Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0c0ab1ed-fd72-31dc-b5b7-6bf28501efb2.roa
File:                     0c0ab1ed-fd72-31dc-b5b7-6bf28501efb2.roa (raw, json)
Hash identifier:          HeqYDvG0pePaoAiqc+iHxl+mxulFxGFKlcYPfnWnpcE=
Subject key identifier:   06:A5:26:89:E9:4D:87:5B:E8:B7:B4:9A:14:7F:78:22:2E:73:B4:C6
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B4A472740227E341B17340C00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0c0ab1ed-fd72-31dc-b5b7-6bf28501efb2.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     202
IP address blocks:        204.104.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:27:40:22:7e:34:1b:17:34:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=891ea024-6028-43b0-9dc4-859238287e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8b:98:26:bf:39:1a:7c:a0:e6:81:19:ed:aa:
                    47:49:a8:a7:4e:95:8c:5b:08:20:fb:06:22:5b:7e:
                    2d:dd:7e:12:65:b6:f5:96:00:e4:e0:36:84:e9:3b:
                    81:20:27:c3:e7:ce:54:21:36:e0:ef:8a:4e:52:30:
                    36:e5:80:6e:00:63:d7:a7:d4:77:49:5e:9f:ed:bd:
                    55:07:2a:8d:1f:60:80:f6:cb:4f:3b:1f:32:b1:df:
                    c9:e3:31:f1:c1:0a:cf:35:36:28:91:55:05:37:c1:
                    6b:69:18:2c:02:8e:85:88:69:f9:47:e0:84:77:52:
                    03:c3:ad:c1:8b:ae:a1:b1:e6:eb:db:3c:9f:29:8d:
                    ed:41:d3:5c:56:a1:3f:2b:ed:e8:15:07:86:c8:e6:
                    49:d7:1e:8b:d6:9f:11:39:59:ef:01:b0:df:9b:01:
                    b0:7b:62:60:d5:59:63:62:65:eb:ea:93:c1:60:2c:
                    31:20:4c:c3:3f:18:62:55:f6:e7:7e:9d:fc:53:ff:
                    1b:85:af:91:ea:31:0c:40:8f:4f:8f:51:73:63:66:
                    c1:18:35:2c:f4:0e:b7:36:00:43:6d:2e:1e:f3:ec:
                    a1:c2:bc:99:bb:6b:73:f2:b6:37:b8:ce:35:d0:29:
                    2d:50:17:a9:75:d8:6c:67:e5:6e:b0:f9:9e:91:29:
                    8d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A5:26:89:E9:4D:87:5B:E8:B7:B4:9A:14:7F:78:22:2E:73:B4:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0c0ab1ed-fd72-31dc-b5b7-6bf28501efb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:32:7d:64:6c:ad:51:d1:79:87:14:72:9f:df:9f:4a:92:a7:
         41:3a:99:e7:67:15:32:f9:c6:a9:06:7e:3f:f8:3e:06:34:38:
         12:f5:39:68:26:dd:2a:79:e9:3a:b3:22:08:99:72:72:f7:61:
         48:5c:7d:1c:23:c7:be:11:80:5f:d5:37:cc:18:e8:34:9b:d9:
         2b:3f:d4:07:d8:ea:93:0b:20:09:97:2f:5c:45:82:69:76:4f:
         4b:a9:48:d1:32:af:b6:22:7b:a3:59:c9:4d:83:03:c8:45:b0:
         a7:27:0f:ff:4a:50:d8:a8:ab:2d:f3:9f:13:b7:cf:81:a9:f1:
         78:ce:5f:b5:e1:e7:38:70:30:60:d7:a4:d2:4b:89:cc:fe:98:
         5f:9e:a2:ec:e8:e2:2b:15:99:99:36:fb:d5:d7:2e:53:1b:79:
         5d:7c:a3:a4:13:ab:06:18:02:62:95:d2:de:13:a3:c2:da:cb:
         ad:ab:97:e8:c2:37:e2:5f:dd:c7:17:54:b2:37:d3:79:08:50:
         85:d8:14:5d:3a:84:24:05:19:ae:03:91:98:f5:ca:72:da:3f:
         f0:78:83:e6:e2:4b:eb:2a:1a:f3:08:28:9f:bc:39:67:6f:eb:
         6e:3f:f6:5b:28:ee:cd:b2:37:5c:03:12:d7:21:ca:43:be:01:
         be:48:2c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:17:45 2025 by rpki-client