Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/96f0b703-b184-340f-a3b2-10c5e839cc99.roa
File:                     96f0b703-b184-340f-a3b2-10c5e839cc99.roa (raw, json)
Hash identifier:          NwkYKdNdlyJM4ycj7RqGoxFJ4BOc86PC1YW1AIeMiZA=
Subject key identifier:   BB:B1:FA:CF:8B:1E:A6:95:26:19:CB:AA:F8:EB:88:74:A4:78:9B:A6
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EA79365F4EDF98381FCC28980
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/96f0b703-b184-340f-a3b2-10c5e839cc99.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     3360
IP address blocks:        204.104.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:65:f4:ed:f9:83:81:fc:c2:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c7f3eee1-828a-4097-870a-1876e6478f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7f:eb:32:2b:26:8f:f5:eb:56:90:c7:a9:8b:
                    c5:38:72:2c:f1:f0:ad:38:7f:68:88:5b:89:62:e1:
                    ec:8b:7e:ab:6f:f9:22:c7:ae:2c:3f:73:41:60:0d:
                    6e:b4:ab:ba:7d:82:48:82:f9:4b:0e:69:d5:90:bf:
                    34:6e:7c:d8:10:1a:12:3f:65:3b:06:b8:77:04:15:
                    f4:92:5d:bb:52:ef:ec:f3:14:fd:0b:06:61:67:fe:
                    1e:f7:fd:41:9d:1c:36:40:6f:51:dd:f1:e2:ca:23:
                    0b:ee:88:bb:2e:f7:f5:da:e5:88:cf:f8:c4:65:58:
                    33:8f:74:c5:68:02:f1:1c:90:d3:9e:6a:0e:6e:31:
                    12:3d:42:bd:e9:de:59:1f:26:84:8c:14:4c:03:8f:
                    97:7d:ec:69:ec:ab:e2:7f:0a:74:79:26:d4:53:cf:
                    8a:4d:c5:94:ed:42:ec:be:4e:1b:41:e3:4c:bc:86:
                    c3:f0:46:26:2b:17:cc:a6:82:48:31:b1:89:d2:53:
                    12:04:cb:0f:3b:81:b6:84:5c:1c:ab:64:f9:a3:c9:
                    25:ae:fc:44:24:51:ea:30:37:6a:11:9e:fe:31:48:
                    b5:86:48:d3:23:61:7b:dd:f3:38:47:06:d2:ad:ef:
                    88:5c:b2:ed:af:e8:73:1f:01:44:0e:c9:29:4a:c4:
                    3f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B1:FA:CF:8B:1E:A6:95:26:19:CB:AA:F8:EB:88:74:A4:78:9B:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/96f0b703-b184-340f-a3b2-10c5e839cc99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:40:a1:7f:0f:d4:fd:9e:7f:58:5d:02:89:29:66:43:6b:3a:
         25:b0:8f:3c:7e:06:66:c6:fc:d1:14:ee:8a:97:b3:0b:a7:3b:
         36:45:ff:9b:75:bc:99:9d:ab:71:fe:ab:fd:5f:6f:6e:ef:3a:
         8c:be:2b:e1:8b:d7:08:62:7f:0d:0d:86:50:4c:b9:e0:8a:5f:
         c5:d0:8f:fe:81:ec:79:11:f6:d5:27:37:17:dd:b7:ac:03:bc:
         71:49:2b:9e:f6:6e:7f:5f:df:4f:15:28:ba:b8:db:78:cd:89:
         cf:1b:d5:5b:34:ef:9f:6d:9e:9e:ec:b2:e7:2f:30:8e:60:0c:
         ac:b7:1b:5b:99:90:5f:a4:cd:04:6d:1a:37:83:f5:03:ee:74:
         7b:3c:46:0c:7d:6e:54:dd:ed:f5:4a:a9:53:5b:0a:5f:19:cb:
         ff:19:1c:37:24:b2:81:be:0b:1d:a3:ad:55:49:ac:98:7a:95:
         f4:53:4f:08:cc:b6:01:4c:a6:c7:88:7c:9f:22:fd:5b:7b:40:
         27:1f:f5:a1:5d:70:e7:14:88:34:7a:4d:71:63:78:20:dd:03:
         7f:ad:69:56:2e:29:62:61:a8:65:21:05:38:6c:f0:f6:38:b5:
         ff:99:c4:51:22:98:63:4c:8e:7b:bd:6e:2c:f0:ba:dd:4a:5f:
         90:8b:c2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:56:10 2026 by rpki-client