Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c70c6bec-8f2b-3af8-aeb2-5e46b1ed1755.roa
File:                     c70c6bec-8f2b-3af8-aeb2-5e46b1ed1755.roa (raw, json)
Hash identifier:          HzU9rg42VM92YJm7eXXj0d/exlhgH1a7T0o/7mj6cK0=
Subject key identifier:   94:AF:3B:01:39:CC:BA:DA:07:F5:DD:E5:FB:66:A9:90:BA:B1:28:CC
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584F497613B5956F3647DD235000
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c70c6bec-8f2b-3af8-aeb2-5e46b1ed1755.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     3356
IP address blocks:        192.85.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:13:b5:95:6f:36:47:dd:23:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=44dba864-0813-4c6f-bb67-574920698277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a7:ba:1a:57:02:ed:7a:dd:6b:2f:a5:08:4e:
                    57:a7:65:71:87:16:2f:05:fa:c0:13:01:db:d2:af:
                    ac:fb:de:95:0b:59:f9:81:36:d5:e2:e8:f2:28:7a:
                    6a:3d:a2:f3:30:bf:0c:fb:12:9b:79:92:ba:ab:17:
                    11:8a:d7:c9:4c:5a:69:af:06:23:52:2d:ca:f2:fa:
                    b8:17:6e:60:6a:e1:bc:ba:91:c5:c4:ba:f1:7a:59:
                    8b:a8:e3:c1:a2:68:45:be:fb:f3:76:b6:24:2d:08:
                    90:14:57:06:dd:9a:8b:2d:0a:e7:7f:c6:bb:69:3e:
                    b2:1a:4e:75:4f:7b:ba:0f:c0:b6:75:6a:bb:7c:c1:
                    f5:80:16:4e:be:d2:b8:3a:cb:fb:b3:76:cc:3d:91:
                    8a:b8:8b:06:35:29:6d:5d:72:78:31:23:7a:39:13:
                    5c:e2:86:06:ce:78:c2:a0:d6:8e:10:22:47:3d:a3:
                    01:8a:18:a1:90:ba:ef:a2:d9:71:f6:41:04:5d:d7:
                    3e:73:c9:fd:28:c6:14:cd:2f:b6:a5:66:cd:3f:3b:
                    3d:b5:6f:aa:a0:43:98:cd:f1:a0:23:5b:93:14:0c:
                    d5:bf:ac:a5:7e:9d:d5:78:de:70:3b:ca:81:9b:ea:
                    87:09:aa:c9:38:79:8a:87:a6:25:0b:72:2c:0b:cf:
                    dc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:AF:3B:01:39:CC:BA:DA:07:F5:DD:E5:FB:66:A9:90:BA:B1:28:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c70c6bec-8f2b-3af8-aeb2-5e46b1ed1755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:d2:e5:22:62:b6:48:64:03:9a:42:51:35:88:42:76:c8:19:
         79:59:06:12:1e:7b:0a:dd:18:5d:bc:c9:29:28:59:c4:44:be:
         ff:b7:f4:cf:48:a9:b1:99:8c:62:f6:63:7b:00:43:f9:e1:e7:
         c9:6d:ae:85:fd:e4:1f:02:47:62:0f:e0:5f:d0:43:3f:3c:a5:
         d7:83:97:a1:b3:ce:74:8a:82:8d:cc:86:88:8f:64:11:f9:80:
         93:c8:8c:61:44:aa:da:8c:a7:37:e0:b7:59:4c:32:2e:eb:1a:
         c7:d6:7a:82:73:a3:a8:10:08:21:16:80:41:f8:fa:45:b2:d3:
         d7:0c:3c:c3:b4:1a:8d:fd:cc:55:57:a6:99:6a:f7:b0:57:b9:
         7d:52:9b:40:9e:fc:b8:7c:79:a2:63:49:75:b8:92:bf:a6:23:
         36:64:cd:cd:45:f1:6a:96:54:6e:17:c5:e2:fe:44:7c:4e:9f:
         c7:7d:05:35:fd:2b:b5:c5:2e:78:03:29:dc:84:77:a8:28:ff:
         ea:f9:0e:6b:20:0c:fd:e2:6a:4f:4b:7a:d5:b7:a3:82:00:21:
         07:d0:df:f4:83:a1:8f:c0:09:4c:8d:e5:6a:9f:ba:c5:d1:6e:
         4d:cc:bb:8c:07:db:89:d8:c1:57:db:8a:a7:ab:ad:c8:c4:72:
         ad:d9:54:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:35:41 2026 by rpki-client