Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d640b051-588b-37ef-8b3b-80138312e640.roa
File:                     d640b051-588b-37ef-8b3b-80138312e640.roa (raw, json)
Hash identifier:          kUCYlKXLxcXPg7aDL9vI6Auxq33NSswaEToovmgkdgY=
Subject key identifier:   9F:B4:CB:27:DD:67:67:EE:F5:BF:C6:59:B3:5F:45:AF:08:95:69:BB
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584B0B76CFB489BF115F32664020
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d640b051-588b-37ef-8b3b-80138312e640.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     11404
IP address blocks:        208.76.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:cf:b4:89:bf:11:5f:32:66:40:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=2961577a-50b3-4743-bc01-992f2256a71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:54:27:9e:9f:bc:af:2b:05:0e:a9:f7:c0:70:
                    0c:47:dd:0b:aa:68:7e:eb:81:7a:d5:77:d1:4c:c4:
                    74:ae:b2:aa:55:e3:d8:01:50:66:12:b6:61:0d:1f:
                    5a:41:4a:50:d3:40:ce:2d:50:d2:e4:6e:82:1d:bb:
                    79:93:86:5d:e3:c0:f5:b8:ea:14:93:60:2f:65:aa:
                    f8:a0:85:b4:03:d1:bb:d1:a8:5d:6c:b0:f9:b3:b7:
                    ed:70:25:7e:4a:b7:aa:4f:13:53:6b:59:17:52:e9:
                    4d:20:69:95:a0:5a:54:c2:7f:d0:71:88:7e:2f:36:
                    b8:32:bf:b8:93:cd:f0:fc:96:e0:ff:c4:9e:65:60:
                    19:1b:97:2a:f8:fc:b6:17:3d:1e:6b:0d:28:fc:08:
                    e5:b7:3e:64:31:7d:94:b3:8f:b7:6d:57:91:10:fe:
                    05:96:60:d2:e8:ac:e4:55:11:8a:13:d3:72:16:19:
                    59:0d:d5:fb:ef:e6:f3:2b:0a:82:a6:e2:78:86:c1:
                    0f:c3:bd:dd:e7:58:ce:f1:3f:cb:7a:0b:22:66:00:
                    81:a1:3f:27:1a:85:1d:60:2b:a5:5e:6e:89:24:2d:
                    d8:ae:df:4e:2d:c1:2f:f2:2f:e7:63:4e:25:71:3f:
                    97:b2:34:fc:5c:e7:66:a9:89:7b:f9:c4:e9:b4:f0:
                    0c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B4:CB:27:DD:67:67:EE:F5:BF:C6:59:B3:5F:45:AF:08:95:69:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d640b051-588b-37ef-8b3b-80138312e640.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:44:8a:e6:12:1a:2c:ef:62:5a:f5:01:34:f7:4d:d3:ea:36:
         c9:28:a6:09:65:98:17:b3:60:33:45:a2:7e:cd:38:34:0d:52:
         8c:dd:ad:03:6c:1a:26:4f:1c:d0:47:e0:c6:df:ea:57:75:1d:
         6b:62:a9:b8:d0:3a:22:1f:7c:4c:44:52:c2:d7:62:1c:ed:88:
         a1:3a:04:5f:9d:03:8c:61:fb:1d:ae:1a:38:cd:53:26:6c:e3:
         37:e4:20:7f:e7:fd:23:7b:dd:80:c9:52:4e:29:6e:67:cd:5b:
         42:06:6a:05:ed:4b:c6:54:b1:02:04:24:40:72:0e:28:e3:d6:
         3c:69:5c:81:5d:65:d7:77:f8:73:9f:2c:e5:db:c1:9a:88:46:
         28:ec:24:50:40:05:f9:53:64:97:c4:ee:0e:a8:0e:94:a0:0b:
         6f:c5:de:ec:88:7e:37:2d:51:be:af:22:e6:da:61:2e:c5:87:
         35:c6:63:86:cd:15:ea:1d:0a:87:fa:b0:c2:6f:6d:83:f8:c4:
         f6:ec:ec:05:2d:ee:48:43:5e:dc:07:be:43:e1:d6:39:4d:d6:
         5b:50:a6:a8:0e:c8:f8:30:b1:90:15:95:c8:e2:3a:6e:07:44:
         e5:ed:bd:37:dc:1a:8a:d1:7a:f1:2e:30:fd:1d:9a:f2:71:76:
         82:8a:ec:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLds+0ib8RXzJmQCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk
Mjk2MTU3N2EtNTBiMy00NzQzLWJjMDEtOTkyZjIyNTZhNzFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilQnnp+8rysFDqn3wHAMR90Lqmh+64F61XfR
TMR0rrKqVePYAVBmErZhDR9aQUpQ00DOLVDS5G6CHbt5k4Zd48D1uOoUk2AvZar4
oIW0A9G70ahdbLD5s7ftcCV+SreqTxNTa1kXUulNIGmVoFpUwn/QcYh+Lza4Mr+4
k83w/Jbg/8SeZWAZG5cq+Py2Fz0eaw0o/Ajltz5kMX2Us4+3bVeREP4FlmDS6Kzk
VRGKE9NyFhlZDdX77+bzKwqCpuJ4hsEPw73d51jO8T/LegsiZgCBoT8nGoUdYCul
Xm6JJC3Yrt9OLcEv8i/nY04lcT+XsjT8XOdmqYl7+cTptPAMuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ+0yyfdZ2fu9b/GWbNfRa8IlWm7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZDY0MGIwNTEtNTg4Yi0z
N2VmLThiM2ItODAxMzgzMTJlNjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Ey4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGxEiuYSGizvYlr1ATT3TdPqNskopgllmBezYDNFon7NODQNUozdrQNs
GiZPHNBH4Mbf6ld1HWtiqbjQOiIffExEUsLXYhztiKE6BF+dA4xh+x2uGjjNUyZs
4zfkIH/n/SN73YDJUk4pbmfNW0IGagXtS8ZUsQIEJEByDijj1jxpXIFdZdd3+HOf
LOXbwZqIRijsJFBABflTZJfE7g6oDpSgC2/F3uyIfjctUb6vIubaYS7FhzXGY4bN
FeodCof6sMJvbYP4xPbs7AUt7khDXtwHvkPh1jlN1ltQpqgOyPgwsZAVlcjiOm4H
ROXtvTfcGorRevEuMP0dmvJxdoKK7GU=
-----END CERTIFICATE-----
Generated at Fri Oct 10 21:34:34 2025 by rpki-client