Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/503db4ea-9213-317f-9d94-9bc074dd6e37.roa
File:                     503db4ea-9213-317f-9d94-9bc074dd6e37.roa (raw, json)
Hash identifier:          HS/MbdSBg8ZhC804rOXiWye8sesXWkQ0g8e78f7vYSg=
Subject key identifier:   01:02:AA:FB:1A:2B:73:90:84:BB:A1:9B:93:27:23:35:A9:BA:B6:07
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B4A472EB9BA4F633CEE8CC3F0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/503db4ea-9213-317f-9d94-9bc074dd6e37.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     203
IP address blocks:        205.141.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:2e:b9:ba:4f:63:3c:ee:8c:c3:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=c83c34bc-2bfd-414c-80ea-635bf6542ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:35:db:97:f1:c0:0c:dc:08:82:f3:d1:b7:d1:
                    f0:9b:60:5b:2c:82:a9:05:25:c1:89:96:82:46:4b:
                    ad:70:48:8d:97:c8:04:e8:48:15:47:5f:67:82:ae:
                    3b:d1:c0:34:47:3c:e6:f6:b2:6c:f4:95:92:d1:70:
                    c3:87:bb:d6:fa:f2:a7:64:d3:36:4e:0b:15:61:ed:
                    33:76:44:25:8e:e1:b0:1c:66:81:15:ec:9a:f4:1f:
                    31:a6:e6:41:41:8f:d8:c4:19:3e:de:7b:fb:4e:a5:
                    82:dd:fe:80:91:88:10:f2:3c:76:df:9f:4c:6e:f6:
                    c8:3b:40:04:04:3a:ce:f1:1f:60:80:46:b2:d3:d6:
                    7c:87:68:60:cc:9f:e2:a9:46:a2:66:07:97:16:fa:
                    9d:1c:41:ea:57:a8:29:0f:67:f4:ee:21:dd:ef:a5:
                    af:87:27:71:f9:86:1a:ce:24:99:4a:ff:80:27:81:
                    d3:c7:81:49:a4:af:9b:dc:b8:04:d5:94:cf:c6:e5:
                    89:64:eb:de:c0:c6:79:39:fb:f2:61:65:de:5a:c8:
                    43:5c:a2:14:2b:52:e8:67:11:b3:91:96:ea:d4:b5:
                    de:6a:39:15:82:cb:f7:58:0c:55:c6:b6:24:c2:9e:
                    58:4a:7b:a6:fa:b0:96:31:2c:7d:a9:2a:ad:de:aa:
                    0e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:02:AA:FB:1A:2B:73:90:84:BB:A1:9B:93:27:23:35:A9:BA:B6:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/503db4ea-9213-317f-9d94-9bc074dd6e37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.141.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:a7:f1:4e:7a:2f:73:af:a0:4f:4c:f8:fd:32:09:a6:0a:a8:
         1d:a9:8f:44:22:4c:4c:8e:23:64:79:49:39:1b:cc:42:34:c5:
         2a:f1:cb:81:1b:88:84:b0:11:b2:8f:6a:63:f8:e7:80:ce:be:
         40:80:d5:27:89:77:fd:b3:a3:0c:47:dd:e9:7f:e5:8b:d1:d6:
         6d:fc:0f:15:ec:1a:c1:da:6d:bb:a1:83:a3:97:13:c0:0d:7a:
         7b:97:34:d3:6e:e5:ef:99:79:cc:fa:99:c8:11:d8:f5:1c:a6:
         0e:d4:c7:9e:25:33:ae:c1:d6:72:21:36:6c:25:7e:13:a4:12:
         df:9e:38:e6:6e:12:e0:67:a1:10:c2:69:3d:ea:00:02:a6:e0:
         e1:4d:40:cf:56:3d:cc:d7:4f:91:56:39:f4:31:c2:ab:7d:9d:
         07:d7:02:7d:14:50:06:ae:cb:e5:3a:47:e0:80:cc:f6:ae:af:
         5e:af:75:14:31:ea:54:05:5b:db:cf:3c:55:2c:81:90:5f:95:
         6d:f3:4a:98:c3:b9:db:e0:10:f4:7a:0a:06:9d:8a:92:1f:6e:
         28:2a:ac:39:a6:a4:3f:35:5c:97:ae:1b:3c:3b:08:64:4b:63:
         6f:c5:63:2c:d5:b9:91:0d:d4:2d:be:2a:19:4b:cf:40:90:3e:
         08:2b:e2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:31 2025 by rpki-client