Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/aa9a8b82-1215-3aa7-9164-a0663e2a3316.roa
File:                     aa9a8b82-1215-3aa7-9164-a0663e2a3316.roa (raw, json)
Hash identifier:          8UwVwXjE2/OGjRT31svBRjbVhWt7wxYwH9sdNbS8Y3Q=
Subject key identifier:   84:54:04:16:62:97:C1:B7:35:62:38:E6:A5:76:9D:B3:58:1B:06:5E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B8BE22C6D8EE973E9CB5B8800
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/aa9a8b82-1215-3aa7-9164-a0663e2a3316.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     3360
IP address blocks:        204.104.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:2c:6d:8e:e9:73:e9:cb:5b:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=cdef5134-0b3e-4f74-97f1-9f38e3e779e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d8:f5:4f:7a:32:7b:0e:9e:6d:de:07:a2:f1:
                    ef:db:7d:05:e4:73:d7:d7:5d:df:a8:39:4c:4d:a5:
                    ed:a6:1f:a0:f8:47:e9:2d:31:e3:05:1a:b7:c6:3c:
                    b4:a7:5b:24:64:0f:5b:39:be:2e:a9:8c:c1:2e:9a:
                    6b:d2:7f:94:69:4e:f3:4a:6b:f7:a1:dd:b7:cb:1f:
                    fb:ed:1b:d4:8e:96:a9:05:93:1c:54:3f:35:1e:4b:
                    9b:cb:e3:83:71:7b:8e:e6:49:58:93:ed:c8:62:6c:
                    d3:d2:66:87:1d:47:20:be:e7:f7:45:87:1b:d6:1c:
                    37:6c:f7:43:39:52:58:8f:b9:4b:38:8d:18:9c:83:
                    ed:94:ba:ec:8f:89:83:57:05:3b:f2:7b:68:5c:0b:
                    96:d6:dd:21:8a:01:4f:e7:ec:f7:9c:94:1f:f2:ce:
                    03:1b:34:4e:3d:9d:33:25:2f:54:86:22:b4:b7:6e:
                    1f:db:8d:2d:16:64:77:b7:b6:90:c0:47:5c:71:b6:
                    3d:cb:00:8a:77:2e:12:cb:45:40:a8:a9:27:c0:6c:
                    64:61:49:b0:ba:19:7c:64:36:33:aa:0b:ff:f9:fc:
                    92:cc:52:4d:f8:7a:21:1c:28:ca:c6:81:ef:cc:49:
                    b0:b3:03:88:ca:0d:bf:fe:22:87:d1:e3:8c:f6:0a:
                    b1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:54:04:16:62:97:C1:B7:35:62:38:E6:A5:76:9D:B3:58:1B:06:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/aa9a8b82-1215-3aa7-9164-a0663e2a3316.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:a2:23:b9:a5:dc:a1:e0:b7:33:19:d3:70:5f:68:d9:ab:e3:
         bd:61:fb:dd:99:ac:6e:45:cc:3c:17:fa:1a:f2:a8:33:f2:5c:
         32:3c:71:b7:88:b0:fe:55:48:ff:c7:60:5a:7c:4e:14:9a:4b:
         73:62:c2:d5:e3:2e:e9:e4:b5:ea:3f:79:89:ed:c3:c9:cc:d4:
         78:70:ed:f8:f2:b7:c6:df:32:ff:b7:fc:f4:3e:a1:5e:77:b5:
         61:22:49:25:0d:f2:41:e2:53:b5:ca:a6:52:80:22:ab:52:68:
         61:da:e8:a2:03:9b:0b:bc:c5:0f:ec:8e:02:9d:03:6c:86:95:
         ad:50:25:7b:a2:92:48:30:e5:38:ce:5e:e5:c6:4f:7a:cb:c5:
         71:dd:9e:42:79:0a:d2:67:97:63:3e:8e:fd:5f:84:6a:c2:d1:
         5c:e1:2b:e5:94:48:06:d8:85:81:75:7c:36:d9:de:c7:00:36:
         64:a6:e2:30:77:d2:41:ba:1c:41:03:14:d5:4b:db:94:b0:6e:
         ed:77:b1:ca:ae:53:e0:59:cd:f8:2f:69:37:d4:f7:44:27:10:
         75:5d:dc:06:a7:15:2b:c5:39:d3:df:dd:c8:dc:6f:76:31:55:
         b6:12:64:bf:18:81:c4:8e:4e:ab:72:f3:be:0a:bc:6d:05:18:
         77:45:14:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:44:08 2025 by rpki-client