Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9fd3d05a-2a7f-3fe4-8465-b11ccde6b726.roa
File:                     9fd3d05a-2a7f-3fe4-8465-b11ccde6b726.roa (raw, json)
Hash identifier:          v+trTKITU1jCq/WCfiRPyAlrdws3EUwk6dbcc32f1Ig=
Subject key identifier:   80:9E:1C:A1:27:7B:2B:2F:76:91:E8:C9:BF:DF:8A:FD:F4:CB:66:02
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A68260484269678D7C4747D00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9fd3d05a-2a7f-3fe4-8465-b11ccde6b726.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     202
IP address blocks:        192.57.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:04:84:26:96:78:d7:c4:74:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=47198b0b-d521-4190-84e0-1a74b7376dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4a:89:8c:ad:2a:68:d1:70:d0:ae:0f:46:62:
                    9b:b5:1c:de:fe:d4:03:34:c5:2b:66:53:be:f9:99:
                    3b:96:85:22:f6:b2:67:46:8d:8f:e9:cd:8a:99:92:
                    36:85:d4:9a:27:18:76:96:5e:d0:34:f6:1b:9e:e9:
                    e3:b4:a5:1d:60:e0:37:bc:24:9b:0f:b0:d8:db:91:
                    be:74:52:d9:e0:f1:4e:07:f8:15:70:b4:c5:b4:a8:
                    29:b3:41:83:20:e6:85:67:97:b1:5a:9c:97:45:36:
                    ab:af:cd:c1:8c:98:ae:d5:96:32:a1:4b:0f:83:19:
                    67:7c:92:70:be:f7:bd:a4:07:5c:94:af:75:61:36:
                    24:91:e2:49:f6:cb:ea:a8:f6:47:1a:dd:d1:5e:d3:
                    8c:6a:99:95:c5:82:6b:ab:e0:ce:64:00:7b:e2:db:
                    b3:41:f0:0b:4e:eb:1e:af:51:63:37:17:e1:c6:ab:
                    ba:ac:23:cb:4e:4f:5b:b2:bc:53:3f:da:25:7c:f1:
                    8e:f4:97:f3:27:85:45:44:7a:5b:3f:a6:d1:86:ad:
                    ce:13:34:43:cc:d3:5e:e0:4b:7f:70:67:13:b0:fa:
                    c3:ac:db:6b:49:34:a5:4e:bf:b7:c6:a9:cb:25:0b:
                    3c:ee:ef:63:04:8b:89:b5:e5:b4:7b:ed:1c:fa:fe:
                    e8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9E:1C:A1:27:7B:2B:2F:76:91:E8:C9:BF:DF:8A:FD:F4:CB:66:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9fd3d05a-2a7f-3fe4-8465-b11ccde6b726.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:29:67:21:bc:53:ee:e8:da:39:d0:ad:f2:74:74:c3:94:b8:
         5b:b0:70:51:89:6e:5b:08:3b:72:45:3e:04:ef:dc:5a:ee:8b:
         94:95:1a:51:8b:15:fa:f3:cf:2e:5a:a4:9d:a4:a6:26:da:0d:
         09:2e:a6:f4:5a:1c:c0:16:82:f6:2f:7a:82:ff:83:fa:6b:6d:
         c9:bd:d2:73:ed:4d:cf:59:7e:fb:9a:c1:66:86:10:ab:70:4e:
         c0:cf:aa:2f:8b:97:ab:e1:1b:aa:6d:29:b3:42:7f:75:bd:84:
         1d:a2:8d:53:d4:2d:f3:64:26:c8:82:ec:86:f8:64:a4:89:1b:
         fd:4b:0a:32:03:e5:6e:b7:17:51:18:02:0e:4b:fd:6d:d4:a9:
         42:73:60:b8:a5:02:65:57:13:11:e0:f6:09:e5:cc:de:d1:61:
         14:6b:cd:c0:25:cb:17:d2:5f:d1:e3:14:a7:cc:a5:6f:72:f5:
         e3:ea:63:e1:0a:0f:d2:0c:be:05:44:81:c2:51:6e:9c:f2:ca:
         cd:92:20:a0:23:5d:1e:5d:d5:01:b8:3f:eb:92:9a:09:e7:d2:
         54:8d:7b:ac:f0:ff:50:47:8a:c4:9e:e8:35:3d:fa:53:26:94:
         e2:a7:95:9c:25:38:8a:b0:23:f9:c1:4b:49:93:83:06:3c:59:
         ba:a8:bc:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJgSEJpZ418R0fQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
NDcxOThiMGItZDUyMS00MTkwLTg0ZTAtMWE3NGI3Mzc2ZGJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUqJjK0qaNFw0K4PRmKbtRze/tQDNMUrZlO+
+Zk7loUi9rJnRo2P6c2KmZI2hdSaJxh2ll7QNPYbnunjtKUdYOA3vCSbD7DY25G+
dFLZ4PFOB/gVcLTFtKgps0GDIOaFZ5exWpyXRTarr83BjJiu1ZYyoUsPgxlnfJJw
vve9pAdclK91YTYkkeJJ9svqqPZHGt3RXtOMapmVxYJrq+DOZAB74tuzQfALTuse
r1FjNxfhxqu6rCPLTk9bsrxTP9olfPGO9JfzJ4VFRHpbP6bRhq3OEzRDzNNe4Et/
cGcTsPrDrNtrSTSlTr+3xqnLJQs87u9jBIuJteW0e+0c+v7ofwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFICeHKEneysvdpHoyb/fiv30y2YCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOWZkM2QwNWEtMmE3Zi0z
ZmU0LTg0NjUtYjExY2NkZTZiNzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwDkoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFgpZyG8U+7o2jnQrfJ0dMOUuFuwcFGJblsIO3JFPgTv3Frui5SVGlGL
Ffrzzy5apJ2kpibaDQkupvRaHMAWgvYveoL/g/prbcm90nPtTc9ZfvuawWaGEKtw
TsDPqi+Ll6vhG6ptKbNCf3W9hB2ijVPULfNkJsiC7Ib4ZKSJG/1LCjID5W63F1EY
Ag5L/W3UqUJzYLilAmVXExHg9gnlzN7RYRRrzcAlyxfSX9HjFKfMpW9y9ePqY+EK
D9IMvgVEgcJRbpzyys2SIKAjXR5d1QG4P+uSmgnn0lSNe6zw/1BHisSe6DU9+lMm
lOKnlZwlOIqwI/nBS0mTgwY8WbqovJ4=
-----END CERTIFICATE-----
Generated at Mon Jul 21 08:03:25 2025 by rpki-client