Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e3616727-ed55-3d45-a2c7-df86966e349e.roa
File:                     e3616727-ed55-3d45-a2c7-df86966e349e.roa (raw, json)
Hash identifier:          STcQReKg0aERXyrloFHizidiUp36KKo87L11aWUqAWE=
Subject key identifier:   31:AC:46:A2:EB:71:7A:F0:8C:6B:A7:EA:33:01:77:68:00:59:E4:5A
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EA7935A0B9DA1B4DDCF264080
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e3616727-ed55-3d45-a2c7-df86966e349e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     3356
IP address blocks:        192.238.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:5a:0b:9d:a1:b4:dd:cf:26:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=05848cd4-f555-4acf-9b02-29fb0d206c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5e:98:47:6d:d6:05:cf:d6:c4:a0:d6:4a:3e:
                    51:e5:e7:f2:95:ce:68:2c:50:a3:07:34:71:bd:2b:
                    93:30:e1:27:11:0f:67:88:58:70:88:34:6f:af:81:
                    16:63:4d:8b:e6:2b:d4:da:fa:7c:c1:8e:30:e2:03:
                    96:8b:ef:72:90:d8:9a:fa:bd:fc:b9:39:c4:60:2f:
                    50:05:fa:aa:c7:c2:d9:9e:77:32:63:ce:40:20:df:
                    08:11:99:e9:02:6e:05:f2:8a:13:e0:05:32:58:ad:
                    2b:49:33:9e:83:87:4f:9e:3c:8f:a6:da:37:38:9e:
                    64:68:ff:05:24:c6:cb:bc:27:25:9c:01:62:2b:b9:
                    fd:35:f8:5d:39:93:36:ce:5f:d3:a4:e4:d5:f0:42:
                    26:36:f6:ad:09:98:10:9c:58:ae:3e:15:7b:0e:3d:
                    98:e2:4c:fe:30:52:54:3f:fa:9d:ab:49:28:c0:82:
                    32:42:e0:0f:ec:7a:a3:72:d3:5b:48:de:e8:e7:0b:
                    7e:09:89:22:7b:7d:4d:82:29:2c:40:91:10:24:fe:
                    65:79:a1:e8:5e:79:38:f2:29:57:e4:ea:7b:47:db:
                    89:9a:95:9f:53:62:6d:7c:4e:ef:68:4a:cf:3f:e4:
                    7c:9e:c9:3e:10:0c:67:b6:73:01:2e:f9:43:89:a2:
                    fd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:AC:46:A2:EB:71:7A:F0:8C:6B:A7:EA:33:01:77:68:00:59:E4:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e3616727-ed55-3d45-a2c7-df86966e349e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.238.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:9e:10:84:19:dd:f7:15:f2:90:6d:0d:2d:fc:98:6d:c0:87:
         e5:2c:36:26:a5:5b:ff:11:e1:3b:2d:95:0f:b8:51:5a:ec:ce:
         c2:9a:9c:d5:5c:a6:aa:cc:85:de:e7:d2:93:4d:87:70:4a:af:
         6f:73:a2:bc:f1:1f:23:ad:59:22:5a:31:71:1a:66:52:4a:7d:
         a5:c0:f3:10:0b:a2:17:05:60:0b:f3:45:dd:e8:93:b9:5d:38:
         ff:0f:c5:b5:be:8f:cd:ee:51:b3:41:f0:cc:38:fa:97:ae:6b:
         a6:1e:26:a4:78:6a:50:6d:a8:d2:a9:9e:92:86:79:2c:27:6d:
         51:bf:71:e8:06:47:b2:db:ac:26:f2:e7:af:64:e4:60:80:1f:
         50:97:af:36:6d:d8:af:53:0c:8c:fc:e3:b6:4c:fc:90:49:7f:
         09:0b:a4:5e:16:c5:3d:94:65:8c:f8:42:1f:fa:b0:00:2d:74:
         38:02:dc:6b:49:74:1d:c6:c7:79:66:8d:7a:23:15:7e:91:76:
         63:96:f0:03:2d:86:7b:de:16:c5:ed:19:a5:74:02:1e:64:21:
         fe:e8:9a:c0:16:05:a3:d9:2e:b9:b5:fb:1e:67:34:65:35:63:
         b9:c4:d6:bf:74:b1:c5:ec:55:d1:f4:d4:41:5d:bd:2c:e9:d3:
         8a:68:bb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:29:58 2026 by rpki-client