Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/56e70db2-5754-37c3-aedf-32bf25d357a9.roa
File:                     56e70db2-5754-37c3-aedf-32bf25d357a9.roa (raw, json)
Hash identifier:          BJQuadpjQouvdhy651T1nPay4UUNvXVyt/uTyzL2rQs=
Subject key identifier:   34:48:D9:65:0E:2B:97:25:B3:0D:B8:96:B2:73:F2:74:DE:4A:6E:6F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B821CD6913ED5CDD33720E700
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/56e70db2-5754-37c3-aedf-32bf25d357a9.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     203
IP address blocks:        192.57.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:d6:91:3e:d5:cd:d3:37:20:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=69b9548b-44c0-479c-b96f-3ae48f6dc538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:53:ed:da:07:d3:f6:4e:36:9c:a4:d9:e4:f0:
                    e0:6b:1d:43:c2:d4:3a:0a:3e:31:17:fe:0b:0b:ed:
                    bc:f7:52:47:95:c0:e4:5e:38:3a:a7:75:88:4a:14:
                    d6:30:cd:88:c0:9c:f2:32:03:74:bf:f1:80:8b:2f:
                    69:23:31:90:94:0d:a9:a9:35:56:92:61:3c:09:dd:
                    44:64:b6:30:de:b2:9f:0f:b0:cb:90:b6:ba:bd:fe:
                    22:39:89:b0:5f:14:15:6a:9c:a9:8b:fa:7f:6e:28:
                    7c:2e:73:df:b4:62:8c:ef:e0:43:6e:48:a2:56:f4:
                    4e:55:92:e0:53:83:4a:32:2d:03:47:ac:d8:c4:c2:
                    76:73:58:af:77:b4:23:c7:be:00:ca:81:97:fe:83:
                    5e:f0:85:af:20:58:88:db:85:17:5c:17:ed:f4:a0:
                    90:b7:0e:34:56:51:11:2f:88:a0:99:66:91:ea:21:
                    4b:c0:02:59:5d:69:c0:40:52:76:dd:71:8e:c9:df:
                    2f:e2:c8:fd:08:b6:06:33:1a:7f:95:d5:37:2a:af:
                    ce:c4:15:59:f2:71:6e:c8:9b:42:48:df:3e:25:9e:
                    23:ab:77:3c:08:8b:49:cf:cf:f9:e5:c0:21:04:40:
                    1c:a8:f6:d1:9e:af:37:58:17:be:fa:50:51:0d:6e:
                    1f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:48:D9:65:0E:2B:97:25:B3:0D:B8:96:B2:73:F2:74:DE:4A:6E:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/56e70db2-5754-37c3-aedf-32bf25d357a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:1e:bf:e3:c7:01:b6:7f:62:fe:25:6b:63:c9:97:de:1a:bb:
         52:d9:c4:25:cc:47:68:08:f4:99:93:c1:9f:65:4e:da:88:18:
         73:ec:23:18:7a:68:77:9d:5e:27:06:b5:17:3c:94:72:89:9b:
         67:0d:d2:50:03:68:ca:c6:4c:12:2b:b5:ba:bf:7f:4d:74:a3:
         38:1f:a9:ca:04:a7:a8:e1:51:0e:02:c1:53:db:d6:7f:0d:84:
         1e:9e:60:2c:a4:ba:31:bc:95:20:a2:69:fd:60:31:9d:ba:68:
         82:7f:86:a6:ef:1b:a2:43:43:c2:49:d6:57:b8:dc:6c:12:55:
         ee:8d:f3:ce:1a:35:be:7e:1f:3a:e4:a8:8d:d4:a0:66:01:88:
         7e:a4:45:4b:88:35:6c:b0:e0:47:bc:8f:a6:cd:0e:65:f1:ad:
         75:5c:13:94:db:6c:50:2d:23:cc:98:0c:1a:67:c8:cf:92:0d:
         d8:30:96:ab:7b:07:ea:d5:99:95:9b:8c:d8:3b:e8:75:0d:aa:
         d2:a5:01:6e:87:1d:b6:a4:ee:57:02:25:52:62:4f:96:ee:13:
         89:34:78:ad:f6:b8:5e:7f:51:d5:26:57:fd:90:63:11:5d:2f:
         c3:38:ef:90:7b:1d:70:b2:27:d7:81:fc:b1:bd:9d:86:ee:31:
         cc:5c:9a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:46:13 2025 by rpki-client