Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ea1e1d99-3593-37bf-a573-b9a36a666f5a.roa
File:                     ea1e1d99-3593-37bf-a573-b9a36a666f5a.roa (raw, json)
Hash identifier:          YaK7Y55z0q/f8jxSsFFaIglrHPl0GF6EnnZZtwvV9cw=
Subject key identifier:   32:FE:08:16:AC:F4:3D:94:53:C5:08:30:C2:90:4A:66:94:37:68:A9
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E54B4B083EA075C0B6637CBC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ea1e1d99-3593-37bf-a573-b9a36a666f5a.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     3356
IP address blocks:        204.105.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:b0:83:ea:07:5c:0b:66:37:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=918ed335-3837-40bc-88a3-d51a8d26f308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f3:c5:dd:66:41:5f:4d:b0:f3:8c:3f:71:db:
                    e6:e6:32:30:db:d8:4b:28:b4:d4:51:29:7c:db:9e:
                    8e:b6:11:18:e1:bf:78:97:5c:3f:cb:06:23:c8:dd:
                    73:29:e1:18:0f:03:1c:84:7c:a3:3c:f0:50:5f:cc:
                    b5:1e:a8:d5:d5:6b:a4:97:bd:58:e6:4d:0f:58:81:
                    34:85:b8:88:18:5f:4f:e7:5c:c0:08:5c:2e:97:2b:
                    ce:3d:3b:66:59:77:3b:b3:9d:84:4c:2f:7f:c5:93:
                    e9:fb:40:db:f1:db:ea:0d:59:f9:93:55:54:6f:3d:
                    fa:04:b3:16:20:b4:5f:91:48:a8:04:cf:c4:5a:1d:
                    94:26:aa:25:c6:88:b5:86:d3:5f:76:72:66:a7:f8:
                    ab:19:63:e1:95:e7:32:5d:e0:01:cb:42:9e:83:a5:
                    f0:cb:03:ca:a5:aa:9b:23:c7:0d:14:33:af:38:e7:
                    4d:9f:89:ec:37:40:ad:8f:79:0f:d2:75:3a:82:59:
                    07:81:ec:76:e0:a3:72:20:27:7e:3c:62:13:fd:c7:
                    88:22:63:0a:c0:8e:3b:7b:89:a8:dd:55:14:8e:fe:
                    db:46:a9:7f:5c:7a:71:46:a6:69:1c:fd:1a:d8:6f:
                    ac:c4:14:50:53:bd:6f:12:a6:7a:16:03:74:70:9c:
                    0f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FE:08:16:AC:F4:3D:94:53:C5:08:30:C2:90:4A:66:94:37:68:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ea1e1d99-3593-37bf-a573-b9a36a666f5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.105.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:63:b7:c4:ef:2d:7a:33:60:48:e5:91:07:c0:45:33:22:da:
         b4:4c:9f:35:a2:90:fe:ab:14:e3:6a:38:33:4b:1b:20:6f:26:
         40:bd:ac:21:98:53:76:25:80:cc:61:f1:97:1c:75:f8:b4:3f:
         44:d2:88:1c:be:18:1e:14:c4:91:3c:01:42:c7:91:86:75:6b:
         65:f5:7f:c0:51:f8:fd:33:68:c0:3b:a0:f6:e0:80:79:f4:39:
         44:22:72:5d:79:74:42:1a:93:9e:71:b9:0b:f7:e3:d6:b3:c6:
         19:82:53:5d:23:7c:d2:0e:28:5d:b8:95:38:eb:df:eb:bd:84:
         8b:6e:70:c4:58:62:14:28:73:c3:fe:7c:a8:ed:3e:59:19:df:
         72:a6:fc:8b:44:9e:e8:39:fd:3e:6c:f1:fe:19:8a:41:37:52:
         3f:ce:5d:0d:b2:f4:03:04:b8:06:7c:b8:88:25:c6:ba:4a:43:
         3d:26:7b:5d:36:22:61:c3:a9:b6:db:8d:80:3b:c0:2f:8a:c2:
         e9:10:c8:b1:cb:91:fa:6d:ca:96:b2:06:f8:8d:c9:4f:f8:84:
         fc:c1:7c:46:c5:81:51:ef:63:a8:a3:bb:3f:63:a3:55:42:8d:
         57:15:ae:6c:94:c9:fe:e6:d6:0b:16:d5:61:c9:7f:39:cf:ae:
         69:02:56:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:42:52 2026 by rpki-client