Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4f835571-a63c-361e-a93a-107b6c7bae0e.roa
File:                     4f835571-a63c-361e-a93a-107b6c7bae0e.roa (raw, json)
Hash identifier:          iXS27S/20qBsua/LsZmVPtthYS7136FC7ZobyPrUtS8=
Subject key identifier:   FF:A5:F8:81:6E:F1:DC:CC:1C:E4:D1:76:7A:C1:36:67:D6:D3:4C:85
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D0A77B390530BA32B00E0C040
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4f835571-a63c-361e-a93a-107b6c7bae0e.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     3360
IP address blocks:        204.105.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:b3:90:53:0b:a3:2b:00:e0:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=9f57321f-a5e5-4195-a038-29fdb953c852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:02:89:3f:8a:3c:d5:78:29:64:50:b3:05:0e:
                    8b:af:f9:eb:e9:f8:0f:77:71:34:4b:da:e5:4f:38:
                    86:bb:a4:36:a8:dd:9a:fb:8a:5a:68:9e:73:29:58:
                    dd:48:a3:4d:af:e1:e6:c6:49:b1:f9:fa:b5:bb:54:
                    41:1d:84:93:59:ef:2c:c0:c9:c4:1d:01:d0:fb:51:
                    83:87:41:74:8f:c2:fb:ff:60:80:3a:34:89:a4:d5:
                    7c:ba:24:4f:40:6b:7c:27:00:ec:b2:d1:1d:54:6e:
                    da:3e:9e:af:e8:96:30:1e:85:07:9d:46:3d:65:ec:
                    2d:92:35:2b:ef:3c:08:c5:80:01:9a:b6:6c:59:66:
                    54:76:30:f8:ff:81:d0:92:f6:17:9c:36:4c:5a:94:
                    ea:c8:78:c3:12:0b:0a:97:e3:00:cd:19:11:e6:3f:
                    6a:0f:a3:da:8e:86:f8:92:97:e5:43:8a:ce:26:97:
                    5b:4b:38:77:10:28:78:0c:05:4d:78:45:60:59:0b:
                    47:5e:5d:b8:c2:3f:e3:1e:c2:0e:b5:54:69:31:00:
                    54:1a:2b:c1:06:dc:23:ae:6e:e4:d6:a4:2a:78:3e:
                    75:9f:73:3e:8b:ef:eb:f5:0f:7a:17:2c:9c:ed:f1:
                    0d:7a:1f:ea:a1:90:6c:ac:01:a1:1a:31:7d:3d:01:
                    8f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A5:F8:81:6E:F1:DC:CC:1C:E4:D1:76:7A:C1:36:67:D6:D3:4C:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4f835571-a63c-361e-a93a-107b6c7bae0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.105.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:cf:23:58:ff:36:d3:9f:ee:72:69:9a:4c:e6:70:61:3a:c6:
         9b:35:ec:23:5f:f3:12:c0:9c:db:94:88:0a:d0:fa:e5:88:b2:
         ce:40:65:1a:e0:62:b4:fa:a7:54:78:f8:c2:84:13:29:d2:64:
         96:f9:32:4b:cc:9b:c2:e1:7f:bf:a6:8a:75:41:5a:c3:b8:0a:
         2e:0f:c3:f7:ed:d1:e1:ec:fb:37:fe:a4:66:aa:44:82:6d:ae:
         a3:08:a2:df:93:12:0b:86:ad:e5:3e:19:ab:cd:ff:92:4f:13:
         b1:36:d9:32:8b:c5:f4:81:28:d1:1a:9b:d4:c1:5a:a6:04:e2:
         c9:f2:2f:16:24:4c:88:bb:0d:41:0c:be:c0:5f:5a:c6:8d:45:
         c6:66:26:dc:a2:f8:86:76:bd:2b:4e:87:81:99:25:9c:f0:91:
         4e:75:28:b3:05:b7:78:86:63:fe:3f:1d:24:98:42:6b:1a:3f:
         35:9a:d4:72:b0:7a:c3:ef:c2:de:cc:47:8d:42:0d:fe:d1:18:
         af:c5:45:77:0f:f8:5b:0f:b8:22:f3:09:4d:16:fe:38:29:1f:
         38:7c:af:e6:e3:f9:80:ff:a8:fc:b7:bb:c9:e3:06:20:b5:a9:
         cb:42:7a:88:30:5d:a2:cb:f2:fb:01:c4:eb:6e:8f:3b:2f:53:
         32:17:b4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:37:47 2026 by rpki-client