Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1b50e17d-4e99-327d-97bb-dd9ce229a411.roa
File:                     1b50e17d-4e99-327d-97bb-dd9ce229a411.roa (raw, json)
Hash identifier:          Z2eYLtUXX9dqeQ+GzdLB0MxKPxd2ZJm643pvm1PVzDM=
Subject key identifier:   A0:BD:9E:15:A7:2F:E6:EC:A8:98:B4:10:1D:E7:0F:9C:53:C7:84:B0
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584F497616FE5C9E927BEC2BCE20
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1b50e17d-4e99-327d-97bb-dd9ce229a411.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     202
IP address blocks:        192.57.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:16:fe:5c:9e:92:7b:ec:2b:ce:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8308fa57-f2b3-4493-b967-1a39a52621bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e1:1a:06:b2:e6:48:5c:0f:90:f0:ea:8a:08:
                    c2:95:8e:2a:f9:68:75:4e:2d:95:03:26:89:f6:07:
                    e8:94:79:a3:44:03:14:87:d8:1e:a4:00:5d:a5:b2:
                    de:06:f2:4e:3f:c9:c6:19:a9:e6:83:e2:28:0a:13:
                    2a:e2:17:65:f2:7c:4c:b2:11:9d:5d:bd:66:c9:af:
                    2c:07:c6:d2:50:ad:ae:6c:46:c1:6d:d1:bd:ae:d5:
                    5e:a6:70:25:93:6c:9f:2b:ae:21:29:30:59:ea:5d:
                    f9:c8:03:18:b5:06:7e:5a:21:80:bf:8f:2f:95:9e:
                    69:11:45:ca:4c:e0:17:3c:5b:ef:be:53:36:d5:26:
                    5c:48:24:2a:25:ab:de:61:a2:c4:90:07:e6:d2:ad:
                    40:d1:ee:01:97:46:91:fc:94:47:4d:ed:7e:af:4a:
                    ac:ed:aa:4f:ce:a1:70:14:8c:3e:92:2a:49:4a:2b:
                    d7:3f:c1:b8:c2:18:12:f9:c4:2d:4b:60:33:a2:be:
                    91:e4:94:9e:87:77:88:63:75:cd:fc:fe:16:3d:81:
                    16:8d:e4:14:54:c6:84:2b:27:b9:ef:b5:71:2c:97:
                    f3:4c:2e:9d:7c:4c:36:fc:7b:e5:05:38:ce:98:3c:
                    74:7a:cb:96:14:d5:5d:0b:25:a6:f4:c1:6a:c8:a0:
                    6c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BD:9E:15:A7:2F:E6:EC:A8:98:B4:10:1D:E7:0F:9C:53:C7:84:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1b50e17d-4e99-327d-97bb-dd9ce229a411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:31:b4:fe:9f:92:97:16:47:6b:43:13:7f:43:3c:8f:78:80:
         28:39:af:ec:bf:fb:f9:47:c9:a1:c1:d8:ee:22:e2:ab:e6:d2:
         cc:fb:81:2a:a0:ab:ea:67:37:04:b3:93:a9:7f:8c:fa:82:e9:
         10:07:69:be:7a:ac:86:32:ba:04:01:c7:0f:31:bd:3b:d6:fe:
         19:10:37:3e:5a:bf:b0:10:3e:a6:6f:72:a5:90:d3:16:c7:c2:
         a8:54:63:17:4e:d1:ab:26:b6:35:88:a0:aa:f5:4c:0c:17:27:
         88:eb:5b:d3:03:90:ed:b0:2f:de:fc:15:3f:85:7d:0a:57:76:
         1e:46:f0:22:cb:ab:df:cd:7e:3e:9b:9a:17:ad:31:5b:72:f1:
         8c:13:2e:01:28:4e:a1:06:8f:0e:06:b0:1e:2b:04:2a:6e:4a:
         6d:3c:1f:52:bd:cd:11:8f:d0:71:69:3f:0f:78:c2:89:41:fb:
         cf:c0:c7:87:53:ea:0f:1f:2b:90:e8:34:78:3d:6b:dc:64:65:
         b0:f7:92:da:2f:8d:eb:bb:3a:0c:11:e4:ca:00:24:b2:b0:fa:
         77:18:89:63:5c:7e:f3:c1:cd:3f:5a:14:6f:db:51:b4:f3:6b:
         dd:f5:b5:13:cc:84:d6:14:bb:d7:a0:08:3a:c4:b9:72:58:07:
         0a:af:14:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdhb+XJ6Se+wrziAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ODMwOGZhNTctZjJiMy00NDkzLWI5NjctMWEzOWE1MjYyMWJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOEaBrLmSFwPkPDqigjClY4q+Wh1Ti2VAyaJ
9gfolHmjRAMUh9gepABdpbLeBvJOP8nGGanmg+IoChMq4hdl8nxMshGdXb1mya8s
B8bSUK2ubEbBbdG9rtVepnAlk2yfK64hKTBZ6l35yAMYtQZ+WiGAv48vlZ5pEUXK
TOAXPFvvvlM21SZcSCQqJaveYaLEkAfm0q1A0e4Bl0aR/JRHTe1+r0qs7apPzqFw
FIw+kipJSivXP8G4whgS+cQtS2Azor6R5JSeh3eIY3XN/P4WPYEWjeQUVMaEKye5
77VxLJfzTC6dfEw2/HvlBTjOmDx0esuWFNVdCyWm9MFqyKBsLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKC9nhWnL+bsqJi0EB3nD5xTx4SwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMWI1MGUxN2QtNGU5OS0z
MjdkLTk3YmItZGQ5Y2UyMjlhNDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDlxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADsxtP6fkpcWR2tDE39DPI94gCg5r+y/+/lHyaHB2O4i4qvm0sz7gSqg
q+pnNwSzk6l/jPqC6RAHab56rIYyugQBxw8xvTvW/hkQNz5av7AQPqZvcqWQ0xbH
wqhUYxdO0asmtjWIoKr1TAwXJ4jrW9MDkO2wL978FT+FfQpXdh5G8CLLq9/Nfj6b
mhetMVty8YwTLgEoTqEGjw4GsB4rBCpuSm08H1K9zRGP0HFpPw94wolB+8/Ax4dT
6g8fK5DoNHg9a9xkZbD3ktovjeu7OgwR5MoAJLKw+ncYiWNcfvPBzT9aFG/bUbTz
a931tRPMhNYUu9egCDrEuXJYBwqvFAU=
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:05:08 2026 by rpki-client