Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a70ddc68-3296-3715-9008-2a2eb10fda43.roa
File:                     a70ddc68-3296-3715-9008-2a2eb10fda43.roa (raw, json)
Hash identifier:          n3OXZ4hTowwEf+K0Ht1a3Qf5X6rIQOHVbD1TVzgj0xQ=
Subject key identifier:   8F:A0:F1:16:41:63:9B:A3:27:CB:D7:AD:88:96:90:41:E0:7B:0C:28
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B4A472E4DDD3F78081817D1C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a70ddc68-3296-3715-9008-2a2eb10fda43.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     3356
IP address blocks:        205.141.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:2e:4d:dd:3f:78:08:18:17:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=a0955d67-2603-484d-a5e0-25b80d316899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0d:c4:06:78:6a:b3:37:48:86:68:ed:e9:6f:
                    19:1c:3f:36:35:d9:e2:01:4e:17:5b:b7:8a:54:1a:
                    ee:f4:da:6b:1d:d7:18:b0:07:fc:eb:0b:bb:ac:6a:
                    fa:bf:ba:11:0f:76:89:c9:af:d8:f5:69:42:91:16:
                    ad:cc:1e:b0:2b:67:ae:15:0d:37:85:d2:bd:89:81:
                    4f:41:4a:a4:08:80:0c:fe:34:dd:fe:4a:d6:ad:8f:
                    43:fd:a5:31:a2:80:b3:d1:10:15:67:5b:c7:87:79:
                    ba:69:34:08:44:a8:55:f6:a8:f0:3d:1a:b1:9e:34:
                    39:ef:4c:64:60:63:71:f5:68:46:42:36:09:b2:62:
                    e5:9b:0c:9d:14:0c:dc:33:6f:e5:80:0f:60:dc:15:
                    52:f1:93:50:38:81:34:c9:8e:6d:32:07:94:b7:6b:
                    76:46:00:52:e9:10:63:15:94:a0:85:46:ce:78:cb:
                    d3:ca:b0:42:c8:47:6e:3f:44:d4:2c:43:56:6d:f6:
                    14:f0:20:d6:81:24:71:7f:73:ac:b5:e9:63:5b:e7:
                    97:01:77:a0:73:a7:7f:73:c1:ea:51:07:89:de:93:
                    c4:27:ff:76:4b:26:07:42:26:c8:58:86:18:11:55:
                    fa:28:93:e2:51:aa:e3:64:af:d1:66:a8:fb:c8:f5:
                    24:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A0:F1:16:41:63:9B:A3:27:CB:D7:AD:88:96:90:41:E0:7B:0C:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a70ddc68-3296-3715-9008-2a2eb10fda43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.141.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:d2:c8:4e:14:4a:6c:0b:80:ed:ae:1f:94:33:e9:33:5f:f9:
         ca:08:14:85:68:e9:3e:62:ab:05:c8:8c:86:f3:70:5b:5b:37:
         c3:66:e4:dd:de:83:92:1c:a1:03:6b:d8:c2:a0:10:60:59:2b:
         9e:2c:63:b7:34:70:ae:50:27:d4:fd:3c:f0:2c:95:00:f7:e5:
         05:81:71:88:cf:4f:86:96:74:78:f3:41:67:89:16:7e:71:ce:
         d6:35:08:e4:12:8c:8f:b0:45:58:65:83:ca:bd:c7:2a:b3:71:
         9d:3d:c5:0f:f2:af:ca:dd:08:63:71:7f:9f:bd:d6:a0:3e:20:
         b3:f4:69:0a:7e:c6:91:34:e4:21:1f:f5:fd:39:c5:8e:0f:9f:
         da:12:ae:66:61:0d:60:c7:13:e5:19:7d:db:b0:3b:fd:86:c4:
         71:bc:c9:db:33:2d:84:f6:fe:14:5f:89:10:cf:20:10:46:42:
         9e:03:53:ba:63:c6:26:89:b6:d0:ad:e1:2c:73:ed:4c:91:80:
         11:9d:88:43:9d:86:15:5d:10:e5:a6:15:44:c0:f5:44:d4:4b:
         86:f7:a7:d4:e8:7f:47:67:21:c2:9d:2a:fc:4d:e3:4e:06:27:
         5f:3a:cf:29:3a:e2:52:02:02:a6:7b:2a:6d:4b:f1:dc:ba:a2:
         b9:70:2d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:09 2025 by rpki-client