Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2f65ab05-8d2d-363d-adb3-c2dd258201b5.roa
File:                     2f65ab05-8d2d-363d-adb3-c2dd258201b5.roa (raw, json)
Hash identifier:          aOBOztfzeOvv211fOXCxog2kVJCE7jipPHpmNyDMWpw=
Subject key identifier:   EF:A7:F8:0E:3A:03:0B:89:1E:EA:B2:A5:A9:FE:1D:26:E3:6E:AC:05
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A698B2D9C43FD5CD1592F3F80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2f65ab05-8d2d-363d-adb3-c2dd258201b5.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     3360
IP address blocks:        204.105.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:2d:9c:43:fd:5c:d1:59:2f:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=e2639508-ed58-4679-96cd-4849110bc2b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b6:27:1b:9d:27:ef:90:44:92:d8:d0:03:ee:
                    cc:a9:af:bc:6c:32:0e:22:ec:ed:18:e8:39:62:4f:
                    e4:2d:c0:1b:fa:9a:0e:6f:13:ed:3f:5f:0a:b3:ac:
                    7c:8f:be:f0:94:44:f2:3e:a8:c7:16:81:28:ea:f1:
                    c5:a8:8a:af:b6:78:01:65:cc:af:75:93:c5:71:84:
                    81:cd:cc:7e:66:b6:77:c5:36:cc:ba:c6:a1:e1:2f:
                    e5:1b:cd:3a:ea:a7:95:3b:43:aa:56:df:72:20:55:
                    d0:56:b8:92:86:75:7b:66:10:07:28:ca:b9:fe:66:
                    81:b4:01:4f:44:25:5f:f7:78:c3:a2:d4:52:7f:9e:
                    7e:5a:2a:ce:6c:d1:65:82:08:3c:aa:c3:5f:e9:11:
                    1e:88:48:5c:00:a7:4c:bb:b7:bd:28:b2:e1:30:d9:
                    c9:2c:cd:7e:9f:d6:81:d9:68:76:ba:de:f7:6e:ee:
                    29:95:8f:20:20:60:a7:b9:89:04:d3:44:3d:f6:d6:
                    32:2a:a8:dc:1b:1c:80:f4:fb:79:b8:02:2c:79:7e:
                    79:78:ba:d0:ae:31:47:1f:b8:ef:ea:da:7d:1d:b4:
                    7f:44:e7:9b:ab:a6:df:2b:61:d7:63:c3:cd:93:08:
                    25:61:2d:fd:10:38:ac:1d:55:6e:40:28:b1:a7:cf:
                    64:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A7:F8:0E:3A:03:0B:89:1E:EA:B2:A5:A9:FE:1D:26:E3:6E:AC:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2f65ab05-8d2d-363d-adb3-c2dd258201b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.105.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:58:ee:07:82:bd:5d:dc:04:c7:33:97:94:56:f3:cd:96:e1:
         ae:9e:59:71:40:bc:6b:aa:38:98:95:aa:a9:60:b7:96:5d:d5:
         f8:50:5e:c3:6d:44:c4:36:e9:0f:eb:f9:71:2d:32:f4:e1:43:
         50:24:8c:5e:7e:79:d2:bb:76:88:3e:7b:8e:f4:76:f1:b4:89:
         8b:4d:89:6a:c2:ff:6d:30:6f:67:b3:34:15:61:a7:28:32:2a:
         af:68:ba:86:4b:0d:78:19:7c:b0:c8:69:13:20:d8:f0:7e:b1:
         74:d1:f1:2f:a2:9f:a7:72:51:cc:9a:8d:d2:11:08:39:9e:4c:
         ae:b2:ce:bd:07:a9:5b:6b:f3:dd:c6:94:ec:7a:31:65:2d:75:
         d6:39:0b:06:7d:57:50:3c:4f:14:42:e3:48:a4:ad:e0:c4:27:
         3c:b9:23:b8:7c:21:87:cf:31:13:eb:9d:94:e9:14:e3:03:6b:
         c4:0e:d1:07:c8:6b:20:2e:b1:c2:0f:5d:85:6d:76:cf:69:29:
         e8:8c:94:04:66:3a:fb:0d:e7:02:93:dc:f3:fc:ff:83:56:8b:
         f6:e3:f1:a6:2a:e0:bb:42:1d:21:91:d2:73:26:34:1c:96:e4:
         de:21:b2:f5:d3:6c:d1:45:39:dc:36:c9:e5:a1:a6:bf:1b:3f:
         af:17:0a:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppiy2cQ/1c0VkvP4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk
ZTI2Mzk1MDgtZWQ1OC00Njc5LTk2Y2QtNDg0OTExMGJjMmIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrYnG50n75BEktjQA+7Mqa+8bDIOIuztGOg5
Yk/kLcAb+poObxPtP18Ks6x8j77wlETyPqjHFoEo6vHFqIqvtngBZcyvdZPFcYSB
zcx+ZrZ3xTbMusah4S/lG8066qeVO0OqVt9yIFXQVriShnV7ZhAHKMq5/maBtAFP
RCVf93jDotRSf55+WirObNFlggg8qsNf6REeiEhcAKdMu7e9KLLhMNnJLM1+n9aB
2Wh2ut73bu4plY8gIGCnuYkE00Q99tYyKqjcGxyA9Pt5uAIseX55eLrQrjFHH7jv
6tp9HbR/ROebq6bfK2HXY8PNkwglYS39EDisHVVuQCixp89khQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO+n+A46AwuJHuqypan+HSbjbqwFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmY2NWFiMDUtOGQyZC0z
NjNkLWFkYjMtYzJkZDI1ODIwMWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGkgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEhY7geCvV3cBMczl5RW882W4a6eWXFAvGuqOJiVqqlgt5Zd1fhQXsNt
RMQ26Q/r+XEtMvThQ1AkjF5+edK7dog+e470dvG0iYtNiWrC/20wb2ezNBVhpygy
Kq9ouoZLDXgZfLDIaRMg2PB+sXTR8S+in6dyUcyajdIRCDmeTK6yzr0HqVtr893G
lOx6MWUtddY5CwZ9V1A8TxRC40ikreDEJzy5I7h8IYfPMRPrnZTpFOMDa8QO0QfI
ayAuscIPXYVtds9pKeiMlARmOvsN5wKT3PP8/4NWi/bj8aYq4LtCHSGR0nMmNByW
5N4hsvXTbNFFOdw2yeWhpr8bP68XCnE=
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:39:12 2025 by rpki-client