Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/52e0c708-d581-338b-a618-cc5c3a9caf20.roa
File:                     52e0c708-d581-338b-a618-cc5c3a9caf20.roa (raw, json)
Hash identifier:          TaTVX4nzK8QUdR4bqeVB9os1jGhtQKbwoLZIXVEqVeY=
Subject key identifier:   D5:22:B5:45:B9:EE:D8:41:DB:2C:CC:62:1D:E3:91:45:9D:97:56:64
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D746FDAF3B6178D2942C72340
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/52e0c708-d581-338b-a618-cc5c3a9caf20.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     202
IP address blocks:        192.85.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:da:f3:b6:17:8d:29:42:c7:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=2679e4e0-ffdc-4433-a601-e4b5051a76ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:21:a4:24:f1:4f:22:6b:bf:d2:e4:b2:07:76:
                    49:8a:79:22:af:07:75:24:2d:16:83:da:9a:7d:15:
                    87:0c:00:89:5a:7f:8f:74:36:3a:40:66:17:70:b1:
                    c8:7d:11:5a:76:94:c0:a8:13:d3:2e:49:a4:ee:69:
                    4d:e9:8d:c6:3f:0f:79:c1:7b:bb:7a:04:7e:10:84:
                    21:c1:d4:de:43:1e:8a:08:da:76:92:71:b9:69:84:
                    be:f6:72:88:c6:f3:ff:07:49:33:81:bb:e5:20:db:
                    d2:c4:ad:06:15:94:8d:ee:a5:dc:ad:6c:1c:4e:66:
                    d6:11:26:64:75:dd:be:16:97:f1:f0:6f:cb:3e:ba:
                    80:46:11:de:1f:31:b3:eb:98:27:09:02:0d:c7:1a:
                    5b:0a:38:5e:73:30:ed:42:38:cf:54:af:70:cd:01:
                    4c:91:08:44:51:37:9b:40:9d:c3:c5:d6:40:bd:70:
                    c1:2f:11:a3:d0:5c:81:b5:ee:5a:c1:d1:3a:93:6d:
                    4d:92:28:d8:33:fd:57:b4:63:68:81:0d:55:bc:58:
                    3f:33:78:a6:d6:3e:0a:84:2c:fb:94:f0:ef:ec:81:
                    5c:25:be:02:6e:ab:d4:20:e4:cc:fe:78:4e:45:ba:
                    e5:89:d9:be:80:6d:f7:ac:3f:5a:71:79:ba:96:d4:
                    f9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:22:B5:45:B9:EE:D8:41:DB:2C:CC:62:1D:E3:91:45:9D:97:56:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/52e0c708-d581-338b-a618-cc5c3a9caf20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:1f:3b:f4:bd:ff:27:db:ba:19:91:f8:ee:31:09:4c:20:a6:
         41:bb:31:ed:7d:b1:e3:3b:80:4c:0f:46:ba:85:d3:ca:ba:35:
         78:f0:d3:e3:d5:65:51:4e:98:fa:90:31:40:eb:1b:d2:e6:0f:
         ad:79:02:da:a8:80:51:95:f2:a6:37:fb:ea:08:54:16:90:75:
         f7:d4:a6:9f:74:b7:49:17:36:66:e0:80:10:c8:81:50:97:29:
         40:46:d4:17:33:b4:1b:04:4e:a7:33:dc:88:34:d2:82:7a:9e:
         27:eb:07:bb:f4:ab:7d:32:32:fb:9b:5a:18:f6:f2:5a:a6:0c:
         bb:7d:ff:1d:25:f4:f8:3d:73:b2:69:b8:8f:6a:5f:eb:a3:13:
         80:25:7a:2c:bf:93:ea:30:42:f2:60:1d:87:1a:88:23:d4:0b:
         e2:8b:d9:66:b2:64:7a:60:bc:58:98:01:72:43:5c:71:b3:25:
         f1:f1:94:29:00:a3:3e:65:8d:79:bd:67:dd:d5:a6:a6:d1:ca:
         cd:e3:6f:0c:ce:4a:f9:2f:7f:e8:d8:c7:ce:28:b2:49:30:e9:
         50:d6:98:83:84:76:3c:12:19:09:60:82:c6:99:d9:43:e4:ed:
         ba:4c:27:62:ce:a5:66:90:61:80:cc:6f:78:00:8a:de:96:48:
         4f:05:bf:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:22:29 2026 by rpki-client