Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f2680fb4-636b-31c5-984e-18c290634740.roa
File:                     f2680fb4-636b-31c5-984e-18c290634740.roa (raw, json)
Hash identifier:          pgvc6duhCErlLgPC1CGGSBZ8/rOOdGD6x3hh81GXcsU=
Subject key identifier:   5F:72:56:39:8F:0D:A4:17:16:EB:F6:5F:52:1B:27:0F:06:76:7E:6F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584F49761546BB718CAE5F2F35C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f2680fb4-636b-31c5-984e-18c290634740.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     3356
IP address blocks:        192.57.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:15:46:bb:71:8c:ae:5f:2f:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2d2f0da0-3b43-41ed-af0b-92532a91538b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f5:ac:ba:03:a5:ad:62:fc:63:59:da:8c:44:
                    7a:49:e5:bf:68:8c:73:cb:72:9f:98:0c:40:0c:a3:
                    d5:72:30:41:5c:04:d9:09:12:fb:1d:b1:12:3c:19:
                    81:ad:57:fd:82:dd:f8:7f:d2:b1:26:62:d5:56:1f:
                    9b:d7:9e:9a:32:4b:2c:39:13:43:00:71:60:37:a6:
                    be:d1:23:2e:02:4f:8c:16:5e:73:e0:61:d4:05:dc:
                    6d:4e:65:33:79:03:ce:36:d8:97:b2:df:da:38:33:
                    59:4c:cf:88:a5:05:a1:3d:3a:64:62:a6:9b:cc:d4:
                    ce:30:ac:a3:aa:98:22:b2:0f:84:aa:18:93:49:69:
                    f1:0f:5d:c2:f2:d4:ca:f4:ee:d1:50:61:12:68:06:
                    ba:15:cf:69:d9:2f:0f:ac:f9:d1:b0:ac:1a:5f:1f:
                    11:07:d5:ad:7d:5c:56:66:c0:e0:01:12:4e:b7:a2:
                    f3:b9:50:46:03:81:1c:24:1d:5b:07:dd:23:b2:3b:
                    40:94:9f:a7:ea:16:f4:0f:4d:86:35:27:ba:b2:10:
                    90:8a:f6:3f:3d:56:14:fd:58:96:36:77:b2:b6:3e:
                    69:59:da:d6:41:34:2d:84:56:b2:37:60:d1:89:5a:
                    f0:e8:7c:4d:dc:83:6c:5e:eb:b1:95:72:48:fe:7a:
                    ab:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:72:56:39:8F:0D:A4:17:16:EB:F6:5F:52:1B:27:0F:06:76:7E:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f2680fb4-636b-31c5-984e-18c290634740.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:7f:db:a0:03:4b:f9:be:e6:07:8c:9b:be:34:67:3c:58:b8:
         b7:e9:2b:cd:44:1c:7e:34:0f:2a:86:4e:7b:68:bc:48:fa:4b:
         0a:b5:36:2a:73:ea:26:86:c4:b3:80:1c:ad:fe:81:f3:04:fc:
         67:16:35:eb:f0:0b:75:5b:23:23:36:67:10:61:fb:31:6d:90:
         f3:0b:9e:9e:08:16:74:33:0b:5b:e3:0a:75:23:ac:4d:df:2e:
         50:47:5e:a9:b5:83:79:b9:3a:2d:4d:b4:1e:58:4d:07:e6:fc:
         19:f6:05:61:5d:cd:9d:c5:17:08:e9:46:26:04:ba:56:c4:88:
         1c:b9:e1:f1:b4:65:a9:3b:0f:48:67:df:e6:66:dd:50:dd:03:
         f4:8d:a0:cc:e8:9f:6d:ae:74:78:ba:5d:e6:6c:45:9c:e1:60:
         c4:b0:73:9b:64:7b:6e:67:9b:8c:36:d6:33:68:17:78:1e:48:
         23:c8:0e:68:d1:2d:65:05:73:e8:08:38:83:f6:3b:26:d1:1a:
         ec:cc:0b:0e:0d:70:b4:aa:2f:29:f0:dd:ed:c4:11:01:87:be:
         8d:e9:7f:9b:ad:9b:17:f5:a5:a6:03:e5:5a:74:ee:a8:cb:04:
         64:1d:6e:94:aa:76:c3:73:af:6c:86:b0:57:6b:1a:9d:3a:98:
         e4:51:9b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:47:28 2026 by rpki-client