Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/82d9ffc6-8251-3778-bfcc-671c7bbffbb7.roa
File:                     82d9ffc6-8251-3778-bfcc-671c7bbffbb7.roa (raw, json)
Hash identifier:          +ZhuzCKHCrLbm0e+OoYIvi47QkzcrJqffcAS1CiiLZ0=
Subject key identifier:   3F:24:EA:D7:AB:37:6F:FE:8F:C4:80:B3:26:D4:CF:CA:E8:61:1F:5A
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584F9A687EE45F608BF847A73200
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/82d9ffc6-8251-3778-bfcc-671c7bbffbb7.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     3356
IP address blocks:        192.85.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:7e:e4:5f:60:8b:f8:47:a7:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=5cf5bb24-c08a-41aa-b572-5ad1551e2520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3f:a4:97:7a:4a:bd:7c:53:91:69:1b:d7:62:
                    3d:fc:31:2d:0e:4e:96:0a:f0:26:e1:1e:13:dc:65:
                    e6:47:6d:de:2b:95:76:de:50:65:c5:fc:e8:58:f0:
                    3b:0d:7a:86:b8:95:39:6f:d0:73:6c:eb:5d:16:2c:
                    25:97:26:89:cf:7e:ff:2e:70:e2:59:ac:3d:ac:2d:
                    0f:00:b7:ea:d2:01:b5:ee:c0:d3:2a:65:fd:53:88:
                    05:db:b5:29:0c:c1:b0:4a:0a:97:21:57:4c:92:c1:
                    62:9a:fa:be:eb:d3:3e:da:be:bf:4e:54:53:0b:c4:
                    e5:de:d3:41:c6:e5:0f:13:b0:8a:aa:7e:6a:d8:d3:
                    b7:f7:7f:c0:ef:89:b0:d0:10:b3:5f:59:a0:c5:2e:
                    62:c6:75:f9:5d:c4:6b:e0:c7:72:ee:30:99:c7:03:
                    32:a9:ee:78:1e:14:b6:f4:ac:1a:e4:63:f8:90:62:
                    2a:aa:d3:95:31:5d:aa:47:5d:43:52:92:32:75:46:
                    66:4e:8a:bd:99:b1:6f:0c:16:a9:48:49:8a:38:41:
                    ff:bf:fa:0a:5f:13:02:22:73:24:a7:81:16:7c:07:
                    29:f2:2e:ea:bd:86:46:59:6d:45:8d:9c:a2:0d:ed:
                    56:f5:90:11:40:76:06:2a:20:4c:63:01:25:62:ad:
                    b0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:24:EA:D7:AB:37:6F:FE:8F:C4:80:B3:26:D4:CF:CA:E8:61:1F:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/82d9ffc6-8251-3778-bfcc-671c7bbffbb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:37:f7:83:12:4d:af:59:ef:90:d9:7e:ef:29:de:17:87:bc:
         75:61:3b:a3:f1:d6:b9:65:8d:ac:06:3f:7e:d3:4c:58:0f:50:
         c1:30:b9:d2:6a:e0:a4:4b:4e:d8:4a:dd:c8:04:e8:a8:95:06:
         89:f4:6d:a9:ba:67:e7:53:af:c6:5a:7c:32:b2:29:ae:89:cc:
         36:46:ce:82:0c:af:3c:ea:01:70:7e:fb:ba:77:f1:0d:d6:e1:
         cd:8e:05:ec:7b:46:92:8e:33:5a:56:7c:fd:34:03:48:be:ec:
         f9:24:b5:13:01:a2:8b:d3:57:17:7c:c5:37:34:1d:df:8e:dd:
         c2:d7:82:3a:b2:6a:cd:b6:d0:91:c1:0c:ef:10:95:8e:50:a5:
         a7:1a:38:f3:9a:90:57:0e:bd:15:9a:91:24:d0:be:5a:5e:c4:
         25:af:fb:0e:e2:46:3d:e5:ed:43:b7:00:a5:29:46:ed:3d:e4:
         6a:67:f7:21:c8:b1:07:3f:ca:93:87:5b:b2:99:45:0c:c4:2b:
         a7:df:26:17:fe:35:b9:0e:4b:73:f9:e9:ad:69:91:be:af:24:
         c8:9a:f7:56:b1:93:fd:29:01:c0:b2:8e:95:d4:dc:58:68:23:
         0c:de:95:43:5e:6a:f5:5c:da:d0:74:08:9e:59:e1:03:52:6e:
         86:a7:50:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:22:13 2026 by rpki-client