Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1d27d895-ee7a-3a89-8627-0bc5904ed395.roa
File:                     1d27d895-ee7a-3a89-8627-0bc5904ed395.roa (raw, json)
Hash identifier:          H85rrSXVz6ZluvtB4eRMMqiILtAJE2e0KiamIZo9Ppw=
Subject key identifier:   6F:13:42:DD:F0:13:09:12:6A:68:4B:EA:8A:A9:C6:74:96:0E:EE:21
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D0A77B336E0B38B8715FC5900
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1d27d895-ee7a-3a89-8627-0bc5904ed395.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     3360
IP address blocks:        204.104.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:b3:36:e0:b3:8b:87:15:fc:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=19375053-3370-43f1-a99f-ebf4d5a168a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4a:26:61:ce:fe:32:eb:4e:de:3c:43:47:7f:
                    05:b3:4b:19:62:80:5b:e2:7c:62:fa:d3:75:3d:89:
                    5f:f9:78:52:67:f1:48:19:1f:d7:bf:cd:1e:0c:e7:
                    f5:5c:ec:fe:cd:82:e9:74:f3:35:16:51:95:3e:d3:
                    45:ed:dc:e4:77:58:bf:1c:60:ae:31:4f:f0:c6:57:
                    85:52:0d:dd:7a:58:d6:bb:53:6b:38:85:44:d1:24:
                    6d:a3:f6:48:21:80:5e:c0:71:ee:c5:72:5e:4e:04:
                    93:5a:f2:15:3d:7c:0f:1c:99:e1:d8:cf:5c:fa:60:
                    5e:3c:8e:fe:7d:b2:c4:b6:54:51:b6:71:d3:5a:6f:
                    3e:f1:78:d3:85:e4:32:e6:3a:d1:aa:dd:da:84:58:
                    8a:97:20:67:c0:cf:92:71:95:49:c9:df:f8:28:4c:
                    76:57:88:f9:45:7e:e1:12:3c:a8:f9:c2:f7:42:64:
                    19:96:87:44:1a:cf:d1:57:1d:0b:c4:06:8f:43:ac:
                    b4:fb:a3:71:8b:9c:a3:48:2c:61:96:1d:ef:0b:b5:
                    29:16:54:a0:ed:7c:8f:ac:49:9e:a8:65:41:73:66:
                    99:22:1b:20:72:42:d1:ab:56:34:6c:51:51:ab:de:
                    4b:c3:02:62:16:fb:dc:08:d6:2b:5d:42:44:bc:02:
                    8a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:13:42:DD:F0:13:09:12:6A:68:4B:EA:8A:A9:C6:74:96:0E:EE:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1d27d895-ee7a-3a89-8627-0bc5904ed395.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:29:9d:bb:6a:d0:42:ba:84:6d:68:c6:40:4b:42:2c:96:d9:
         a3:d9:79:72:92:a2:47:ce:65:0f:c4:d7:22:fb:c0:c3:a0:02:
         a7:d8:a2:64:d4:a3:95:62:27:d6:f0:fe:0c:86:84:84:01:33:
         39:f0:b5:89:4c:48:77:30:42:29:a5:e7:61:06:6a:a3:38:f0:
         4d:33:45:fd:73:e3:90:c9:03:f6:48:23:c6:20:e4:aa:c3:00:
         3a:d9:1e:4f:b4:6d:a6:0c:6b:7a:2f:81:09:f2:bc:05:27:d5:
         43:b4:6e:a3:0f:fb:cc:56:28:dc:e7:23:52:49:6a:52:be:67:
         e8:d5:1e:87:0a:51:33:3b:d8:99:c1:5e:43:58:4c:20:48:0c:
         15:38:65:3b:4b:c3:8a:05:2e:7d:19:0c:f3:72:af:2b:80:64:
         eb:63:e2:c6:b6:b1:b3:fd:85:25:4c:94:b5:16:0e:94:08:ff:
         3f:8f:a7:80:1e:e4:ae:ad:9b:7e:b1:5e:be:2d:ee:8e:54:31:
         07:bd:2d:d8:91:b2:c4:1f:a3:f4:90:16:76:0f:b8:b1:be:a3:
         b2:46:c7:f0:c8:a2:73:5c:51:0b:e6:12:84:bb:48:46:11:26:
         aa:05:a3:ce:6b:59:50:f6:6c:c0:ed:81:7c:55:ff:cc:8e:83:
         6c:f9:f7:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd7M24LOLhxX8WQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk
MTkzNzUwNTMtMzM3MC00M2YxLWE5OWYtZWJmNGQ1YTE2OGEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkomYc7+MutO3jxDR38Fs0sZYoBb4nxi+tN1
PYlf+XhSZ/FIGR/Xv80eDOf1XOz+zYLpdPM1FlGVPtNF7dzkd1i/HGCuMU/wxleF
Ug3deljWu1NrOIVE0SRto/ZIIYBewHHuxXJeTgSTWvIVPXwPHJnh2M9c+mBePI7+
fbLEtlRRtnHTWm8+8XjTheQy5jrRqt3ahFiKlyBnwM+ScZVJyd/4KEx2V4j5RX7h
Ejyo+cL3QmQZlodEGs/RVx0LxAaPQ6y0+6Nxi5yjSCxhlh3vC7UpFlSg7XyPrEme
qGVBc2aZIhsgckLRq1Y0bFFRq95LwwJiFvvcCNYrXUJEvAKKYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG8TQt3wEwkSamhL6oqpxnSWDu4hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMWQyN2Q4OTUtZWU3YS0z
YTg5LTg2MjctMGJjNTkwNGVkMzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGjzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADMpnbtq0EK6hG1oxkBLQiyW2aPZeXKSokfOZQ/E1yL7wMOgAqfYomTU
o5ViJ9bw/gyGhIQBMznwtYlMSHcwQiml52EGaqM48E0zRf1z45DJA/ZII8Yg5KrD
ADrZHk+0baYMa3ovgQnyvAUn1UO0bqMP+8xWKNznI1JJalK+Z+jVHocKUTM72JnB
XkNYTCBIDBU4ZTtLw4oFLn0ZDPNyryuAZOtj4sa2sbP9hSVMlLUWDpQI/z+Pp4Ae
5K6tm36xXr4t7o5UMQe9LdiRssQfo/SQFnYPuLG+o7JGx/DIonNcUQvmEoS7SEYR
JqoFo85rWVD2bMDtgXxV/8yOg2z59yI=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:41:41 2026 by rpki-client