Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a70ddc68-3296-3715-9008-2a2eb10fda43.roa
File:                     a70ddc68-3296-3715-9008-2a2eb10fda43.roa (raw, json)
Hash identifier:          uNX12Vy1+qmAZ0UVCxIeRlyx9X2FEsglg3gQn6CQmSs=
Subject key identifier:   66:3C:78:D7:69:BF:15:E9:29:CE:DB:B9:BE:18:DF:A8:7C:36:E3:A1
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A698B3171804A11F95C7BC600
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a70ddc68-3296-3715-9008-2a2eb10fda43.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     3356
IP address blocks:        205.141.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:31:71:80:4a:11:f9:5c:7b:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=fa8d8b67-2467-4aa9-9a07-d647e8c54069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2e:ec:22:b7:f3:29:41:21:89:fb:4a:6b:75:
                    33:b1:cc:d4:0c:22:3c:a9:cd:5d:f5:26:31:60:90:
                    bd:62:34:c7:51:a9:9a:5f:7c:4c:95:21:13:36:b2:
                    61:3f:46:6a:c4:0c:b4:ee:31:76:6b:e0:6d:bd:25:
                    a2:39:71:0e:89:01:27:87:72:5c:33:f9:cf:fe:d7:
                    62:fc:d1:20:42:0c:ef:fd:c9:75:99:ba:1e:c0:c4:
                    4b:49:6a:14:62:62:be:37:ce:fe:b6:39:ba:53:88:
                    8c:dc:bf:58:f7:fd:41:0e:3f:19:8a:27:93:ff:3d:
                    c7:61:78:5c:21:5e:c9:5c:48:1a:8f:aa:60:0b:14:
                    09:a1:31:de:0f:59:3a:ec:70:33:ba:d1:72:8c:e1:
                    ba:96:17:fa:fb:03:91:42:cc:f4:5b:d2:35:ad:ef:
                    d2:51:65:1c:5e:c8:48:ca:85:ee:c5:42:2d:eb:5b:
                    76:43:af:10:38:56:b8:8b:a8:99:b4:59:c3:e0:e4:
                    2a:79:05:fe:97:4a:03:bf:ca:61:17:af:98:8a:c0:
                    69:45:0b:f1:5b:86:49:2b:3b:74:a2:7c:99:0e:b3:
                    72:c5:a0:72:5a:b7:4e:6f:db:17:1c:90:9a:cd:99:
                    1c:18:38:97:44:6f:25:d1:8b:1f:bd:d5:73:fe:ae:
                    37:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:3C:78:D7:69:BF:15:E9:29:CE:DB:B9:BE:18:DF:A8:7C:36:E3:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a70ddc68-3296-3715-9008-2a2eb10fda43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.141.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:78:84:7e:de:b9:43:3f:ab:6d:cd:02:c4:c8:09:05:b9:c3:
         14:cc:69:f8:9a:e1:ab:ad:3a:cb:00:e2:ed:37:e2:91:74:b8:
         60:46:11:4c:bb:8d:c9:bd:e5:35:90:77:f9:e5:6a:f5:b7:f4:
         f7:68:64:b1:89:2b:07:8a:c6:fa:8c:60:27:6a:7e:9a:ff:c6:
         6b:27:62:9f:c6:11:68:83:9c:ec:b1:9c:89:b7:ac:4f:b3:ce:
         e4:f7:c5:54:f2:28:f7:32:e4:3f:fe:a2:3b:ce:0c:62:82:9c:
         b9:65:df:45:45:a2:09:22:e4:09:88:cf:d5:94:c1:58:67:e7:
         c7:a0:1e:f9:5b:3d:d1:b0:a6:c3:27:54:5b:1d:53:bf:a2:51:
         c9:4b:f1:38:1a:c3:9e:5f:98:f9:2c:35:19:8f:74:13:9b:3e:
         48:4e:c7:bb:92:1a:15:ab:33:5c:ba:d0:2a:99:00:da:47:23:
         a7:89:65:45:2c:86:9f:d2:54:85:a2:9b:ad:b5:48:00:9e:44:
         2e:1d:4b:79:df:bf:94:94:cd:bf:d4:33:d2:09:09:75:d8:0c:
         02:d1:ed:17:16:97:51:22:db:84:e7:0e:50:08:50:e3:90:1c:
         c9:da:25:f1:d0:f8:ad:7a:ae:39:a6:9c:1a:64:5f:52:cb:79:
         17:97:86:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppizFxgEoR+Vx7xgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk
ZmE4ZDhiNjctMjQ2Ny00YWE5LTlhMDctZDY0N2U4YzU0MDY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAii7sIrfzKUEhiftKa3UzsczUDCI8qc1d9SYx
YJC9YjTHUamaX3xMlSETNrJhP0ZqxAy07jF2a+BtvSWiOXEOiQEnh3JcM/nP/tdi
/NEgQgzv/cl1mboewMRLSWoUYmK+N87+tjm6U4iM3L9Y9/1BDj8ZiieT/z3HYXhc
IV7JXEgaj6pgCxQJoTHeD1k67HAzutFyjOG6lhf6+wORQsz0W9I1re/SUWUcXshI
yoXuxUIt61t2Q68QOFa4i6iZtFnD4OQqeQX+l0oDv8phF6+YisBpRQvxW4ZJKzt0
onyZDrNyxaByWrdOb9sXHJCazZkcGDiXRG8l0YsfvdVz/q43rwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGY8eNdpvxXpKc7bub4Y36h8NuOhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTcwZGRjNjgtMzI5Ni0z
NzE1LTkwMDgtMmEyZWIxMGZkYTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzY3MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFh4hH7euUM/q23NAsTICQW5wxTMafia4autOssA4u034pF0uGBGEUy7
jcm95TWQd/nlavW39PdoZLGJKweKxvqMYCdqfpr/xmsnYp/GEWiDnOyxnIm3rE+z
zuT3xVTyKPcy5D/+ojvODGKCnLll30VFogki5AmIz9WUwVhn58egHvlbPdGwpsMn
VFsdU7+iUclL8Tgaw55fmPksNRmPdBObPkhOx7uSGhWrM1y60CqZANpHI6eJZUUs
hp/SVIWim621SACeRC4dS3nfv5SUzb/UM9IJCXXYDALR7RcWl1Ei24TnDlAIUOOQ
HMnaJfHQ+K16rjmmnBpkX1LLeReXhvQ=
-----END CERTIFICATE-----
Generated at Wed Jul 30 23:46:37 2025 by rpki-client