Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a80aaa9e-0703-342f-b8c4-55c127b26fac.roa
File:                     a80aaa9e-0703-342f-b8c4-55c127b26fac.roa (raw, json)
Hash identifier:          GJXP7PtVlsWDM5l0xVykKZgYNfXI4SOR+uT7Al1UPSs=
Subject key identifier:   09:63:8B:8C:FD:C7:5B:13:DE:78:CC:07:CF:53:7B:14:C5:1C:97:21
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EA798D986A7D72BF39DA2C760
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a80aaa9e-0703-342f-b8c4-55c127b26fac.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     3356
IP address blocks:        192.57.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:d9:86:a7:d7:2b:f3:9d:a2:c7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ddf3d75a-ae46-4ee4-a518-6d07824fc4c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d2:3d:d6:e7:ee:e8:c2:de:78:ca:11:49:56:
                    bd:fe:c7:ce:e3:33:b3:4b:20:61:8e:2a:76:7c:9c:
                    39:14:a8:15:f7:4d:9f:14:da:d6:9d:90:5d:ef:32:
                    e5:29:a8:8b:6a:18:4a:83:9c:3b:f1:3e:fb:f4:6a:
                    76:f1:da:43:f1:72:de:e6:b3:dc:e9:d8:51:55:cf:
                    d4:ec:c4:29:61:c4:8a:30:60:f3:80:8e:ff:a6:16:
                    c1:4b:ea:e3:51:b1:ad:0e:c0:1f:57:c0:c4:0b:98:
                    6a:1e:c9:b2:21:ae:e4:32:38:db:fe:8a:54:1c:16:
                    49:64:10:3e:d7:3a:8f:17:a7:d2:87:23:8c:93:12:
                    45:df:f8:4c:61:7a:16:91:79:ae:a8:75:05:66:e6:
                    98:22:81:d0:9e:a2:76:43:f4:67:34:5f:70:bf:b0:
                    a7:2f:eb:95:fc:54:89:e6:4d:86:36:c1:cb:72:43:
                    05:d8:90:c8:bb:56:1e:40:35:2c:06:28:40:a1:cd:
                    61:ed:68:22:c4:12:3e:71:72:e6:f2:13:ab:08:aa:
                    de:73:9e:2f:60:49:4a:ab:64:1a:59:0c:19:07:1c:
                    c5:dd:2a:61:43:ff:20:3d:7d:98:37:a3:e2:16:ec:
                    39:5b:07:0c:7b:42:45:40:d6:43:dd:39:c2:57:b3:
                    5a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:63:8B:8C:FD:C7:5B:13:DE:78:CC:07:CF:53:7B:14:C5:1C:97:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a80aaa9e-0703-342f-b8c4-55c127b26fac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:05:88:94:b8:0f:bd:88:75:9e:de:cd:89:3a:44:ee:3d:47:
         b1:55:ee:da:ff:88:85:c7:12:02:0c:70:3b:85:22:ed:d6:84:
         c8:bf:8a:7b:7d:9c:c9:ca:07:93:11:f5:92:7a:91:a3:4a:c9:
         47:34:8a:b2:35:9f:4e:cc:49:1d:1f:36:65:1e:54:8e:06:2e:
         42:52:01:87:fc:6f:e1:14:0d:48:cd:be:74:32:d4:8a:78:fe:
         f6:70:19:26:81:06:25:33:25:9d:fb:a1:1c:b6:0a:9e:32:b1:
         ee:60:a6:af:d4:38:cf:95:66:b0:29:16:29:0f:3b:f2:65:b8:
         09:32:d1:de:f3:b9:e1:b4:d8:d6:91:b0:78:ce:94:a0:2c:58:
         32:b6:08:c0:f7:5a:95:79:dc:39:16:4a:7a:5c:33:47:97:f2:
         ca:68:45:02:f1:7e:8f:cd:88:f5:fd:d6:f6:4d:0f:8e:db:9e:
         49:ae:5b:7b:b4:9d:e7:49:36:c4:12:e4:bb:ad:17:27:02:02:
         5d:25:c6:3c:01:62:85:ac:eb:4d:ce:0c:45:22:05:30:bf:5c:
         1c:e5:c1:e6:79:4c:54:bf:4e:6e:69:fc:e8:6f:d3:af:56:c8:
         ec:87:b5:53:2c:25:fc:d9:cd:9d:57:60:af:0b:16:b9:f8:9d:
         b7:68:b4:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmNmGp9cr852ix2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZGRmM2Q3NWEtYWU0Ni00ZWU0LWE1MTgtNmQwNzgyNGZjNGM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidI91ufu6MLeeMoRSVa9/sfO4zOzSyBhjip2
fJw5FKgV902fFNrWnZBd7zLlKaiLahhKg5w78T779Gp28dpD8XLe5rPc6dhRVc/U
7MQpYcSKMGDzgI7/phbBS+rjUbGtDsAfV8DEC5hqHsmyIa7kMjjb/opUHBZJZBA+
1zqPF6fShyOMkxJF3/hMYXoWkXmuqHUFZuaYIoHQnqJ2Q/RnNF9wv7CnL+uV/FSJ
5k2GNsHLckMF2JDIu1YeQDUsBihAoc1h7WgixBI+cXLm8hOrCKrec54vYElKq2Qa
WQwZBxzF3SphQ/8gPX2YN6PiFuw5WwcMe0JFQNZD3TnCV7NanwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAlji4z9x1sT3njMB89TexTFHJchMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTgwYWFhOWUtMDcwMy0z
NDJmLWI4YzQtNTVjMTI3YjI2ZmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDlxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADgFiJS4D72IdZ7ezYk6RO49R7FV7tr/iIXHEgIMcDuFIu3WhMi/int9
nMnKB5MR9ZJ6kaNKyUc0irI1n07MSR0fNmUeVI4GLkJSAYf8b+EUDUjNvnQy1Ip4
/vZwGSaBBiUzJZ37oRy2Cp4yse5gpq/UOM+VZrApFikPO/JluAky0d7zueG02NaR
sHjOlKAsWDK2CMD3WpV53DkWSnpcM0eX8spoRQLxfo/NiPX91vZND47bnkmuW3u0
nedJNsQS5LutFycCAl0lxjwBYoWs603ODEUiBTC/XBzlweZ5TFS/Tm5p/Ohv069W
yOyHtVMsJfzZzZ1XYK8LFrn4nbdotGg=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:29:36 2026 by rpki-client