Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/450ca495-c781-35fe-ac29-cf3b9e222135.roa
File:                     450ca495-c781-35fe-ac29-cf3b9e222135.roa (raw, json)
Hash identifier:          +dcuO5wyIO/hGyiR0O8JoRse9q3nEsd96zmYoEooTaw=
Subject key identifier:   56:3C:E0:4D:E3:98:63:72:44:CF:14:4D:2B:8B:46:12:03:0B:2B:AD
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584F4975CE3DF26F815441893DC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/450ca495-c781-35fe-ac29-cf3b9e222135.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     203
IP address blocks:        204.104.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:ce:3d:f2:6f:81:54:41:89:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=90b6f234-6a1f-4f94-a81a-1a04ac71ac9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:45:68:f2:74:a6:4a:7e:2d:65:29:03:bd:3b:
                    90:89:a1:3f:57:44:b7:06:e5:e7:e6:43:3d:30:3f:
                    79:3c:ce:57:e2:d3:53:ff:b9:43:24:f1:b9:4b:13:
                    09:18:07:4e:9b:7e:8e:10:61:f5:ff:99:1b:14:dd:
                    c5:59:a1:9b:a1:30:b1:0d:09:7e:45:96:68:3d:91:
                    58:82:e3:cf:0a:91:77:08:4a:83:3f:78:a0:5f:d4:
                    a1:7b:5e:2c:9f:6e:14:0c:0b:8a:9a:73:5c:01:8f:
                    03:b6:9f:09:0d:da:5a:fb:e8:ac:39:f2:2a:45:e5:
                    87:1d:e0:5c:a7:98:0a:e4:c1:38:67:e3:42:7d:1e:
                    ea:4c:45:22:99:84:f8:51:2a:48:91:5e:39:02:4b:
                    40:10:0e:ac:12:6f:ea:f8:10:36:59:6c:0a:da:38:
                    09:b5:04:08:1a:a2:53:b3:08:be:ed:12:ac:0c:6f:
                    51:cb:76:c3:f7:85:4c:f2:47:b5:87:db:17:4c:43:
                    a9:4e:11:be:a3:09:24:2f:c0:d0:2f:82:b9:50:97:
                    e9:9d:ad:0e:28:ef:f2:48:03:fa:8f:79:dd:3a:77:
                    9c:00:c5:3e:80:7d:cd:8e:a4:71:27:dd:4f:8b:b0:
                    10:fb:3f:a2:46:2c:07:89:59:3a:dd:2d:62:b8:e0:
                    a0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:3C:E0:4D:E3:98:63:72:44:CF:14:4D:2B:8B:46:12:03:0B:2B:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/450ca495-c781-35fe-ac29-cf3b9e222135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:fa:0d:8d:eb:d9:ea:59:e1:8b:13:73:07:c2:5a:90:1b:bc:
         98:ee:e2:6a:5b:33:a5:47:59:8f:bc:a4:de:bf:9a:ba:c9:49:
         43:45:ad:6f:c5:f9:1e:22:1f:ea:50:df:5a:5f:69:2f:0a:1d:
         01:a8:63:38:49:49:8a:8d:26:28:0c:20:dc:fb:e6:dc:7a:32:
         36:06:c1:ef:ee:df:79:73:08:2a:f6:77:fb:c1:d0:e4:a7:94:
         ea:db:d3:bc:ce:0e:e1:8a:7a:cd:9e:58:90:d8:ba:27:69:15:
         63:23:d2:95:39:35:8b:d1:00:12:97:21:3c:14:4e:51:31:18:
         20:e8:55:2b:b2:ae:0f:aa:18:a5:b7:59:dc:1d:5d:6c:48:47:
         03:78:84:80:99:2b:a8:cc:4a:bd:08:fb:a3:3d:82:7b:a4:05:
         24:2f:11:3e:7b:6e:02:f4:21:94:50:d7:d6:d0:a4:38:73:29:
         89:be:c2:21:da:91:a9:40:d6:bf:20:bb:0b:f8:f5:db:29:59:
         93:00:db:29:27:fa:ed:e1:ee:3a:d7:36:49:23:07:87:f4:eb:
         21:83:c1:9f:8a:db:32:3e:de:9f:49:9a:b0:0a:71:ac:fc:c0:
         f5:5d:a2:67:26:eb:bd:a6:97:c2:7d:36:59:5e:4b:ac:04:37:
         6e:c8:4a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:30:18 2026 by rpki-client