Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/03b24c3c-3807-3c80-8f14-dcec4d69a4a2.roa
File:                     03b24c3c-3807-3c80-8f14-dcec4d69a4a2.roa (raw, json)
Hash identifier:          D8qVvPmAppT4k9gHkMnRxX04Hez5R/iB/zb/KLvb6Iw=
Subject key identifier:   4A:C8:21:99:5C:48:1C:B3:11:F1:86:4C:05:8B:90:73:EB:67:7D:F8
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EA79362C480765ED0B5813200
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/03b24c3c-3807-3c80-8f14-dcec4d69a4a2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     202
IP address blocks:        204.104.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:62:c4:80:76:5e:d0:b5:81:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a18749e1-c136-4bf6-9686-0bd67f1bc2ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2d:96:c8:b6:d5:99:3d:f6:b0:be:8d:66:04:
                    18:2b:fd:77:d9:fa:fd:b1:a1:8d:a4:a3:56:22:3a:
                    b7:ae:12:68:57:53:ca:1e:57:57:45:18:5e:3e:ec:
                    1d:1c:db:b1:59:7c:dd:d5:a9:91:26:d9:f1:72:fe:
                    1d:f7:66:76:96:2e:f5:77:06:70:cb:73:b8:66:66:
                    e4:be:5e:92:10:97:71:bf:97:63:af:62:7a:12:b8:
                    a1:d1:e2:87:fb:7b:0d:7b:bc:68:c2:bd:fe:1a:62:
                    49:e5:1f:12:8d:0e:01:03:60:24:fb:99:f5:43:ec:
                    5f:74:4d:8b:88:e7:4c:01:98:36:dd:36:f2:75:48:
                    58:1f:40:13:b2:da:a5:8a:9e:4e:f4:39:44:1b:dd:
                    14:e9:fe:72:06:68:ac:a1:c6:a8:cc:28:66:df:4f:
                    dd:78:68:37:74:30:8e:72:7a:41:2c:18:4f:a7:71:
                    25:e0:04:97:99:9c:23:da:13:1d:44:81:2d:43:cd:
                    82:92:69:98:f4:ff:1b:9c:82:10:6f:f6:ff:cb:5a:
                    f7:6f:da:3a:e1:e4:a5:e3:a0:20:1e:cb:3d:21:a7:
                    2d:fa:ef:88:ff:73:b6:01:f8:4c:78:24:5d:8b:8f:
                    6a:35:48:3f:c6:9d:35:56:33:c8:2f:92:60:ad:e7:
                    99:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C8:21:99:5C:48:1C:B3:11:F1:86:4C:05:8B:90:73:EB:67:7D:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/03b24c3c-3807-3c80-8f14-dcec4d69a4a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:c6:84:23:35:ef:e5:db:19:4d:6f:c5:05:2c:20:42:7b:55:
         a5:a8:17:9d:eb:37:7f:f7:5c:8d:4b:62:cf:26:8c:c0:98:c1:
         6a:1f:00:aa:15:c7:d6:75:e2:10:10:3e:b0:72:6b:9d:a8:08:
         99:fa:aa:15:df:c3:31:d2:6a:be:a9:8f:b8:89:af:73:c6:0c:
         eb:51:02:33:98:9e:e5:1d:dc:f8:bc:d6:0f:36:20:62:f1:d9:
         65:86:df:d1:9e:d0:0d:ee:3e:29:ed:d8:a1:64:ad:66:eb:16:
         f8:70:6a:b5:c5:0a:31:7e:59:de:56:54:6e:1d:53:52:f5:59:
         0a:4c:e8:4c:25:3d:5a:d6:69:01:fa:ca:aa:5a:34:39:6b:30:
         42:04:bc:c0:58:1e:1c:7e:11:7a:2a:57:c3:8e:d7:83:a7:42:
         10:ec:af:48:cf:42:00:fb:f7:4a:4e:ba:3f:db:36:74:a5:87:
         b2:1e:69:cc:05:79:3e:67:5e:ae:8c:81:31:85:9a:bf:28:d5:
         f5:53:23:9a:f1:ce:96:0e:4e:ed:31:7f:8a:88:61:e6:c8:e1:
         69:67:c0:32:d6:f3:42:4f:53:b8:4b:51:fa:86:08:e5:f2:57:
         af:9d:17:39:77:a5:d1:7b:f2:f0:db:53:85:06:7e:29:f6:59:
         e4:94:36:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:14:30 2026 by rpki-client