Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d34f8161-5d0c-3370-9431-24eda18aaa4f.roa
File:                     d34f8161-5d0c-3370-9431-24eda18aaa4f.roa (raw, json)
Hash identifier:          9WuD7VN5xseTYKkCDT+rYS48DdaambtQyNhIFvUWfdI=
Subject key identifier:   8E:23:B2:4A:86:21:4D:81:51:86:C8:F7:80:72:08:81:37:B2:28:59
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EA793608F1F48D4380A806180
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d34f8161-5d0c-3370-9431-24eda18aaa4f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     3356
IP address blocks:        204.104.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:60:8f:1f:48:d4:38:0a:80:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c2f68862-2ba4-4875-bc2e-87d4e86e3c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6d:9a:c6:8b:42:83:97:75:71:fc:0d:a4:3c:
                    ea:2c:b2:28:ff:e4:87:a1:0f:57:ac:af:6f:57:11:
                    2e:35:a9:fd:06:95:15:8a:22:1c:9f:a0:d2:b2:ab:
                    80:40:b3:46:79:27:d3:96:e5:96:ad:5b:b7:94:ea:
                    30:9a:46:b2:98:eb:e6:f7:d3:0c:39:3b:51:4d:26:
                    4e:88:e2:11:29:60:f3:6f:fa:b1:62:87:05:62:52:
                    e7:3e:7d:48:72:d2:37:8c:8b:71:b5:18:f2:07:85:
                    27:70:24:02:1a:c7:65:f3:da:97:e5:f1:b4:32:09:
                    94:a2:81:c6:a5:8b:12:c0:99:27:ec:df:cb:33:d0:
                    b8:38:71:b7:b4:c5:fc:fb:bf:fa:38:6c:75:62:25:
                    28:02:ab:88:9e:46:1f:04:e1:21:1d:f7:85:e2:04:
                    6c:00:2d:8a:40:de:b6:f2:2e:6e:5f:f4:31:70:ba:
                    10:0c:2d:a1:81:c5:d5:33:bc:c2:cb:16:04:70:55:
                    36:26:dc:ca:ca:94:98:1e:ce:48:51:bc:74:08:5a:
                    ed:37:fa:5f:3e:b1:29:4b:c4:20:e6:ca:7c:8c:79:
                    23:8c:f1:21:96:67:31:ef:24:a1:66:7a:6c:e7:c9:
                    ce:8a:f0:35:0f:5d:51:74:7a:6e:97:d7:9c:0d:81:
                    24:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:23:B2:4A:86:21:4D:81:51:86:C8:F7:80:72:08:81:37:B2:28:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d34f8161-5d0c-3370-9431-24eda18aaa4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:37:23:85:89:9e:66:0f:85:f7:b9:27:79:66:8a:96:6d:b7:
         35:06:e6:4c:2d:29:80:b3:e3:95:9a:5d:81:7a:fc:3d:e9:b5:
         cf:cc:97:3b:d5:1d:2b:a2:0f:18:82:bd:fe:51:31:be:53:b9:
         29:95:16:16:44:1c:94:6b:b9:77:60:82:3e:25:6e:f5:6d:17:
         29:24:d5:ea:c5:91:05:19:23:bb:12:db:7e:37:90:a4:0c:61:
         a5:c6:85:b0:ce:31:c3:11:4d:9b:18:e9:0b:32:9f:9a:e8:b9:
         61:4e:88:2b:20:54:4b:a8:77:7b:49:b8:a4:5f:64:f9:f8:9c:
         2b:33:da:df:f7:51:00:1d:df:74:9d:3f:cf:4d:85:8d:6c:a3:
         a5:36:bb:3e:ea:e0:8c:cb:05:65:ba:e7:81:b4:0c:c7:98:f9:
         66:61:0f:ec:55:cf:c3:13:7a:7d:68:d8:5b:14:68:23:15:16:
         0f:1c:f8:25:47:a2:27:e5:59:d1:27:ee:75:9f:d8:26:9f:eb:
         25:28:3b:66:44:65:04:bf:70:5d:8d:95:5d:b3:9b:84:e1:11:
         f1:66:08:02:5d:80:4c:3b:6b:3c:8f:0e:ff:62:91:40:c7:4c:
         8e:dd:ce:10:9c:fe:d6:68:ab:53:1c:dc:c5:ad:79:df:fd:e2:
         13:4f:a5:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nk2CPH0jUOAqAYYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YzJmNjg4NjItMmJhNC00ODc1LWJjMmUtODdkNGU4NmUzYzY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm2axotCg5d1cfwNpDzqLLIo/+SHoQ9XrK9v
VxEuNan9BpUViiIcn6DSsquAQLNGeSfTluWWrVu3lOowmkaymOvm99MMOTtRTSZO
iOIRKWDzb/qxYocFYlLnPn1IctI3jItxtRjyB4UncCQCGsdl89qX5fG0MgmUooHG
pYsSwJkn7N/LM9C4OHG3tMX8+7/6OGx1YiUoAquInkYfBOEhHfeF4gRsAC2KQN62
8i5uX/QxcLoQDC2hgcXVM7zCyxYEcFU2JtzKypSYHs5IUbx0CFrtN/pfPrEpS8Qg
5sp8jHkjjPEhlmcx7yShZnps58nOivA1D11RdHpul9ecDYEkUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI4jskqGIU2BUYbI94ByCIE3sihZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDM0ZjgxNjEtNWQwYy0z
MzcwLTk0MzEtMjRlZGExOGFhYTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGgKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAQ3I4WJnmYPhfe5J3lmipZttzUG5kwtKYCz45WaXYF6/D3ptc/MlzvV
HSuiDxiCvf5RMb5TuSmVFhZEHJRruXdggj4lbvVtFykk1erFkQUZI7sS2343kKQM
YaXGhbDOMcMRTZsY6Qsyn5rouWFOiCsgVEuod3tJuKRfZPn4nCsz2t/3UQAd33Sd
P89NhY1so6U2uz7q4IzLBWW654G0DMeY+WZhD+xVz8MTen1o2FsUaCMVFg8c+CVH
oiflWdEn7nWf2Caf6yUoO2ZEZQS/cF2NlV2zm4ThEfFmCAJdgEw7azyPDv9ikUDH
TI7dzhCc/tZoq1Mc3MWted/94hNPpd0=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:50:49 2026 by rpki-client