Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/abbd744d-41b2-3061-ada3-50c06894699b.roa
File:                     abbd744d-41b2-3061-ada3-50c06894699b.roa (raw, json)
Hash identifier:          RB845H8beiouT1lYmAJ1dd+RmYxrWBj+NZYITIs6Hgs=
Subject key identifier:   0C:59:6D:B1:4E:9B:FB:D5:44:08:6D:69:3E:B0:7D:29:1C:95:82:B1
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A6C55C92F15B9AB6F198696C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/abbd744d-41b2-3061-ada3-50c06894699b.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     21723
IP address blocks:        207.34.72.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:c9:2f:15:b9:ab:6f:19:86:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=6c79cfeb-89ea-42da-94cc-b75e6438540c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2b:33:1a:89:73:82:b0:7a:3e:d8:24:2b:73:
                    41:9c:f3:67:3d:99:4d:45:3d:1c:c2:fe:5d:22:de:
                    0f:36:30:7f:ac:ee:f7:b8:16:c4:45:43:27:98:4b:
                    de:13:3d:95:91:f2:60:cd:3a:73:a5:96:5b:97:70:
                    e3:ba:5d:d8:d0:ec:34:75:86:c1:a1:48:f9:db:9a:
                    b2:ac:ed:73:8c:1c:6c:8c:b3:eb:21:4b:8c:be:f1:
                    63:d4:ef:52:79:69:ce:5f:e8:e6:83:a2:0d:4f:fc:
                    35:1f:46:5e:b2:6f:ba:f8:9e:ce:7f:c6:85:2d:dd:
                    9e:d0:ed:9c:28:bb:2d:05:e3:bd:e3:95:19:b3:88:
                    ba:4c:30:77:ec:34:21:4f:dc:18:33:14:4d:e3:17:
                    fe:38:1d:cb:e6:f6:4e:8a:d4:f6:06:e0:42:b9:8f:
                    a5:2c:f1:ee:96:4c:0b:4a:6a:bf:9e:74:00:07:46:
                    1c:7b:0c:82:c0:9c:ed:bb:0e:e2:49:65:f0:d0:ae:
                    7a:e0:47:e9:78:2d:dd:7e:6c:41:bf:3c:58:f8:31:
                    57:03:00:38:ad:2b:b9:66:bd:3f:83:88:96:5e:fe:
                    39:a2:be:33:18:6c:00:4c:ed:e7:dc:fc:0a:61:00:
                    39:dc:b9:de:89:bc:77:ad:7f:86:0f:f2:02:53:e0:
                    52:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:59:6D:B1:4E:9B:FB:D5:44:08:6D:69:3E:B0:7D:29:1C:95:82:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/abbd744d-41b2-3061-ada3-50c06894699b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         de:fc:d0:8d:da:cd:ec:9b:bd:f3:d8:71:0e:81:cd:7d:28:1b:
         8e:d4:9e:d9:0f:e0:68:32:6a:71:4e:38:08:8d:60:0b:b2:8c:
         75:15:bf:eb:2e:02:60:76:14:c0:22:b5:d4:77:1b:39:47:04:
         8d:d4:bf:b0:01:c8:37:93:eb:29:b3:58:56:52:25:f5:f3:f2:
         fe:c2:e4:d5:24:02:60:db:fe:2c:f4:c9:5a:d2:20:c4:62:b6:
         ec:72:57:02:f9:4d:cb:cf:6f:02:20:2e:69:44:35:b8:f0:ba:
         70:6c:45:be:73:74:70:3f:c1:6f:04:b2:da:2f:fe:1d:e3:80:
         eb:c1:d5:70:eb:02:03:c9:7c:d4:c2:ad:c1:1f:7e:47:d9:94:
         27:72:79:c7:00:82:69:88:e6:8c:69:6d:a2:7a:6f:37:04:a0:
         19:18:96:4a:8c:d8:5e:e1:18:2f:78:15:ef:fb:89:fc:dd:21:
         cb:5a:cf:8f:a2:a2:9d:5b:38:6e:84:25:cc:b2:d5:3b:52:d2:
         fc:3f:41:5d:b5:68:1a:6a:a8:f8:dc:72:9e:7d:06:24:72:d9:
         22:d5:d5:70:95:90:46:bc:93:30:68:43:21:f7:e8:13:71:cc:
         2d:05:fa:f9:50:52:f8:42:6e:37:d6:1d:c5:f5:38:c4:68:7b:
         2b:94:81:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVckvFbmrbxmGlsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk
NmM3OWNmZWItODllYS00MmRhLTk0Y2MtYjc1ZTY0Mzg1NDBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyszGolzgrB6PtgkK3NBnPNnPZlNRT0cwv5d
It4PNjB/rO73uBbERUMnmEveEz2VkfJgzTpzpZZbl3Djul3Y0Ow0dYbBoUj525qy
rO1zjBxsjLPrIUuMvvFj1O9SeWnOX+jmg6INT/w1H0Zesm+6+J7Of8aFLd2e0O2c
KLstBeO945UZs4i6TDB37DQhT9wYMxRN4xf+OB3L5vZOitT2BuBCuY+lLPHulkwL
Smq/nnQAB0YcewyCwJztuw7iSWXw0K564EfpeC3dfmxBvzxY+DFXAwA4rSu5Zr0/
g4iWXv45or4zGGwATO3n3PwKYQA53Lneibx3rX+GD/ICU+BSKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAxZbbFOm/vVRAhtaT6wfSkclYKxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYWJiZDc0NGQtNDFiMi0z
MDYxLWFkYTMtNTBjMDY4OTQ2OTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzyJIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAN780I3azeybvfPYcQ6BzX0oG47UntkP4GgyanFOOAiNYAuyjHUVv+su
AmB2FMAitdR3GzlHBI3Uv7AByDeT6ymzWFZSJfXz8v7C5NUkAmDb/iz0yVrSIMRi
tuxyVwL5TcvPbwIgLmlENbjwunBsRb5zdHA/wW8Estov/h3jgOvB1XDrAgPJfNTC
rcEffkfZlCdyeccAgmmI5oxpbaJ6bzcEoBkYlkqM2F7hGC94Fe/7ifzdIctaz4+i
op1bOG6EJcyy1TtS0vw/QV21aBpqqPjccp59BiRy2SLV1XCVkEa8kzBoQyH36BNx
zC0F+vlQUvhCbjfWHcX1OMRoeyuUgZY=
-----END CERTIFICATE-----
Generated at Fri Jul 25 19:31:07 2025 by rpki-client