Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/97ee2311-ca30-38b3-a703-3295e852e513.roa
File:                     97ee2311-ca30-38b3-a703-3295e852e513.roa (raw, json)
Hash identifier:          wckoY4CrfpMoFtiuIRstxLEegX/C+UG3hxIxdrPMStk=
Subject key identifier:   B5:99:06:6E:24:52:F7:AD:4C:3F:43:05:09:37:ED:97:B5:C2:13:79
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D0A77AAE7291756FB4F3AC600
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/97ee2311-ca30-38b3-a703-3295e852e513.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     3360
IP address blocks:        192.85.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:aa:e7:29:17:56:fb:4f:3a:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=ae39ec35-4b54-4745-a749-8aa028c38964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3c:56:9f:38:5c:87:32:93:2e:33:54:e3:d6:
                    16:6c:0c:d7:47:65:e6:5a:8b:17:03:23:bd:4b:00:
                    56:55:18:4c:05:53:6e:76:e6:f1:96:b0:2c:b8:18:
                    1e:2f:43:2a:f8:e2:28:9d:9d:03:ac:b7:f0:9e:85:
                    49:96:cb:8f:91:4d:99:61:17:58:ee:75:a7:44:25:
                    54:bf:36:1c:d5:83:7d:e6:f0:72:22:7a:88:a3:8c:
                    d6:77:34:8e:4b:4a:e1:69:bf:45:f3:3b:27:51:87:
                    98:ee:50:98:07:1d:28:80:b6:f7:82:cc:b4:d6:3a:
                    f8:ea:ee:ab:82:bb:77:d0:7e:fa:10:dc:ba:e0:79:
                    8e:ab:03:9e:d9:41:78:3b:57:5b:f5:9c:c6:77:64:
                    44:53:24:ee:c1:e0:a4:f2:76:b1:8d:4a:5b:7d:7a:
                    20:bf:90:e0:e4:7f:05:eb:96:bb:37:21:70:4e:24:
                    b2:87:12:57:ef:b8:f8:ed:52:ed:07:9a:e0:8d:39:
                    5d:b1:a9:8f:f9:b5:7e:59:f5:89:0a:3b:cb:a0:7e:
                    f9:fc:37:d7:c5:28:bb:7b:49:5c:be:db:d2:c4:23:
                    a3:ec:71:aa:e3:f6:0f:c0:2d:b0:b4:29:5a:23:05:
                    21:60:a2:b8:aa:67:fd:45:51:d1:ab:e1:4d:88:ae:
                    5a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:99:06:6E:24:52:F7:AD:4C:3F:43:05:09:37:ED:97:B5:C2:13:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/97ee2311-ca30-38b3-a703-3295e852e513.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:a8:dc:db:de:f3:7b:38:76:03:52:5d:dc:e5:96:81:cc:19:
         99:cb:c9:4b:de:05:41:4a:bd:b0:0d:86:3e:73:e6:23:71:a8:
         f1:8b:0b:4d:e4:f5:7a:dd:1c:72:d5:f1:d1:cd:25:41:d8:f9:
         c9:be:b9:ee:20:23:81:d8:85:c6:65:99:84:f1:e8:79:cf:3f:
         ce:19:ec:6a:88:ca:18:18:a2:98:46:f2:fe:17:9c:5e:4e:7d:
         13:98:2e:3f:51:b3:28:76:f0:8e:53:31:10:eb:f3:fd:86:66:
         e6:e0:28:5c:7c:55:8b:e2:71:66:da:a1:b5:9b:86:df:1a:71:
         f9:c7:66:aa:1c:06:d5:2d:75:56:0c:76:6b:c1:8a:28:0e:1a:
         5d:2e:5f:79:74:a0:fb:2e:bb:39:b6:e0:0d:91:78:3d:9a:09:
         7a:05:1d:24:13:9e:54:75:e7:68:ec:84:9f:0b:ef:65:3d:76:
         9c:81:a2:94:ee:47:af:95:3e:8c:d0:8b:2c:48:5e:07:0f:9d:
         b7:f4:56:46:6c:ee:57:0f:81:33:3f:b2:36:95:ec:41:ff:07:
         99:90:73:08:df:e9:e3:fa:4a:fe:66:42:90:6d:3d:bb:0c:78:
         56:41:36:ab:84:1b:f4:cf:97:a7:0a:36:9f:41:b8:8c:0b:ff:
         f6:2d:ee:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:55:42 2026 by rpki-client