Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/72614440-b0f4-3ff2-8611-4262434ba3a9.roa
File:                     72614440-b0f4-3ff2-8611-4262434ba3a9.roa (raw, json)
Hash identifier:          yXL5H6zk8NSaqC7IKhukAA7N+Fp65vH6rUHJt5Foqcg=
Subject key identifier:   36:70:16:32:72:11:D0:CE:6B:F0:42:51:C9:4B:27:E9:E6:DD:54:47
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AAB266A69155091BDB35D0A00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/72614440-b0f4-3ff2-8611-4262434ba3a9.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     3356
IP address blocks:        206.164.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:6a:69:15:50:91:bd:b3:5d:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=fdf65df2-dfa6-40bb-8053-3da6e2dfe4fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e1:bc:cc:db:03:66:c3:47:5e:bb:aa:77:b5:
                    94:49:0f:69:ef:ab:c5:cf:cc:82:cd:9d:52:ee:1c:
                    dd:21:bd:f8:ee:55:d3:93:f4:fa:2c:c6:1b:8e:4c:
                    64:7e:c0:9b:0b:88:c0:b9:14:e8:0d:4b:a2:86:e4:
                    2a:2c:a0:60:c7:9e:20:f4:71:45:12:0d:b9:94:af:
                    1a:9e:1d:26:c3:80:de:0f:90:4a:63:6a:db:47:cb:
                    b8:4d:ab:38:7b:ec:5d:a4:60:83:48:d6:5a:5a:8f:
                    5e:43:57:16:a7:bf:91:9d:79:e3:c0:90:03:d3:b1:
                    42:4c:a8:21:76:73:6c:f6:c6:77:df:a1:30:1e:7c:
                    a5:fc:f0:c6:0c:56:c4:b8:a9:84:eb:96:e3:e1:29:
                    a8:71:8d:03:dd:c3:63:c0:d4:83:50:3f:45:b9:8c:
                    e4:8c:8d:bf:c8:70:a3:9e:b3:5d:7e:26:cc:0f:0f:
                    27:0b:5a:c1:da:81:01:39:bd:36:a4:7f:9f:4c:23:
                    40:25:1d:af:e8:7c:a7:1c:78:8c:f4:17:df:b2:23:
                    ea:4f:01:21:a6:4f:f1:20:cf:e3:44:b1:55:cd:bf:
                    9d:e9:82:46:49:b4:54:9e:a9:cd:ab:c0:56:3d:38:
                    50:0a:8e:42:94:5f:4a:5a:ec:39:7c:e3:b7:4f:57:
                    67:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:70:16:32:72:11:D0:CE:6B:F0:42:51:C9:4B:27:E9:E6:DD:54:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/72614440-b0f4-3ff2-8611-4262434ba3a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.164.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:77:73:50:68:ae:11:d1:15:82:d4:ae:30:e6:16:c6:29:a7:
         ac:57:d0:fa:d3:93:03:3f:a7:6f:71:d3:2a:e0:1e:e7:3e:44:
         d3:98:13:8a:a7:69:84:84:fc:19:06:79:67:56:8f:71:eb:8e:
         f2:69:a8:31:1d:b9:ce:42:32:11:b4:9d:3c:b8:a3:03:a1:36:
         d1:01:93:98:f2:a2:4a:0e:f9:a2:08:1c:ce:16:3a:e1:1b:6f:
         28:9c:e7:34:e7:8e:58:6f:df:f5:61:ac:1b:09:22:a0:87:e0:
         30:15:5b:0c:ef:7b:e1:65:13:48:ad:75:3c:b8:94:73:e9:07:
         31:ef:1d:a7:27:89:d8:36:e9:28:43:ff:93:98:45:3e:68:71:
         d0:c8:ac:fc:bc:27:b0:0b:e2:81:0a:fb:24:55:e1:93:49:d2:
         85:98:c5:8b:c2:2a:c0:e1:53:98:34:90:dd:a1:1d:60:0f:d4:
         95:c5:92:d8:ed:02:2b:3d:d1:ff:d2:2e:52:dc:2e:da:17:ab:
         ee:47:0a:cb:b7:37:ff:1a:14:a7:0f:5b:58:28:c7:db:ec:50:
         4e:32:48:82:49:a2:95:86:0a:89:2b:ce:e9:50:08:28:bd:3a:
         1b:76:ac:94:a4:e3:1a:d7:4c:79:be:17:18:39:2c:d3:b4:0d:
         6b:47:ab:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJmppFVCRvbNdCgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk
ZmRmNjVkZjItZGZhNi00MGJiLTgwNTMtM2RhNmUyZGZlNGZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeG8zNsDZsNHXruqd7WUSQ9p76vFz8yCzZ1S
7hzdIb347lXTk/T6LMYbjkxkfsCbC4jAuRToDUuihuQqLKBgx54g9HFFEg25lK8a
nh0mw4DeD5BKY2rbR8u4Tas4e+xdpGCDSNZaWo9eQ1cWp7+RnXnjwJAD07FCTKgh
dnNs9sZ336EwHnyl/PDGDFbEuKmE65bj4SmocY0D3cNjwNSDUD9FuYzkjI2/yHCj
nrNdfibMDw8nC1rB2oEBOb02pH+fTCNAJR2v6HynHHiM9BffsiPqTwEhpk/xIM/j
RLFVzb+d6YJGSbRUnqnNq8BWPThQCo5ClF9KWuw5fOO3T1dn/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDZwFjJyEdDOa/BCUclLJ+nm3VRHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNzI2MTQ0NDAtYjBmNC0z
ZmYyLTg2MTEtNDI2MjQzNGJhM2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqTQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGh3c1BorhHRFYLUrjDmFsYpp6xX0PrTkwM/p29x0yrgHuc+RNOYE4qn
aYSE/BkGeWdWj3HrjvJpqDEduc5CMhG0nTy4owOhNtEBk5jyokoO+aIIHM4WOuEb
byic5zTnjlhv3/VhrBsJIqCH4DAVWwzve+FlE0itdTy4lHPpBzHvHacnidg26ShD
/5OYRT5ocdDIrPy8J7AL4oEK+yRV4ZNJ0oWYxYvCKsDhU5g0kN2hHWAP1JXFktjt
Ais90f/SLlLcLtoXq+5HCsu3N/8aFKcPW1gox9vsUE4ySIJJopWGCokrzulQCCi9
Oht2rJSk4xrXTHm+Fxg5LNO0DWtHqzU=
-----END CERTIFICATE-----
Generated at Wed Jul 30 23:47:34 2025 by rpki-client