Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b76d8dc9-7d00-364e-8103-96763c09f878.roa
File:                     b76d8dc9-7d00-364e-8103-96763c09f878.roa (raw, json)
Hash identifier:          rPwB5vIi4SVwQDgV3oXCSs2PHIJATYo2RuOBisNQRwU=
Subject key identifier:   4F:19:CB:39:2F:B4:D0:A3:CA:17:A2:E3:04:53:F8:76:31:35:4D:AE
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A698B2DAC8D7CB13D88777A00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b76d8dc9-7d00-364e-8103-96763c09f878.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     3356
IP address blocks:        204.105.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:2d:ac:8d:7c:b1:3d:88:77:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=c3efd445-2c57-48a3-a96a-6e5422923f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9d:a1:0b:22:cd:12:82:97:f2:a9:16:4c:cd:
                    2a:54:b7:90:d8:17:42:85:35:d0:af:bd:d9:a8:e0:
                    02:8f:de:2c:27:66:67:36:82:08:9a:8f:e2:07:f0:
                    79:1e:a0:d1:b3:82:91:0c:fd:a7:cd:37:2a:a4:a7:
                    da:47:3d:cb:23:9d:90:a1:8f:44:91:2f:b6:32:4a:
                    34:a5:30:0a:89:13:2f:91:b9:02:42:af:2e:92:6e:
                    02:85:9a:cf:70:2c:a8:f9:bc:f9:7b:58:32:35:5e:
                    8b:27:46:09:a2:a2:1a:e3:8a:86:be:61:71:0d:19:
                    27:0f:82:8d:0e:1d:c6:f7:ce:8f:ee:f6:09:27:39:
                    00:bf:85:87:13:00:f7:09:62:1a:b3:66:03:27:cc:
                    33:13:1e:9c:7b:b6:9a:31:e6:8a:66:e4:75:34:90:
                    63:21:a4:24:d7:02:ae:6c:55:a5:7a:30:b4:7a:9b:
                    db:ba:66:33:19:31:5e:4f:d7:f1:2e:c5:0c:9d:84:
                    d7:df:20:bd:bb:15:73:0c:51:b2:f2:12:62:34:00:
                    e8:34:02:7e:73:89:18:15:c6:0a:60:44:61:36:5e:
                    be:8a:f1:a8:10:8f:02:ea:d3:d2:5d:60:b3:94:67:
                    87:50:09:2d:0c:3a:ac:ea:0d:af:74:d6:1c:96:c0:
                    be:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:19:CB:39:2F:B4:D0:A3:CA:17:A2:E3:04:53:F8:76:31:35:4D:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b76d8dc9-7d00-364e-8103-96763c09f878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.105.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:47:92:c9:e5:92:77:14:af:ab:71:c2:ce:c3:6d:2b:70:60:
         f4:fd:43:dd:4a:ea:6b:f1:bf:45:ed:e8:6d:2b:95:9c:ed:1f:
         60:50:5b:6d:75:7b:6d:2c:2f:48:b1:dd:a5:e2:fd:00:99:bf:
         bb:02:f0:e3:0e:e3:31:df:55:66:75:e8:13:28:4f:f7:6b:04:
         6e:ec:98:49:9c:83:30:96:0f:41:7e:6e:27:08:35:cf:4e:62:
         55:f4:5d:4d:8d:ab:52:8b:93:f6:2d:7a:f5:26:22:c4:56:70:
         30:c0:29:a7:65:b6:16:f6:36:2b:d5:d4:10:48:fa:53:7a:7a:
         7a:93:4c:62:b8:52:b5:da:e8:a8:b9:40:23:2a:90:fb:ed:65:
         7c:e4:9b:c1:f1:24:01:5e:a1:95:92:bb:1e:de:58:16:b7:0e:
         82:51:5d:96:40:f2:9a:72:8c:cb:1d:9c:d8:16:ea:ff:79:e5:
         ca:c6:a2:6a:5f:47:09:a1:1e:42:98:f4:98:ea:70:87:b0:3e:
         ca:bb:4e:4d:40:ac:fe:9f:33:6f:37:ae:ca:74:d3:68:96:9d:
         22:1a:ba:10:b5:f9:c5:52:e6:74:a5:21:aa:07:88:00:bd:c6:
         ea:98:cd:70:30:4c:2c:8a:b5:29:ea:f2:f7:44:e7:86:7b:b2:
         00:26:fa:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppiy2sjXyxPYh3egAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk
YzNlZmQ0NDUtMmM1Ny00OGEzLWE5NmEtNmU1NDIyOTIzZjllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ2hCyLNEoKX8qkWTM0qVLeQ2BdChTXQr73Z
qOACj94sJ2ZnNoIImo/iB/B5HqDRs4KRDP2nzTcqpKfaRz3LI52QoY9EkS+2Mko0
pTAKiRMvkbkCQq8ukm4ChZrPcCyo+bz5e1gyNV6LJ0YJoqIa44qGvmFxDRknD4KN
Dh3G986P7vYJJzkAv4WHEwD3CWIas2YDJ8wzEx6ce7aaMeaKZuR1NJBjIaQk1wKu
bFWlejC0epvbumYzGTFeT9fxLsUMnYTX3yC9uxVzDFGy8hJiNADoNAJ+c4kYFcYK
YERhNl6+ivGoEI8C6tPSXWCzlGeHUAktDDqs6g2vdNYclsC+QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE8ZyzkvtNCjyhei4wRT+HYxNU2uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjc2ZDhkYzktN2QwMC0z
NjRlLTgxMDMtOTY3NjNjMDlmODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGkgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFVHksnlkncUr6txws7DbStwYPT9Q91K6mvxv0Xt6G0rlZztH2BQW211
e20sL0ix3aXi/QCZv7sC8OMO4zHfVWZ16BMoT/drBG7smEmcgzCWD0F+bicINc9O
YlX0XU2Nq1KLk/YtevUmIsRWcDDAKadlthb2NivV1BBI+lN6enqTTGK4UrXa6Ki5
QCMqkPvtZXzkm8HxJAFeoZWSux7eWBa3DoJRXZZA8ppyjMsdnNgW6v955crGompf
RwmhHkKY9JjqcIewPsq7Tk1ArP6fM283rsp002iWnSIauhC1+cVS5nSlIaoHiAC9
xuqYzXAwTCyKtSnq8vdE54Z7sgAm+m0=
-----END CERTIFICATE-----
Generated at Wed Jul 30 23:46:38 2025 by rpki-client