Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7af485d2-1411-389c-a251-d3d163a361e3.roa
File:                     7af485d2-1411-389c-a251-d3d163a361e3.roa (raw, json)
Hash identifier:          XtUgDShZoqIlDSVgjwatUvqwU5XJJO0vlWboXo8Fk6Q=
Subject key identifier:   D2:78:47:BB:68:1C:AC:20:77:6A:8E:D6:68:FD:A9:62:8D:1A:8C:EB
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D1F4A1F018B9A076F79BDE000
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7af485d2-1411-389c-a251-d3d163a361e3.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     203
IP address blocks:        192.57.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:1f:01:8b:9a:07:6f:79:bd:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=d73225bc-e5ec-44f6-8931-c5f3cc0f0476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:54:e6:66:1e:5f:e6:cb:fd:d9:ef:e7:94:23:
                    1e:68:0a:fe:79:4d:42:5a:ec:a3:5d:f0:0a:27:8a:
                    c2:d7:dc:a2:90:e8:cd:bd:50:e3:05:1a:f0:ea:34:
                    78:5a:16:e5:59:9f:81:81:93:f6:8d:2c:32:7f:23:
                    db:5e:77:d9:4e:da:ad:f8:b1:89:f1:2d:73:3f:f6:
                    30:1f:b6:25:44:d5:9e:c4:82:6d:14:87:46:72:a1:
                    42:fa:56:93:e9:3a:dd:84:2a:ab:f5:ae:31:34:38:
                    05:39:73:69:45:4b:0e:46:e3:24:34:bd:1d:96:83:
                    8f:3b:2f:06:e9:31:10:f6:4e:25:f9:17:b0:0f:ab:
                    f6:68:46:cb:d4:ce:4d:21:de:19:51:d1:ae:f4:f8:
                    ef:94:15:35:19:96:34:7f:ee:e4:47:ee:f1:f1:2e:
                    f7:c8:0c:63:dd:a6:a0:cb:4a:d1:48:74:2c:d3:f6:
                    ec:7b:a7:9e:1e:05:91:63:8c:39:da:f5:76:dd:56:
                    da:2f:2b:92:9e:ac:fe:12:c8:f1:93:2b:96:6a:bf:
                    0f:e9:38:39:cc:58:4a:82:e4:9d:dc:12:bc:a2:ec:
                    ff:f6:6d:61:26:80:53:ee:30:de:c6:8d:f3:5e:51:
                    c7:d5:37:8c:66:0c:24:10:e7:1a:e9:c1:59:eb:b2:
                    05:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:78:47:BB:68:1C:AC:20:77:6A:8E:D6:68:FD:A9:62:8D:1A:8C:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7af485d2-1411-389c-a251-d3d163a361e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:38:55:f5:b7:5b:27:f4:43:da:bd:dd:0b:16:2b:6c:f0:84:
         be:6e:c6:3d:c7:0e:37:d1:6c:a4:07:e1:2e:bc:95:a2:38:89:
         01:39:3c:78:48:d1:af:9a:19:a1:2a:b9:a3:54:e6:e8:b3:71:
         02:64:1d:e3:b9:df:82:05:5b:9a:69:c1:59:95:b9:b1:30:01:
         09:5e:6b:26:12:cc:85:61:a7:59:4c:be:da:04:c8:90:4c:d4:
         32:2e:e2:d4:4a:09:d0:84:d8:dd:9e:03:1c:2b:3e:b7:b3:33:
         51:00:14:73:64:d6:c4:d9:85:aa:45:b5:65:a8:2d:e9:26:25:
         9b:11:3a:28:3c:d0:69:79:18:7a:9d:a2:2d:b1:20:c6:38:63:
         a6:5a:df:f7:54:ca:b1:f3:b4:bf:df:0c:ad:6c:e4:2a:a6:8a:
         8c:e3:7e:16:08:76:cf:3c:d1:06:df:83:f3:a4:57:37:50:0c:
         6a:93:db:f0:3c:d9:3e:c8:78:c4:35:c5:84:83:82:f3:0c:15:
         6c:0d:e8:e6:bc:4f:39:f1:e4:50:52:3d:5b:94:14:c8:0b:3f:
         33:95:2d:6e:d6:63:50:df:01:72:b2:06:93:a2:b9:95:0a:99:
         a7:e0:1d:4f:fe:9f:32:92:c2:15:0b:d2:bd:64:a8:89:58:97:
         fb:ef:64:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:33:34 2026 by rpki-client