Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/ff89eb67-b375-3931-953d-a4301459b410.roa
File:                     ff89eb67-b375-3931-953d-a4301459b410.roa (raw, json)
Hash identifier:          JgHyEVgR2ZdJDPaj/8ipjrUOySzANK9aJIwL59WJLWg=
Subject key identifier:   3E:72:B2:44:AC:EC:AF:97:50:86:A7:34:CF:F7:E7:3E:5B:7F:24:C9
Certificate issuer:       /CN=f80f9298-8029-4285-89d7-27308341b2e0
Certificate serial:       010D0C9F4328584B328C39FE77A33C2BD5ECF7A6
Authority key identifier: 67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/ff89eb67-b375-3931-953d-a4301459b410.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     2639
IP address blocks:        199.67.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:39:fe:77:a3:3c:2b:d5:ec:f7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80f9298-8029-4285-89d7-27308341b2e0
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=7b0de3e7-29cc-4501-8c85-0e3b3d077b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c4:e0:5b:0d:0d:65:74:2b:f9:bf:74:c1:2f:
                    09:f0:97:e1:f0:fa:b4:3b:92:bf:ec:3a:49:54:95:
                    09:84:1b:6c:9e:db:d8:75:b9:42:0c:e7:bf:08:ed:
                    28:72:25:f1:11:b1:27:fd:23:9e:10:32:16:2c:25:
                    a8:8d:aa:c0:2d:9c:0f:48:6e:48:8a:e0:2d:dd:ba:
                    66:8f:ff:0e:b1:c3:d9:02:ab:c9:fb:5b:6a:85:f5:
                    f3:01:f1:aa:a7:ea:36:78:d0:bb:95:a7:2c:df:a9:
                    1c:2c:49:db:72:a1:a4:c8:d0:40:21:5a:5b:f7:93:
                    f1:ba:c3:13:05:a0:6d:8c:a6:32:92:13:de:52:7f:
                    1a:04:3e:44:0f:ae:bb:1f:82:d1:76:79:8f:f4:9b:
                    bd:9e:ae:a3:90:24:13:bf:ea:ca:bb:4d:12:73:ff:
                    5e:e7:ef:d2:25:23:6d:22:b8:01:fe:aa:57:e9:35:
                    c4:62:74:53:ee:c3:68:8d:1c:b3:c5:35:86:a7:dd:
                    3a:63:42:4a:77:2b:04:84:91:f5:2b:55:d3:dc:f9:
                    5b:24:c0:68:45:a3:02:f3:e6:9a:c7:62:ac:08:87:
                    d7:4b:80:e3:0c:49:a5:27:a8:52:5f:a7:30:0d:e3:
                    07:90:83:4d:70:ac:88:24:2b:71:5e:73:ab:c4:a0:
                    2e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:72:B2:44:AC:EC:AF:97:50:86:A7:34:CF:F7:E7:3E:5B:7F:24:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/ff89eb67-b375-3931-953d-a4301459b410.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl

            X509v3 Authority Key Identifier:
                keyid:67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.67.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:7a:92:ac:7f:a5:b8:bb:cd:68:05:b1:f9:61:ec:c0:e4:17:
         e8:20:fc:af:b4:5a:3c:f4:67:47:c7:9f:78:13:d8:8d:dc:3a:
         4c:56:e8:8c:9b:0f:e6:64:f5:1a:44:71:e3:4a:29:8a:06:8f:
         c0:79:3a:5a:22:c8:21:f7:b3:64:6c:06:c2:a1:fe:8d:52:76:
         db:6a:b6:2b:ef:62:87:8b:78:32:bb:d2:f3:81:4e:99:e3:45:
         2b:6f:1f:6c:5b:b0:93:ff:9e:fa:c3:00:be:f6:cd:5f:85:c0:
         f1:4e:38:ff:4b:3b:e4:88:8c:15:82:4b:5a:67:70:e0:8c:58:
         f9:95:1d:38:9e:5e:34:0b:d0:ec:a6:2f:98:cf:a9:ab:f9:e8:
         ff:0f:48:40:10:0e:cb:7f:88:b5:af:49:6b:57:c1:46:2a:64:
         88:54:cc:ee:49:d1:e6:eb:a6:d0:64:e6:11:cd:92:05:5c:05:
         4b:f6:e6:a9:fc:c6:e4:8b:31:2e:5b:b3:0b:ad:1e:15:69:32:
         e2:95:2a:38:5d:91:12:21:d1:66:94:f7:58:b6:51:a5:ed:99:
         65:29:d0:c4:be:e6:b4:8e:aa:ed:f7:25:36:5d:6e:e7:10:03:
         df:a4:5e:4c:de:33:7e:e3:24:00:c8:be:b0:be:50:84:f0:f0:
         97:d9:d1:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjDn+d6M8K9Xs96YwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjgwZjkyOTgtODAyOS00Mjg1LTg5ZDctMjczMDgzNDFi
MmUwMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk
N2IwZGUzZTctMjljYy00NTAxLThjODUtMGUzYjNkMDc3YjBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcTgWw0NZXQr+b90wS8J8Jfh8Pq0O5K/7DpJ
VJUJhBtsntvYdblCDOe/CO0ociXxEbEn/SOeEDIWLCWojarALZwPSG5IiuAt3bpm
j/8OscPZAqvJ+1tqhfXzAfGqp+o2eNC7lacs36kcLEnbcqGkyNBAIVpb95PxusMT
BaBtjKYykhPeUn8aBD5ED667H4LRdnmP9Ju9nq6jkCQTv+rKu00Sc/9e5+/SJSNt
IrgB/qpX6TXEYnRT7sNojRyzxTWGp906Y0JKdysEhJH1K1XT3PlbJMBoRaMC8+aa
x2KsCIfXS4DjDEmlJ6hSX6cwDeMHkINNcKyIJCtxXnOrxKAulwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD5yskSs7K+XUIanNM/35z5bfyTJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mODBm
OTI5OC04MDI5LTQyODUtODlkNy0yNzMwODM0MWIyZTAvZmY4OWViNjctYjM3NS0z
OTMxLTk1M2QtYTQzMDE0NTliNDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjgwZjkyOTgtODAyOS00Mjg1LTg5
ZDctMjczMDgzNDFiMmUwL2Y4MGY5Mjk4LTgwMjktNDI4NS04OWQ3LTI3MzA4MzQx
YjJlMC5jcmwwHwYDVR0jBBgwFoAUZ2/fmN3Fstann5/PDklcOGTRROcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mODBmOTI5OC04MDI5LTQyODUtODlkNy0yNzMw
ODM0MWIyZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx0NUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABZ6kqx/pbi7zWgFsflh7MDkF+gg/K+0Wjz0Z0fHn3gT2I3cOkxW6Iyb
D+Zk9RpEceNKKYoGj8B5OloiyCH3s2RsBsKh/o1SdttqtivvYoeLeDK70vOBTpnj
RStvH2xbsJP/nvrDAL72zV+FwPFOOP9LO+SIjBWCS1pncOCMWPmVHTieXjQL0Oym
L5jPqav56P8PSEAQDst/iLWvSWtXwUYqZIhUzO5J0ebrptBk5hHNkgVcBUv25qn8
xuSLMS5bswutHhVpMuKVKjhdkRIh0WaU91i2UaXtmWUp0MS+5rSOqu33JTZdbucQ
A9+kXkzeM37jJADIvrC+UITw8JfZ0Vs=
-----END CERTIFICATE-----
Generated at Wed Sep 17 23:54:43 2025 by rpki-client