Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/67bf9930-7395-3e84-b9bc-9e16d8a12103.roa
File:                     67bf9930-7395-3e84-b9bc-9e16d8a12103.roa (raw, json)
Hash identifier:          Z6WkfALjwqbgY2BEmuZ0uF0yi36rlroLSiFjv1xNoK0=
Subject key identifier:   85:C8:C7:AC:DD:45:B9:F4:FA:3D:94:93:3D:5C:40:BB:49:11:A5:E7
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D0A77B1A86D592511619DD980
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/67bf9930-7395-3e84-b9bc-9e16d8a12103.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     3360
IP address blocks:        204.104.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:b1:a8:6d:59:25:11:61:9d:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=45f0b9c0-cce6-41ee-a812-2cf7b3ea5439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:48:eb:d9:de:4d:eb:b4:27:da:95:eb:05:bd:
                    e9:e9:1f:ab:9f:1e:e5:5d:e3:94:52:ae:67:87:99:
                    26:de:7a:dd:7c:d1:da:91:a4:7b:e4:4b:c3:7f:1d:
                    19:d0:f2:e7:06:a8:7b:01:4b:44:93:98:fb:57:f0:
                    f8:dc:e9:b3:99:3f:f5:90:65:f4:c6:35:cd:fa:ac:
                    eb:f4:b8:4d:eb:ac:f5:f7:0d:04:af:c3:29:27:48:
                    31:b8:0d:9f:3f:17:34:81:a0:20:4c:88:48:4d:cd:
                    2a:28:27:0a:50:06:96:b2:95:24:12:e8:94:4e:66:
                    31:ba:9a:49:d6:0a:8c:61:28:a6:23:b7:0e:9a:1e:
                    3b:01:e7:d0:9c:36:0b:17:a6:8b:e9:49:24:31:97:
                    fc:9d:74:29:09:60:a4:ce:94:8a:fa:72:89:06:c1:
                    69:78:c8:f2:8c:04:6e:5b:49:c8:e4:19:af:e5:e2:
                    1d:9f:91:ba:27:be:65:bf:a1:a7:8f:b5:e6:98:72:
                    c8:66:93:de:38:73:eb:87:21:f5:e8:f7:db:da:e1:
                    d4:6e:8b:c0:fa:31:15:d6:c3:5f:9b:8a:0e:cb:7e:
                    e1:dc:b7:b4:00:cf:27:6e:11:ca:aa:20:1c:12:f0:
                    29:f3:42:68:84:3f:e9:cb:81:af:46:a3:4f:c7:1b:
                    de:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C8:C7:AC:DD:45:B9:F4:FA:3D:94:93:3D:5C:40:BB:49:11:A5:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/67bf9930-7395-3e84-b9bc-9e16d8a12103.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ff:b7:ac:48:5b:fc:a7:5c:85:72:44:b9:b8:e3:c4:c9:33:
         50:70:26:dc:e9:74:d2:4f:2c:30:db:81:30:f0:c2:d0:70:3a:
         6e:60:7f:41:ed:2c:48:19:1f:2d:5a:f5:a4:4f:b5:bb:88:e9:
         3b:aa:eb:85:dc:b4:7d:e0:35:c4:d0:cb:ac:66:95:75:08:7d:
         b4:e2:eb:65:79:5c:1b:de:58:56:54:bc:23:b9:7e:17:df:68:
         b7:41:df:be:55:e6:1a:d3:14:fb:d5:4e:29:0c:9f:32:37:83:
         ae:f2:00:89:7a:bd:c0:4f:b3:bf:b1:b0:7c:13:7d:8d:05:a6:
         b0:97:03:5b:51:fb:a1:75:88:a8:65:67:19:7b:af:b5:c3:ea:
         0c:25:a9:00:77:2e:f4:86:7c:15:1c:45:98:56:ae:55:ea:dd:
         c2:b2:9c:20:97:c1:aa:c2:86:69:51:98:13:2b:16:90:94:ec:
         8f:87:05:78:b2:f0:fc:f2:d6:16:38:6c:fd:4e:ca:08:c3:b4:
         f8:18:f4:54:15:64:b2:3e:21:2f:4b:55:33:20:d0:98:d1:a4:
         48:dc:4b:af:08:b0:32:20:b6:69:5d:c8:ff:5c:32:93:e1:73:
         0f:2c:6e:99:38:ca:73:3c:69:49:9b:41:0c:15:44:97:b5:29:
         29:f2:18:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:00:20 2026 by rpki-client