Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ea1e1d99-3593-37bf-a573-b9a36a666f5a.roa
File:                     ea1e1d99-3593-37bf-a573-b9a36a666f5a.roa (raw, json)
Hash identifier:          Hi4hmT8n2h9HHO+Sr/AayBguAamav638WU29AGQiFOY=
Subject key identifier:   5B:C8:73:54:8E:BA:2E:21:FA:82:23:5E:5E:31:D4:CD:71:89:F8:30
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EF7177CA91AD98362E2D50900
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ea1e1d99-3593-37bf-a573-b9a36a666f5a.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     3356
IP address blocks:        204.105.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:7c:a9:1a:d9:83:62:e2:d5:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=ea6c9da6-2f34-4bb1-aeae-871d4e716555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:57:3f:81:9a:8a:ed:e9:58:22:8b:15:81:bb:
                    fc:7b:94:c2:a8:2f:79:f1:7c:65:e8:3e:c8:6c:31:
                    5c:78:b5:4c:c2:a4:32:f1:8d:d6:a8:8b:32:5e:b3:
                    1d:63:00:2b:ab:50:62:07:53:3d:44:d9:1c:71:01:
                    e4:1b:9a:80:cd:eb:8f:28:65:21:3e:54:46:9d:8c:
                    8d:26:a0:39:b9:24:f8:53:e9:1f:85:ff:40:80:b0:
                    9e:16:c2:0a:f5:04:51:dd:a3:74:0d:aa:51:45:a2:
                    31:39:4d:76:be:fe:55:86:fc:b6:8a:8f:85:e6:85:
                    95:45:26:a2:a6:30:ab:c9:15:b7:0e:05:90:c5:3b:
                    e1:23:6f:78:4b:cd:48:44:4b:6d:21:06:5f:02:d3:
                    42:83:db:ec:05:1f:d6:2e:be:57:65:14:30:6c:b5:
                    04:b6:30:e1:c6:34:90:51:44:a8:f6:57:13:81:ec:
                    5c:0d:0f:ca:d9:f7:c6:83:7b:3c:38:98:84:bd:56:
                    d6:cb:24:39:37:73:14:1d:bd:41:f5:72:d9:c8:a3:
                    3f:a1:d4:1d:87:53:85:06:06:70:e1:bb:e3:03:02:
                    09:14:07:63:2a:8a:55:e0:7f:b2:db:58:11:fe:3b:
                    2e:a9:1c:16:58:86:df:ae:46:45:dd:3f:59:5f:c1:
                    5d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C8:73:54:8E:BA:2E:21:FA:82:23:5E:5E:31:D4:CD:71:89:F8:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ea1e1d99-3593-37bf-a573-b9a36a666f5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.105.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:5f:91:f9:cc:aa:97:90:88:6f:45:b3:35:31:8a:4f:07:b1:
         a0:6d:50:2b:d4:de:27:fc:74:cc:20:87:6d:65:1d:c4:c6:b6:
         74:5d:d3:a3:9d:42:49:22:04:91:19:0d:fe:f1:96:72:a7:01:
         07:a1:e1:92:63:e4:fc:97:41:88:d8:fe:b2:91:46:c8:b5:45:
         73:4c:33:d4:f3:39:0f:bc:17:4e:ed:14:dc:fa:b2:af:ae:f6:
         5c:66:5a:43:e5:89:5a:f8:41:34:43:02:32:5f:6f:df:e7:62:
         7d:a8:c0:82:90:d4:08:b4:87:d0:37:40:41:3e:20:1d:9f:9c:
         4e:31:af:e9:a9:68:ba:09:ce:d4:d5:fd:85:27:9b:e9:aa:fd:
         fa:d6:5a:49:e8:e6:c8:ba:48:8e:15:66:2c:6b:7d:a2:4a:e2:
         9a:b9:5c:60:67:66:f8:0c:5b:ac:98:ef:6b:57:11:3e:f5:3f:
         24:3d:45:80:7b:3f:0f:f0:c3:c0:3a:12:9f:ad:47:a7:37:04:
         67:3a:d9:bb:a7:35:01:f7:3e:9a:09:e0:08:1d:9e:e8:f4:fe:
         42:59:64:07:f4:03:1a:10:a3:95:ba:04:86:eb:71:cc:ee:18:
         c9:69:8f:ef:44:86:df:13:fb:9a:81:0c:07:1b:86:5b:6f:2b:
         7e:87:f4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:57:42 2026 by rpki-client