Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7cad5f85-2f2c-3825-b698-c7b7711aa0cf.roa
File:                     7cad5f85-2f2c-3825-b698-c7b7711aa0cf.roa (raw, json)
Hash identifier:          LumWp3ORYV166Z0I97FOSqH0wlbr4wpXINrOGs2MbUw=
Subject key identifier:   A1:B7:6D:21:B1:2E:85:6E:59:EA:A6:31:19:0D:BE:16:6D:A1:71:B2
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D0A77A649ECB0113B6EBA3A00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7cad5f85-2f2c-3825-b698-c7b7711aa0cf.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     3360
IP address blocks:        192.57.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:a6:49:ec:b0:11:3b:6e:ba:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=67907825-78f2-45e0-9045-97d71c0c2e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f5:c1:7e:35:50:f2:8a:db:80:30:85:94:35:
                    5b:79:6c:8c:46:d6:62:85:f1:c5:bb:85:71:52:9a:
                    f5:a7:0e:c8:c6:be:25:27:60:ca:38:3d:c8:3a:7b:
                    22:1c:17:a1:09:bc:f4:5a:64:17:b3:35:02:48:ed:
                    10:d0:7c:25:d5:4b:2a:31:0c:9e:4b:a9:7d:01:fe:
                    15:a4:2a:6a:e1:21:16:c2:a5:bd:ff:0e:53:af:ab:
                    7f:64:cf:26:db:6f:c7:bd:e5:23:c4:71:6c:44:79:
                    7f:7b:73:c0:32:b1:1c:9c:35:d3:54:3e:c8:a3:50:
                    a5:88:f5:18:df:71:f9:ba:8f:5a:0b:a3:d8:d2:c0:
                    65:20:36:7f:86:31:06:cf:09:72:3c:bf:a2:e1:4d:
                    21:94:de:3d:37:c5:64:76:9b:c8:8e:9c:ea:f8:87:
                    31:33:6a:c5:d2:91:5f:f3:8f:f5:8e:18:7d:f6:d0:
                    60:95:28:49:f6:02:a2:66:88:21:d4:07:b8:9e:9d:
                    1c:5e:3f:fc:8d:31:59:5a:54:25:58:bc:6b:86:e8:
                    91:d1:b7:ca:e7:b9:3d:4c:56:20:0d:6d:ba:17:0b:
                    f4:d5:56:1a:75:e8:7a:8d:b8:1b:5f:5f:e7:db:f9:
                    4b:c0:7e:71:df:65:7e:b6:b6:fd:31:a4:59:63:31:
                    12:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B7:6D:21:B1:2E:85:6E:59:EA:A6:31:19:0D:BE:16:6D:A1:71:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7cad5f85-2f2c-3825-b698-c7b7711aa0cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:b2:01:fb:b2:d7:7b:d5:ea:f0:5f:34:e3:d0:af:b5:84:3f:
         ed:3d:4e:38:fa:0e:64:bf:63:54:45:28:95:db:7a:20:5d:cf:
         bf:be:b8:1d:af:6f:9d:c6:3b:b1:99:dc:14:3a:98:e8:2d:b1:
         bd:04:06:8b:9c:b0:ad:79:36:80:51:6a:00:8b:c1:05:68:2f:
         cc:c2:cb:7c:b5:24:e9:88:2d:6d:ca:46:ba:82:35:fe:c5:78:
         64:3f:a4:f1:14:56:6d:07:1f:55:7a:7c:01:bb:ca:94:bc:c2:
         bf:cc:0d:4c:d4:df:e5:cf:f5:9f:5d:cc:fd:5d:27:18:9f:b2:
         eb:52:42:a6:52:72:7d:3a:93:03:af:73:b3:f9:2f:7b:62:c5:
         e2:5b:cd:67:65:b9:b2:88:79:47:8a:62:17:b9:3f:e0:80:fb:
         c6:32:e9:e7:c3:7a:8d:6e:85:c5:86:d0:b8:0d:11:ee:2c:18:
         7c:1f:e0:61:5b:fb:69:97:20:54:8f:76:cc:66:18:2d:1a:9d:
         86:17:0f:86:07:d2:ef:7a:df:06:ae:e3:08:ff:6e:8f:ad:06:
         d4:2c:15:97:2d:f0:7f:1a:04:5a:b4:1e:b4:b8:c5:9d:bb:dc:
         2c:37:cc:ff:db:43:f3:fb:3b:03:fe:8c:49:2b:39:18:73:de:
         bf:8e:5d:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd6ZJ7LARO266OgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk
Njc5MDc4MjUtNzhmMi00NWUwLTkwNDUtOTdkNzFjMGMyZTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPXBfjVQ8orbgDCFlDVbeWyMRtZihfHFu4Vx
Upr1pw7Ixr4lJ2DKOD3IOnsiHBehCbz0WmQXszUCSO0Q0Hwl1UsqMQyeS6l9Af4V
pCpq4SEWwqW9/w5Tr6t/ZM8m22/HveUjxHFsRHl/e3PAMrEcnDXTVD7Io1CliPUY
33H5uo9aC6PY0sBlIDZ/hjEGzwlyPL+i4U0hlN49N8VkdpvIjpzq+IcxM2rF0pFf
84/1jhh99tBglShJ9gKiZogh1Ae4np0cXj/8jTFZWlQlWLxrhuiR0bfK57k9TFYg
DW26Fwv01VYadeh6jbgbX1/n2/lLwH5x32V+trb9MaRZYzESMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKG3bSGxLoVuWeqmMRkNvhZtoXGyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvN2NhZDVmODUtMmYyYy0z
ODI1LWI2OTgtYzdiNzcxMWFhMGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDlgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHSyAfuy13vV6vBfNOPQr7WEP+09Tjj6DmS/Y1RFKJXbeiBdz7++uB2v
b53GO7GZ3BQ6mOgtsb0EBoucsK15NoBRagCLwQVoL8zCy3y1JOmILW3KRrqCNf7F
eGQ/pPEUVm0HH1V6fAG7ypS8wr/MDUzU3+XP9Z9dzP1dJxifsutSQqZScn06kwOv
c7P5L3tixeJbzWdlubKIeUeKYhe5P+CA+8Yy6efDeo1uhcWG0LgNEe4sGHwf4GFb
+2mXIFSPdsxmGC0anYYXD4YH0u963wau4wj/bo+tBtQsFZct8H8aBFq0HrS4xZ27
3Cw3zP/bQ/P7OwP+jEkrORhz3r+OXY4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:45:49 2026 by rpki-client