Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fa4aa3b3-4806-38db-bde1-9b98a29f3e9e.roa
File:                     fa4aa3b3-4806-38db-bde1-9b98a29f3e9e.roa (raw, json)
Hash identifier:          71pZj1QYb/I7anhKt+b3bG5C4TmgfBGeSPaPaQgdGMA=
Subject key identifier:   F3:97:74:27:B0:3A:04:58:05:BD:6E:90:C8:C4:0F:03:FD:48:EC:2A
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EA798D61B29E005E1F2052620
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fa4aa3b3-4806-38db-bde1-9b98a29f3e9e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     3360
IP address blocks:        192.57.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:d6:1b:29:e0:05:e1:f2:05:26:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9cb855bd-38f9-4f9d-a355-e646ff716352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b5:ef:59:0c:18:d5:c4:de:96:b1:8b:fc:bb:
                    1c:25:91:37:bb:06:db:50:3c:b3:91:73:b6:af:2b:
                    e0:43:38:78:03:b2:9b:db:81:97:a9:e3:ba:ec:5d:
                    78:54:e1:bd:55:ec:4e:e9:57:eb:f8:4e:6f:e7:63:
                    0e:52:0c:b6:d8:d8:79:54:c7:b2:16:39:2d:80:b8:
                    59:1c:d3:a5:c2:76:1d:ae:d1:48:71:11:24:18:13:
                    9d:0c:04:91:a9:95:9b:0f:9e:7e:ac:89:55:eb:29:
                    65:14:f0:fb:86:1d:30:76:8e:e6:9c:11:67:e6:ca:
                    bb:53:35:f1:25:0b:bf:dd:14:7a:ea:41:66:03:70:
                    86:bc:6b:6f:40:3d:8c:76:d1:6a:8f:32:d8:c5:7e:
                    20:45:24:37:c8:79:33:15:56:fb:25:da:a8:d2:d2:
                    8d:4d:8b:fe:3f:ad:e1:35:bf:e7:ec:df:0e:dc:6e:
                    15:bc:da:ff:68:20:43:64:3e:99:e1:28:8d:84:e1:
                    aa:83:8b:73:25:f8:47:ec:c1:7e:50:07:e0:91:03:
                    a1:c5:ac:b8:7a:a1:32:15:ff:d0:ab:92:25:31:03:
                    77:3d:d4:2d:df:77:de:8f:b4:40:7b:73:1d:40:8e:
                    12:78:15:bc:ed:66:fc:94:96:ad:1a:68:2c:fb:a9:
                    c3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:97:74:27:B0:3A:04:58:05:BD:6E:90:C8:C4:0F:03:FD:48:EC:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fa4aa3b3-4806-38db-bde1-9b98a29f3e9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:7a:72:7e:bd:73:3d:9e:df:c7:20:a9:95:39:70:b7:74:55:
         36:00:81:c6:02:65:21:ea:ba:fd:ae:0c:e6:62:99:25:fd:85:
         ee:20:1e:8e:b6:44:df:3c:b8:fa:e0:f1:85:ec:da:71:24:98:
         cd:08:71:f3:97:90:51:eb:8f:a5:26:78:a5:88:1a:49:9e:ed:
         77:ac:c8:8e:ae:10:d1:ee:c9:f6:c8:69:36:b5:d0:ac:58:87:
         1e:9b:53:0a:77:72:99:0c:25:66:d6:f0:24:db:49:30:06:43:
         5e:d3:1b:c8:d7:02:fb:23:25:61:ff:dd:2c:92:9d:c3:19:53:
         22:41:52:2b:8b:e3:89:e0:b5:79:f3:6c:6c:4a:ca:2a:82:fe:
         a7:4a:c1:b0:89:eb:80:91:5a:94:b0:d6:c0:77:6e:c7:07:08:
         03:42:be:d7:55:e2:0e:ce:da:1f:cf:1a:b7:75:b3:05:a4:80:
         fd:0b:48:d5:e0:f3:ca:01:58:bd:d9:88:ab:76:d5:9d:ce:b3:
         4e:d6:49:96:16:64:39:80:b0:e2:ea:b8:c4:7d:93:75:2b:7c:
         5c:b4:df:6c:36:84:fb:d5:c8:ae:df:da:2c:28:22:07:4d:91:
         a6:d5:71:ab:40:b5:a0:43:6e:4c:a5:f2:5c:77:ee:55:a1:73:
         67:3a:5f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:07:26 2026 by rpki-client