Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f4eb41df-175b-30f1-85ee-de4719989ed1.roa
File:                     f4eb41df-175b-30f1-85ee-de4719989ed1.roa (raw, json)
Hash identifier:          HYVHCmFCA7lJt1byRzXJGx+hodsTF1i+ykHhBwpnA6A=
Subject key identifier:   3F:D9:EF:10:C3:BB:8E:A6:0E:29:0F:6E:7E:BA:86:38:D0:10:C2:2B
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584F497720036995367A747971C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f4eb41df-175b-30f1-85ee-de4719989ed1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     3360
IP address blocks:        204.104.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:20:03:69:95:36:7a:74:79:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=59555c1b-90b8-4dfd-920e-a0fb9aacd610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bc:f4:8f:3e:65:5e:11:21:a5:cf:8b:84:e3:
                    a8:2c:b5:2f:dd:7e:e0:b8:50:86:5f:05:df:b3:ec:
                    ab:e1:88:83:81:07:11:08:84:1f:ae:ca:a6:38:ae:
                    7e:1d:f9:50:2c:7e:e0:6f:e6:cd:b0:b8:77:d0:02:
                    14:89:26:23:c7:9a:c4:41:5d:62:2d:9d:4a:5a:6a:
                    6b:89:0a:c5:6e:17:1d:da:8d:bd:06:6d:06:c4:e0:
                    ed:77:86:26:ea:35:67:5c:8e:23:f6:83:6d:84:c6:
                    e8:b8:2e:40:17:bc:88:63:eb:a4:30:12:a1:00:d8:
                    51:0f:8a:33:bf:89:e0:c6:8a:1b:60:96:6e:89:76:
                    ba:00:b2:d1:81:ed:1d:ad:e2:39:e1:7e:02:25:c9:
                    31:eb:38:fc:03:29:c0:e7:4e:d2:2c:5e:20:16:5f:
                    14:a5:a7:07:b3:2f:fa:50:42:89:82:89:3e:f4:25:
                    49:16:ae:7e:05:f8:ff:d7:69:4b:66:8a:67:8d:d1:
                    c8:cd:d7:9a:46:b6:f3:bf:0d:d0:2e:97:bd:d9:93:
                    42:f0:f3:a9:59:2a:2f:10:f3:be:93:22:16:00:e1:
                    84:e1:b5:02:cb:86:4e:6d:a8:f1:d0:74:59:69:7d:
                    5e:74:c6:fb:56:ef:a4:70:ec:df:d6:d3:c1:f7:1c:
                    b5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D9:EF:10:C3:BB:8E:A6:0E:29:0F:6E:7E:BA:86:38:D0:10:C2:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f4eb41df-175b-30f1-85ee-de4719989ed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:7d:10:2e:ce:44:7b:9f:9e:b4:5d:44:f9:b2:2a:5f:c0:e2:
         05:2a:ab:1a:54:c4:82:37:22:77:43:f1:d8:29:1b:71:3f:ef:
         1b:66:34:d0:5e:1c:1a:72:f2:a1:d7:e5:bc:99:74:96:70:98:
         0d:46:5f:97:73:a3:a8:70:30:99:e0:78:d1:44:eb:af:45:8a:
         54:74:82:65:70:4a:02:b5:e9:5a:52:0d:61:ba:b2:20:ff:c0:
         34:7d:f1:09:da:12:ae:d5:82:df:d8:75:1d:20:7a:74:ed:76:
         0b:a1:72:58:bc:45:ef:19:59:1f:94:c3:2a:23:e9:a2:59:c6:
         be:4f:5b:f0:1c:55:4b:23:04:b0:bc:c6:d2:ae:62:e9:f0:3c:
         f2:07:47:16:37:9b:70:e2:9d:5a:2b:06:0a:d4:3f:09:4f:ea:
         83:d9:78:39:94:3a:57:0b:b3:af:16:57:bc:53:16:2c:84:c5:
         74:b7:55:5b:49:0e:93:6d:53:cb:51:9c:bc:60:ef:b6:64:1b:
         e1:0c:6a:99:ec:8f:0d:4f:4d:4b:a3:77:76:14:57:5a:63:7b:
         03:ba:a7:6d:8b:18:7d:3a:b4:c5:c9:f3:0d:a9:04:96:b3:d4:
         c0:59:1a:96:1a:01:6a:c0:0a:82:36:db:5e:e2:00:4c:de:c4:
         09:4c:61:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdyADaZU2enR5ccAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NTk1NTVjMWItOTBiOC00ZGZkLTkyMGUtYTBmYjlhYWNkNjEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLz0jz5lXhEhpc+LhOOoLLUv3X7guFCGXwXf
s+yr4YiDgQcRCIQfrsqmOK5+HflQLH7gb+bNsLh30AIUiSYjx5rEQV1iLZ1KWmpr
iQrFbhcd2o29Bm0GxODtd4Ym6jVnXI4j9oNthMbouC5AF7yIY+ukMBKhANhRD4oz
v4ngxoobYJZuiXa6ALLRge0dreI54X4CJckx6zj8AynA507SLF4gFl8UpacHsy/6
UEKJgok+9CVJFq5+Bfj/12lLZopnjdHIzdeaRrbzvw3QLpe92ZNC8POpWSovEPO+
kyIWAOGE4bUCy4ZObajx0HRZaX1edMb7Vu+kcOzf1tPB9xy1RQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD/Z7xDDu46mDikPbn66hjjQEMIrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjRlYjQxZGYtMTc1Yi0z
MGYxLTg1ZWUtZGU0NzE5OTg5ZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGgNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGd9EC7ORHufnrRdRPmyKl/A4gUqqxpUxII3IndD8dgpG3E/7xtmNNBe
HBpy8qHX5byZdJZwmA1GX5dzo6hwMJngeNFE669FilR0gmVwSgK16VpSDWG6siD/
wDR98QnaEq7Vgt/YdR0genTtdguhcli8Re8ZWR+Uwyoj6aJZxr5PW/AcVUsjBLC8
xtKuYunwPPIHRxY3m3DinVorBgrUPwlP6oPZeDmUOlcLs68WV7xTFiyExXS3VVtJ
DpNtU8tRnLxg77ZkG+EMapnsjw1PTUujd3YUV1pjewO6p22LGH06tMXJ8w2pBJaz
1MBZGpYaAWrACoI2217iAEzexAlMYaA=
-----END CERTIFICATE-----
Generated at Mon Sep 28 10:53:34 2026 by rpki-client