Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/59eb2974-3ee3-3be4-8f09-6a7b4853772b.roa
File:                     59eb2974-3ee3-3be4-8f09-6a7b4853772b.roa (raw, json)
Hash identifier:          DkiLW2HV7SU978Apz/Acywx/coF/nCXbTgRBXT7Y9as=
Subject key identifier:   BC:3C:6E:5F:D2:B3:F7:4C:2F:3C:F4:BB:51:C0:47:04:FB:02:C7:5F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E885A45AA33841822702AFD80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/59eb2974-3ee3-3be4-8f09-6a7b4853772b.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     202
IP address blocks:        204.103.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:45:aa:33:84:18:22:70:2a:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=42e9b7fd-2d9a-4d3d-a41d-9308363523b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0a:9f:8e:1e:1b:e6:26:28:88:37:00:d6:0a:
                    4f:46:c9:26:2e:84:75:57:91:1b:16:8d:7f:63:5b:
                    7a:7d:73:3c:e8:91:11:2f:ad:0e:ee:27:8e:74:fb:
                    38:f9:8a:f1:4e:52:13:dc:04:0b:f8:fe:e2:f3:d2:
                    52:33:0e:58:e2:d1:93:46:b6:94:39:f6:f5:07:49:
                    02:09:85:1b:a0:0e:f4:e1:fb:38:68:5b:d7:58:8d:
                    75:17:42:35:0c:6a:c6:39:6a:de:9a:f9:82:d1:9c:
                    d9:c4:0d:7f:d7:08:b3:33:98:6e:de:53:3b:47:30:
                    73:0f:a1:c6:e3:95:79:ce:c9:d4:eb:68:48:47:84:
                    aa:b7:44:d7:69:7e:3e:db:19:28:a7:c8:fb:db:7b:
                    58:69:6f:1e:09:2f:3e:f6:62:32:0c:eb:13:f3:53:
                    eb:d7:c0:93:49:15:23:86:7a:15:53:e1:bf:c0:87:
                    1e:3a:55:e5:85:97:43:95:16:ff:b5:bb:56:ea:35:
                    01:d7:e3:c8:6b:50:0c:be:55:72:db:73:5d:11:47:
                    87:9c:7e:ed:95:7c:00:a2:d8:35:6a:8c:8d:9c:e0:
                    82:34:ab:42:12:61:78:ae:c3:07:fb:9b:94:fc:f8:
                    f3:9c:7b:96:b5:d1:ec:b3:b8:c7:42:70:fc:45:60:
                    f1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3C:6E:5F:D2:B3:F7:4C:2F:3C:F4:BB:51:C0:47:04:FB:02:C7:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/59eb2974-3ee3-3be4-8f09-6a7b4853772b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.103.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:38:08:e3:7a:cc:c2:fc:e0:c3:7e:27:b3:14:7f:bc:2b:d4:
         e8:09:2b:01:5d:20:2e:4b:d3:27:c5:77:0e:63:f6:03:9e:24:
         65:23:d2:48:25:cb:a5:fc:d5:a4:40:71:4b:df:be:57:aa:99:
         ca:23:c9:53:f1:84:f0:e3:e1:50:2a:f2:06:50:ea:e4:20:09:
         0b:5d:a1:42:b5:ee:91:fb:ca:d0:9c:7d:42:13:56:80:e4:30:
         13:b0:a6:98:b4:31:2c:30:8e:18:0c:58:b7:5a:fd:4c:e1:4e:
         b9:a1:6e:6e:c8:aa:09:e9:d2:28:a0:03:76:ec:78:eb:9a:94:
         f4:81:1f:ab:d6:55:b4:4f:16:b8:75:c0:44:4a:96:fe:10:0b:
         7e:dc:1a:2f:51:1c:74:2d:d2:db:47:f4:c0:6a:14:e8:e2:68:
         6f:d5:5d:12:65:03:c9:7f:f4:19:ba:a8:96:83:70:06:a2:37:
         e4:57:10:a6:40:4b:38:ef:2b:c1:d3:b9:fb:7e:29:8f:7e:32:
         b5:93:f4:82:c9:fc:df:c7:dc:bd:f0:a5:05:d9:d1:b0:fc:3c:
         92:2c:e4:ff:83:c3:39:75:b7:be:83:31:23:98:9a:7d:b8:fb:
         de:4b:a2:0d:37:5a:34:eb:17:7d:ca:9a:34:f1:29:cd:02:6f:
         a2:c5:d0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:27:56 2026 by rpki-client