Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6732bb33-89b4-3063-b515-c3f9e2515ca0.roa
File:                     6732bb33-89b4-3063-b515-c3f9e2515ca0.roa (raw, json)
Hash identifier:          DMsOPu0I/Y0dhYQ/zK01G+juWtLplV/Vc4dChPMHK+8=
Subject key identifier:   54:65:CB:2D:A8:39:04:6A:53:60:2F:4F:F5:56:BA:8D:A9:F5:E3:00
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D746FDB71755ECBFE3DB0C600
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6732bb33-89b4-3063-b515-c3f9e2515ca0.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     3356
IP address blocks:        192.208.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:db:71:75:5e:cb:fe:3d:b0:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=6f128e1b-368a-42d6-9694-f89b9810b950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:37:b5:05:58:89:5e:c1:5d:54:aa:dd:2d:18:
                    22:b5:09:8e:b6:05:25:09:5d:c7:ca:c8:37:ae:e9:
                    52:2d:c2:7d:07:ca:d6:60:ba:5f:ba:6c:25:a0:c1:
                    e4:37:e7:4f:74:7d:49:71:34:14:83:ba:d4:04:06:
                    e8:0d:c2:ec:9e:26:0b:32:74:b8:9a:32:31:14:d8:
                    99:af:23:2a:46:56:5a:df:62:5a:57:90:e2:62:39:
                    e4:86:f8:ab:4f:68:60:22:0f:82:72:fd:a2:22:99:
                    57:52:8a:cd:ec:7a:f7:ec:c3:9d:be:52:3f:71:24:
                    4e:87:98:6b:68:b3:a5:bc:56:6f:d7:48:13:c9:33:
                    ac:08:f0:6d:96:57:be:1c:74:bf:45:67:46:dd:23:
                    0f:49:b2:a7:ba:a7:3e:2a:1f:b9:57:93:40:fc:c6:
                    ef:bf:e6:0d:65:8c:d8:3c:d4:e4:32:ef:71:d0:bd:
                    b3:60:0a:b2:cf:40:98:fe:00:f6:8a:d0:87:1a:de:
                    41:f0:50:62:96:af:52:3a:8a:b0:1d:e7:04:e4:1c:
                    61:df:e7:1d:bd:71:59:d8:84:4e:ad:e0:61:34:97:
                    e2:e8:00:d4:63:62:1e:0f:72:b9:ff:7a:0c:3b:54:
                    0b:09:ba:c0:8b:82:10:46:7b:8b:06:41:17:cb:55:
                    c6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:65:CB:2D:A8:39:04:6A:53:60:2F:4F:F5:56:BA:8D:A9:F5:E3:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6732bb33-89b4-3063-b515-c3f9e2515ca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:dc:86:51:43:50:3f:e6:ec:47:d3:26:7d:aa:2a:c6:46:13:
         9a:b9:ad:a4:2b:d9:0a:40:b2:0a:15:be:fe:84:ec:f5:8e:2f:
         8c:b6:3e:2e:4d:10:75:02:3e:77:be:60:ef:e4:da:3b:9a:3f:
         c4:84:7a:32:9f:ce:0b:90:5a:c7:cf:d6:0f:48:03:4e:38:c4:
         90:48:20:0e:a0:8f:22:fb:1c:d9:23:4e:a6:23:81:06:14:76:
         4c:43:38:2f:28:ac:1f:3d:68:22:00:f6:08:77:79:31:d4:ac:
         4b:82:8b:08:45:ae:a8:ab:a0:c5:eb:1c:3f:6f:1e:ce:e3:0f:
         e3:0f:4e:f6:45:7f:f3:3f:8f:b7:55:d9:af:d5:b2:a6:80:41:
         7e:44:f8:26:38:28:44:65:a6:0f:a8:e6:12:c1:82:94:6b:89:
         66:7b:bc:31:51:9d:40:2a:28:b8:85:0c:da:6e:8c:24:da:35:
         63:d4:ff:4a:c0:cc:aa:b0:2f:02:ce:3b:22:d2:c6:13:7a:76:
         a3:78:72:d3:9b:e5:9b:a2:50:28:b3:da:2e:41:d3:8b:7e:5c:
         cf:8a:ab:5c:c4:50:50:31:70:46:10:40:90:d9:3a:74:9d:17:
         da:99:d2:13:34:50:e5:98:d1:b4:0b:66:06:44:d0:a5:22:ff:
         ab:d3:79:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:36:54 2026 by rpki-client