Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b071bda5-0f4c-3008-9326-976b5c41a2ab.roa
File:                     b071bda5-0f4c-3008-9326-976b5c41a2ab.roa (raw, json)
Hash identifier:          ytUwP6tozu9dO8sd5viZQj/C8N0VfwXH1QzphMdJk3I=
Subject key identifier:   C0:CA:1C:DB:FA:FC:C9:BC:CC:84:A5:DA:29:69:F9:30:C7:5D:30:DB
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584CDB0210AE961DEDBCBE041900
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b071bda5-0f4c-3008-9326-976b5c41a2ab.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     203
IP address blocks:        192.85.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:10:ae:96:1d:ed:bc:be:04:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=fb7cd2f0-4b5a-46b0-bf11-6aeae1b10864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:19:22:83:dc:8d:a0:82:cf:1b:d5:84:3f:0d:
                    56:f4:97:11:42:ee:de:1f:4c:70:1c:99:01:bb:ad:
                    fc:35:04:23:90:c2:22:b4:01:e2:33:03:34:86:a1:
                    09:5f:ad:35:31:c4:ce:86:2e:68:3e:0b:3c:72:58:
                    2a:2c:c2:05:2b:91:ae:11:09:d8:e7:17:c5:fe:4a:
                    7a:12:ba:7a:7b:53:26:c7:79:ac:20:73:5c:f7:72:
                    36:ce:06:37:df:57:f3:51:21:48:a4:8a:f9:cb:9b:
                    5d:14:d3:e2:0e:7c:15:9f:c7:a7:d4:88:70:31:0b:
                    f4:45:67:6f:dc:84:dc:ed:13:e8:a7:c1:b8:fd:e4:
                    cb:56:f6:80:6f:bc:f4:ac:b1:f8:e8:07:a2:bb:d6:
                    32:0a:ce:3f:0a:6c:35:d3:0e:64:b7:ed:8b:fa:85:
                    ca:ac:2a:0c:fd:23:8b:01:89:bb:f8:6e:24:e4:b8:
                    af:4e:ac:66:f8:3f:b2:0a:2f:9a:24:c8:61:ac:6f:
                    e5:41:8f:d8:4e:d8:52:2a:e0:b4:35:6f:08:59:dd:
                    8e:5d:56:cd:89:28:b1:6a:af:6d:32:7b:07:c6:cd:
                    72:4b:6f:01:80:13:40:4a:db:a6:56:43:e9:d3:f6:
                    f2:cc:5b:fa:ac:cb:c1:ae:0a:40:b7:fb:67:56:dd:
                    70:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CA:1C:DB:FA:FC:C9:BC:CC:84:A5:DA:29:69:F9:30:C7:5D:30:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b071bda5-0f4c-3008-9326-976b5c41a2ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:08:a6:a1:43:f1:f6:24:f0:b0:c6:5c:08:73:0a:3c:ae:31:
         92:3c:06:8a:9e:f8:39:1f:93:e2:d3:dd:3b:91:1b:db:8b:6f:
         1d:31:11:e9:ee:43:6f:0f:16:ad:90:49:93:59:07:13:d3:b8:
         27:b1:88:bc:3b:07:63:67:0f:4f:b0:15:76:ac:fb:b3:8e:e2:
         3c:c3:3c:80:f0:03:ae:3c:b2:39:60:6c:3b:59:2c:d4:c8:d9:
         b6:67:94:16:fa:8b:ef:ec:ff:5c:05:24:89:a4:6b:b6:62:fa:
         f4:fd:80:c7:37:41:eb:15:bd:72:54:73:63:29:c7:68:93:c5:
         da:b0:38:9a:d8:6f:fa:06:50:7f:d4:35:7c:c6:bd:e1:ce:34:
         e5:6b:34:29:de:56:1f:4a:70:cf:99:1f:d1:0a:40:a6:51:8c:
         40:c0:ff:1a:0a:da:5a:4a:c1:cf:81:d9:89:81:89:2c:ad:7b:
         51:0b:c5:cc:2e:98:f0:71:f7:65:70:d6:d3:d3:c8:89:30:7e:
         7e:21:6b:6c:9f:1b:8e:8a:0b:48:15:aa:61:3d:96:ad:a2:f9:
         29:19:71:89:73:6d:35:78:45:ed:13:be:28:20:e5:f1:c5:1f:
         9e:b0:ae:f6:25:14:14:ca:ef:d1:f0:e4:8f:57:a3:78:5a:75:
         66:63:73:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:49:56 2026 by rpki-client