Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ded9227e-15fe-356c-88b9-2572ef63dc31.roa
File:                     ded9227e-15fe-356c-88b9-2572ef63dc31.roa (raw, json)
Hash identifier:          GJMKqhMZBh89rbcqulMUgzEeF3dx/Ls76ESFTzttSnQ=
Subject key identifier:   F7:CC:9F:28:11:43:98:DC:84:4C:51:1C:13:76:59:80:87:E0:26:E0
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EA798D854EC04DDA69E0B2740
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ded9227e-15fe-356c-88b9-2572ef63dc31.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     3360
IP address blocks:        192.57.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:d8:54:ec:04:dd:a6:9e:0b:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=99bb6336-a982-4fa1-9384-6fcb5c4b49e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9d:d3:a5:08:b9:d5:51:bb:86:b3:c0:c7:e0:
                    d9:9a:3e:c5:1a:86:ae:c1:3c:dc:2e:f1:d7:8a:72:
                    2e:7e:1f:a0:83:d6:4d:23:aa:b4:f4:20:26:0d:70:
                    76:47:35:de:0c:bd:62:ad:a3:79:2b:35:b0:f0:40:
                    5d:35:45:89:6f:0d:df:c2:13:0c:7b:bb:b0:5f:89:
                    87:91:e5:31:41:01:89:5d:0f:73:25:1c:34:a0:9a:
                    ae:62:7e:0c:cb:bb:69:3e:4a:2b:b6:36:95:81:a3:
                    f6:c9:e0:15:f9:28:2c:5a:40:57:46:78:9d:c7:73:
                    e9:f1:d7:44:25:df:2f:3f:2a:f1:4a:e8:72:08:8a:
                    66:95:28:99:4f:a7:fe:ae:51:fa:92:b6:c9:22:e8:
                    b5:3e:d0:de:a5:86:86:6e:42:48:4f:80:9c:55:15:
                    7c:14:07:e7:ce:ea:73:1f:27:59:97:41:78:5a:64:
                    fa:9a:f2:41:18:a4:20:74:0c:bd:80:c5:ae:22:3a:
                    6c:28:d0:4a:db:02:05:5e:8e:60:32:3f:38:0a:92:
                    c8:3a:a3:e4:7e:d8:ae:56:21:a7:a9:df:4a:ef:d3:
                    30:11:af:07:9e:29:8d:3f:37:d7:c2:4f:cd:bf:67:
                    de:8b:1b:2e:39:34:7e:90:a3:91:2c:b7:68:34:c8:
                    6c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CC:9F:28:11:43:98:DC:84:4C:51:1C:13:76:59:80:87:E0:26:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ded9227e-15fe-356c-88b9-2572ef63dc31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:8c:0b:1f:6c:64:5d:e9:f1:74:9b:19:89:0b:e1:16:dd:e9:
         56:bc:00:b6:42:62:47:af:84:38:48:27:62:92:8a:f8:07:3b:
         27:56:7f:63:01:dc:6f:48:b8:99:21:44:e9:7c:51:14:b3:5c:
         27:04:a2:c6:44:e9:c4:1c:53:3d:5a:15:69:e4:2d:76:dd:84:
         57:28:43:9e:e0:a8:b7:28:4c:21:75:8c:75:0e:d5:8a:8c:92:
         54:11:7e:68:c1:cb:5a:08:c1:61:3e:fd:54:bf:dd:01:89:90:
         a2:d3:a2:0c:b8:56:cc:7a:2d:e9:12:c6:8a:70:ce:3e:1f:b4:
         30:61:17:af:87:69:54:2c:fe:b7:a5:52:db:9e:49:c3:39:d4:
         6d:9f:bf:05:73:be:59:39:d3:85:e2:69:54:fc:34:65:22:44:
         18:cc:70:5c:a5:b2:36:d5:60:5a:27:4e:ca:10:98:0e:e0:03:
         fe:ca:69:67:0a:e5:ef:ec:13:89:0f:b6:19:e6:9c:c2:49:20:
         3d:f1:7b:37:a5:32:12:cc:4d:95:cb:08:12:f0:6b:a1:63:23:
         b1:fa:56:67:de:9f:60:b2:35:20:df:9f:3e:cb:eb:9f:3c:e1:
         41:59:a6:65:63:c9:ac:b9:56:7c:26:35:bd:07:73:44:98:8a:
         d0:95:95:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:17:42 2026 by rpki-client