Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/79130a2c-4311-3f1a-bbda-69eaafc3e66d.roa
File:                     79130a2c-4311-3f1a-bbda-69eaafc3e66d.roa (raw, json)
Hash identifier:          Z4lkpslZnkglMOfr6sJTw8VlWCB4Wcp0Ml/vd3K+W2w=
Subject key identifier:   20:DB:AC:9B:7E:AA:9A:42:9E:02:46:D8:48:ED:6C:B6:5A:BE:93:24
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EA79359BBE43F7580991B5A80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/79130a2c-4311-3f1a-bbda-69eaafc3e66d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     3356
IP address blocks:        192.85.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:59:bb:e4:3f:75:80:99:1b:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ce5abca7-d265-445a-ad7c-12a906c6077a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fe:d6:6b:0b:49:00:04:75:79:0e:95:01:be:
                    ce:20:45:8e:3d:ed:3f:5b:f8:20:14:68:d0:18:c2:
                    c7:0f:d1:fc:a0:01:93:b1:f8:b5:37:bd:da:5c:9f:
                    89:02:ba:52:1d:b9:74:93:5e:d5:63:ed:63:dd:77:
                    83:de:ec:de:67:46:4d:c4:6b:ec:df:7f:7b:00:bb:
                    81:ea:b4:db:43:5f:2f:82:12:20:8f:4c:76:8d:13:
                    12:c6:1d:b6:ea:80:38:5f:7b:c9:60:b6:75:8d:26:
                    b4:d8:64:cf:b9:8a:b0:a3:e9:39:05:eb:df:09:ac:
                    05:67:bc:da:52:54:81:7c:c4:04:17:b8:b4:ac:ac:
                    07:ce:01:26:fb:8d:37:75:80:33:96:cb:21:91:a0:
                    50:b5:e4:2b:ae:ed:08:a3:22:25:2f:58:d2:4a:83:
                    a4:f8:92:cf:fb:ab:de:9d:c9:da:12:62:3d:32:56:
                    f0:1f:1a:c4:62:20:37:aa:71:97:79:50:e4:10:19:
                    be:8e:21:f3:7c:5b:ca:13:b8:45:2a:9f:ae:ee:41:
                    fe:ab:60:f9:86:ae:10:3e:4b:fd:cd:96:3c:a3:b0:
                    73:97:bc:4e:6b:21:47:40:8d:d5:23:aa:c0:d8:fd:
                    3a:ae:20:40:f0:69:f2:a3:bd:8d:e2:e9:e3:12:27:
                    54:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DB:AC:9B:7E:AA:9A:42:9E:02:46:D8:48:ED:6C:B6:5A:BE:93:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/79130a2c-4311-3f1a-bbda-69eaafc3e66d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:9a:68:a2:e0:dd:45:ec:6c:00:7d:6e:25:55:79:64:dd:3e:
         58:6e:5e:84:d2:9a:58:17:24:86:3c:10:15:1c:d0:d5:f2:33:
         4f:06:f5:76:52:2c:5b:06:b9:57:aa:9c:74:04:0a:03:7a:39:
         58:54:ae:c1:0a:72:ef:38:01:3f:f3:b9:3e:a5:41:16:db:11:
         da:58:ea:45:54:72:93:a7:5d:3a:07:81:6c:52:e6:ec:f1:9a:
         dd:db:4e:20:5c:4e:d6:e7:7b:24:24:20:48:46:f2:a1:6d:30:
         dd:a7:a4:63:c7:c2:1b:3c:a3:a1:f3:59:45:af:4e:9d:ed:c5:
         c7:97:0b:e6:76:27:9d:3b:3e:97:63:8a:24:60:cf:71:3d:a1:
         94:7c:8b:c4:1a:1a:ae:20:55:78:61:65:c0:65:67:a6:c8:36:
         0b:eb:b1:43:42:0f:ef:9e:24:bb:20:17:42:a5:4c:cf:da:cb:
         8d:10:31:d5:97:78:1a:20:75:46:84:ea:3d:9e:41:6a:92:5c:
         2c:b6:b5:87:76:e5:aa:cf:6c:ea:4b:3b:07:df:d5:57:2a:7b:
         75:f3:eb:0a:da:3d:0a:06:50:02:c9:44:be:ef:aa:b6:a6:f9:
         37:d5:03:d2:ac:3f:bc:c2:e3:a3:78:1f:42:ca:56:72:bd:81:
         54:94:0e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:22:32 2026 by rpki-client