Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4ef83f71-2bbe-3d68-8439-1413f6c3eb7e.roa
File:                     4ef83f71-2bbe-3d68-8439-1413f6c3eb7e.roa (raw, json)
Hash identifier:          AR3D4UCFfntEF1EgWPlGJ0npg15/ZOObHte5S2EcHS4=
Subject key identifier:   76:88:AB:08:9F:E2:55:08:4D:74:5E:20:BD:D4:20:60:91:6A:04:20
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D0A77B4351F5992AB39D7A5C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4ef83f71-2bbe-3d68-8439-1413f6c3eb7e.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     203
IP address blocks:        204.105.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:b4:35:1f:59:92:ab:39:d7:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=ae39ac21-d283-452a-9b71-88f088ddc97d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:99:75:68:5d:27:9f:15:85:ee:88:98:72:13:
                    a1:31:32:b5:3e:c5:2b:84:3c:8f:85:e3:f1:67:e1:
                    03:96:91:cf:f9:6b:da:1c:24:65:a9:fc:80:89:ff:
                    53:34:ae:ae:b5:4c:e2:34:92:69:7a:9d:43:39:48:
                    ab:71:02:aa:45:8e:64:a2:63:c4:37:2c:01:6a:d0:
                    7f:90:dd:38:89:b6:1e:19:e1:ba:96:44:0d:c9:3d:
                    e2:5a:6a:6b:b5:41:67:92:88:f6:c7:0c:4a:d9:c2:
                    97:36:44:aa:04:f1:85:a2:7b:4e:93:50:bc:f9:f4:
                    c8:7f:e0:51:b0:80:1a:95:eb:9a:68:ae:2b:36:91:
                    02:fb:2c:7a:1c:a3:16:20:ad:69:72:76:70:7b:39:
                    55:fc:c7:b1:2b:07:5c:85:c8:bb:ad:ec:1b:7d:c0:
                    f7:60:76:14:95:ae:4e:eb:78:15:ab:9f:98:fc:b9:
                    35:fc:1d:46:f8:5f:be:70:d0:3d:c8:2b:dc:ef:41:
                    9b:14:d6:9d:17:8f:4a:50:b9:7a:c7:54:dc:d0:37:
                    08:a5:03:50:24:e0:4a:a8:9f:55:83:02:ee:b2:8d:
                    55:ad:57:7e:11:ba:df:0c:a5:fe:96:8a:d8:f5:88:
                    23:f5:40:24:7f:b7:c2:27:b2:f0:b3:87:90:90:35:
                    40:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:88:AB:08:9F:E2:55:08:4D:74:5E:20:BD:D4:20:60:91:6A:04:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4ef83f71-2bbe-3d68-8439-1413f6c3eb7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.105.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:6d:c4:4b:33:78:f5:5f:5e:0b:f7:4d:2d:35:73:c0:2b:3b:
         4f:d9:97:e6:1e:d0:0b:5a:fc:1a:68:11:64:be:8f:aa:89:06:
         a4:e8:21:b3:2a:93:5f:8e:47:bb:c0:77:46:cc:aa:a5:0c:79:
         af:ba:48:f2:ac:4a:27:13:59:60:60:6e:3d:8c:f6:dd:cd:8e:
         5a:86:ad:ba:ea:3a:81:06:24:8c:81:ec:59:e7:e6:ce:7f:be:
         0d:7e:5f:d4:cd:83:11:e1:c4:f2:07:1e:79:02:76:5f:0d:f6:
         71:4f:65:73:e3:b2:49:62:9d:12:e3:d5:48:97:be:4a:8b:4a:
         83:56:58:85:71:57:e2:21:d2:91:72:5f:85:54:0c:c7:ba:d4:
         aa:63:2a:2a:f7:f9:40:99:79:78:77:6c:c3:28:2a:ed:25:4a:
         56:a8:ba:37:cb:2d:60:d6:52:f3:5d:35:f9:21:7c:a1:fa:00:
         e9:10:6a:45:c7:ed:ec:e7:27:b5:b4:a6:39:72:7a:9a:41:6d:
         5a:d1:e7:41:8b:10:cb:87:b5:d9:49:b8:6f:28:a4:dc:b5:4c:
         39:f2:05:1c:a0:d2:12:b0:22:ee:22:a7:9a:0e:39:f3:26:25:
         83:15:02:d0:dd:87:a2:7e:81:56:bb:32:21:f9:1b:fd:73:b7:
         cb:19:1e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:41:28 2026 by rpki-client