Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a70c49a1-801c-322d-8053-52745b4af6cf.roa
File:                     a70c49a1-801c-322d-8053-52745b4af6cf.roa (raw, json)
Hash identifier:          j2AP092v/T7SMxXG7+S76cCPqJkLwWR9ZkkHc5iZBV4=
Subject key identifier:   F3:3C:AE:0A:8A:6F:F9:9F:0D:7B:D2:0D:A5:66:07:51:FE:75:FD:EE
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EA793699958DDD4867590E600
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a70c49a1-801c-322d-8053-52745b4af6cf.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     3360
IP address blocks:        204.105.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:69:99:58:dd:d4:86:75:90:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=599aa1a1-89b6-40e5-afce-4d3cd5c7b253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6e:24:7f:09:f0:3c:f0:2f:de:89:ea:81:63:
                    af:ea:ef:24:c0:dd:eb:cd:df:19:11:7c:bb:d8:08:
                    cd:3f:a5:a7:41:93:d7:d1:48:e7:eb:ba:3f:10:d0:
                    d5:90:49:a9:06:1c:fb:1c:bd:ea:0e:3d:51:bf:59:
                    40:53:b5:99:dc:27:df:61:7f:10:ca:6f:7e:b8:d4:
                    d8:17:e3:0b:e5:69:51:39:0a:ed:41:b1:4c:03:08:
                    b6:ff:8e:2d:c7:97:1f:30:2a:39:a2:fd:15:8b:fd:
                    52:f0:69:2b:02:3e:c2:ff:60:ab:4b:4f:e0:90:6b:
                    be:48:86:dc:66:5e:fb:d8:d8:4b:22:55:42:0e:b2:
                    3f:1f:a4:10:69:75:44:1d:79:f0:28:09:3f:04:1d:
                    7c:bd:00:3b:c0:d4:43:c1:bf:a6:8b:de:77:e8:1b:
                    95:f6:61:d4:0e:ea:f1:6d:c3:03:b6:44:00:bf:64:
                    2d:44:1b:95:bb:f6:d7:b4:5e:61:81:d4:57:bc:07:
                    90:93:cb:25:6b:fa:7e:84:4e:f4:7a:0e:32:50:3f:
                    3c:64:47:32:01:91:fb:3b:6c:28:60:65:05:95:6c:
                    22:89:11:21:92:75:9a:a9:a1:a4:a3:d1:e4:e6:36:
                    19:a9:60:48:a4:58:a6:5f:50:59:39:0f:e6:c7:6d:
                    6e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3C:AE:0A:8A:6F:F9:9F:0D:7B:D2:0D:A5:66:07:51:FE:75:FD:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a70c49a1-801c-322d-8053-52745b4af6cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.105.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:1a:d1:0a:d2:c2:e7:8e:82:b2:75:50:33:42:f6:0c:4a:d3:
         1f:cd:ca:63:ee:47:18:a5:f6:50:cc:d8:a8:a9:e7:7b:8b:38:
         e6:8f:a5:d7:f6:b4:77:96:9f:84:92:94:d0:be:03:bc:05:73:
         43:75:40:c8:30:69:78:01:c4:b8:c0:c8:ba:d2:79:9c:b8:ab:
         27:5c:a8:3c:1e:24:c9:58:74:6c:35:b2:fb:c5:af:b3:83:f9:
         cf:5f:5f:b2:ed:ab:6f:96:c9:0a:75:bd:0f:65:ac:e5:ed:03:
         fa:42:32:75:58:e6:3e:59:29:77:5f:25:7b:4c:b5:f4:db:0f:
         2f:d2:6f:8f:8c:5c:fe:74:8d:56:a4:d9:a4:65:3d:a5:db:2f:
         eb:5d:be:b9:bb:64:c4:f9:46:ca:cd:7d:cf:28:09:d2:c4:86:
         72:90:10:8b:91:56:b7:24:2f:68:fe:3e:8e:5c:01:4c:a5:cd:
         4e:e0:c4:25:73:0e:bc:b7:ce:ad:a7:ab:60:82:eb:63:75:03:
         7b:58:a7:07:08:26:ca:80:72:5b:4d:60:05:3f:9c:4d:93:7d:
         eb:7c:99:e6:83:5c:40:3a:cf:1c:5c:e3:d3:74:90:b9:03:fb:
         6a:f5:2b:20:4a:51:94:69:46:2c:03:51:d6:82:23:50:43:e5:
         fb:47:ca:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:54:02 2026 by rpki-client