Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8c0f078c-4368-32ae-9fee-746a96a146ba.roa
File:                     8c0f078c-4368-32ae-9fee-746a96a146ba.roa (raw, json)
Hash identifier:          XLw8/GE0URghT4LDkRlOPuH8l9lDSUPXuE3UORQC8kA=
Subject key identifier:   38:E4:84:8D:45:6D:DF:40:7C:27:14:0D:E7:C4:EE:E0:DD:45:AF:B5
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D1B1A0F5446660158CC468100
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8c0f078c-4368-32ae-9fee-746a96a146ba.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     3360
IP address blocks:        192.57.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:0f:54:46:66:01:58:cc:46:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=d486878b-d652-4d8b-b2ea-478470bebe41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:44:46:26:6b:f4:49:ce:b9:24:10:00:cc:7f:
                    b0:1d:70:e5:9f:07:f8:e6:8f:80:da:69:bd:93:f1:
                    72:e6:e4:70:61:a6:11:97:5a:a6:aa:80:13:7f:0e:
                    4e:51:15:51:79:3f:4e:ea:5e:20:fc:e7:02:e3:d2:
                    97:8d:da:c8:3e:1d:5c:c8:77:68:55:75:e0:97:12:
                    6f:2b:e4:65:c0:3f:01:5f:fe:04:43:49:e1:81:76:
                    0d:72:8e:16:4c:32:70:fc:19:ff:7a:10:40:1b:ef:
                    1c:72:36:ee:d7:ce:86:35:30:6a:f9:8c:10:19:bb:
                    25:86:61:aa:93:df:15:97:00:d3:c8:01:54:78:c0:
                    d3:f5:9c:36:c4:dc:78:fb:8e:55:27:3e:a6:e2:d8:
                    7e:eb:ac:f5:9a:f9:15:ac:04:69:42:ca:60:ab:14:
                    4c:82:c4:69:59:a9:c6:1f:00:12:71:96:68:94:99:
                    ca:74:e4:37:2f:6c:79:99:97:a9:82:65:e7:3e:56:
                    4f:6c:a9:fa:c3:42:3a:a4:60:c2:41:36:5e:be:ea:
                    95:38:e7:18:1b:d5:88:df:08:12:a0:85:de:e3:54:
                    38:ec:c3:c3:65:2f:5c:9f:1c:30:ec:7c:0b:50:db:
                    25:b9:ab:54:79:cf:a0:2f:41:a5:2a:2a:fd:3f:2e:
                    96:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E4:84:8D:45:6D:DF:40:7C:27:14:0D:E7:C4:EE:E0:DD:45:AF:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8c0f078c-4368-32ae-9fee-746a96a146ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:9c:d9:9d:a6:97:a5:d0:09:15:9d:a1:ed:46:c3:5f:19:de:
         4a:37:34:b8:b8:28:f4:bb:24:17:9b:74:c6:d2:22:42:c6:fd:
         b6:0f:88:fd:83:3b:84:ba:06:f0:b0:d7:5b:90:31:50:e0:8c:
         30:22:f0:d0:ab:e4:0b:3c:8e:06:9d:f1:7f:c7:91:f9:10:c5:
         f3:d6:e2:5c:a2:9c:16:ca:f1:38:71:40:6d:87:19:27:bc:d6:
         ed:82:bc:0c:fe:c1:d6:0f:f7:71:6f:3f:50:1f:8f:b9:0b:6c:
         f0:e9:12:93:4d:48:42:2f:0f:73:af:be:97:2f:99:09:58:97:
         ba:94:77:e0:03:fa:95:ea:8e:1f:2a:36:9b:67:24:ca:8e:3d:
         4b:c2:1c:bc:5f:69:60:e7:40:d0:d3:53:5e:ca:83:c7:62:df:
         79:ec:24:7c:7d:a4:ab:f6:a0:c5:69:c8:89:d7:49:28:0c:15:
         ac:b8:e8:73:ed:5e:5d:14:75:1f:1f:74:18:e3:e3:10:8a:39:
         e4:b4:bc:81:13:0f:0b:22:d0:19:76:e2:bd:44:ac:4e:b6:52:
         0d:6e:c8:e7:11:6f:aa:28:92:bd:99:f8:04:f1:4f:51:aa:71:
         77:ec:20:fa:3f:15:c9:7f:d5:de:3d:59:05:ab:73:95:34:f2:
         b6:b0:d3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:10:10 2026 by rpki-client