:5e:8b:27:2e:09:
         30:4b:e9:20:32:b2:d1:dc:be:ab:bd:8b:1b:df:5b:85:87:31:
         8b:5e:79:9b:0f:e4:68:a7:97:4a:f5:a8:fd:96:a3:68:f6:88:
         46:9a:f5:a2:b6:c0:b4:5f:46:7f:65:73:a6:57:dd:33:5a:e5:
         5b:83:5f:0d:c7:4e:6a:a6:6b:86:ce:93:b9:3a:ec:54:6c:a7:
         a6:7a:48:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:40:42 2026 by rpki-client