Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d20fa90b-4fff-3cd8-af23-dde52f5fe0c7.roa
File:                     d20fa90b-4fff-3cd8-af23-dde52f5fe0c7.roa (raw, json)
Hash identifier:          jilbjUQU+onNPQ57uz2E/oSAbHhDt0EVP/Xc/varXgE=
Subject key identifier:   61:D1:9C:21:75:C8:4B:F0:94:DA:BD:10:92:03:29:01:C5:07:C9:A2
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B0746B8C726863705E5E8D4C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d20fa90b-4fff-3cd8-af23-dde52f5fe0c7.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     3356
IP address blocks:        204.103.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:b8:c7:26:86:37:05:e5:e8:d4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=66014769-4e70-4e86-a814-a31edc767f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ff:d0:82:23:99:4c:ac:0a:41:25:a0:bf:af:
                    40:59:8b:bf:11:ea:c0:67:5a:b3:af:00:4d:fd:fc:
                    8e:39:8f:77:4f:95:29:59:d5:7d:e1:02:14:29:7a:
                    79:ac:ee:d1:31:ef:49:5d:2f:e9:d1:b3:32:29:ce:
                    cb:1b:b7:da:06:e2:ef:d2:7a:d4:1c:9f:33:c4:e7:
                    b0:a0:41:27:7a:fc:ee:6f:ab:69:2a:a8:31:2c:51:
                    25:8d:d6:4e:e7:b7:35:19:22:f0:82:de:08:71:a9:
                    cc:aa:a4:0a:d1:88:c9:a8:b7:8a:fd:d3:c4:69:45:
                    59:5a:4f:68:95:48:09:ba:6a:49:c0:0b:80:83:22:
                    71:e7:12:25:42:d5:9c:fc:7e:a2:59:81:52:7d:dc:
                    0e:b4:f2:14:bf:0c:5e:eb:fc:2f:c6:e0:09:ce:23:
                    85:04:20:99:1f:70:06:a7:fc:96:3c:94:e0:23:42:
                    e9:38:b0:78:a8:68:d7:89:d7:cb:ee:71:a4:d8:e5:
                    89:b0:73:d4:36:57:ad:12:2a:a5:bd:c2:a5:24:b9:
                    be:d4:40:eb:a7:b7:38:05:39:af:31:38:15:e0:15:
                    ce:c0:fb:b4:7b:d9:e5:39:52:f7:9f:e0:b1:5b:99:
                    22:17:fb:53:67:42:85:18:c8:72:f8:f2:10:82:76:
                    9d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D1:9C:21:75:C8:4B:F0:94:DA:BD:10:92:03:29:01:C5:07:C9:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d20fa90b-4fff-3cd8-af23-dde52f5fe0c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.103.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:ce:55:71:7f:6b:cc:d8:71:de:78:c4:2c:d0:bf:44:90:5f:
         db:46:c2:af:30:04:8b:e8:ea:a5:73:11:d1:09:d8:5c:22:cc:
         54:db:83:ec:34:6c:57:f2:79:65:26:df:45:33:3c:43:ba:8a:
         9a:c6:fb:9f:90:88:f3:d1:80:1c:a7:a7:aa:6a:83:cf:94:5d:
         93:eb:8e:02:80:6c:14:ae:82:ae:1c:b3:fd:b0:24:11:1a:0c:
         22:2a:30:ee:3f:c1:ed:1e:3b:12:37:46:a6:bd:c7:21:12:1b:
         42:15:d3:16:a3:26:a4:c9:6c:30:37:fd:e7:2f:fa:74:7e:ee:
         69:3b:90:5b:27:68:83:a1:49:c7:d0:c8:2d:e0:a8:4a:b3:d4:
         ac:d5:06:f2:cf:1a:ed:00:6c:f0:cf:1c:4b:e5:22:f1:08:1a:
         96:ca:eb:26:2b:b3:02:ba:6d:d7:0e:f5:46:22:a3:bd:92:61:
         5a:c7:49:1d:4a:8a:4e:c7:7d:6f:26:71:2a:44:09:76:a0:ca:
         06:af:b8:c1:ac:19:0c:56:54:9e:cb:00:1c:e7:37:af:68:45:
         ad:47:17:21:5d:cf:e0:86:13:fe:2d:2f:8d:b5:90:b1:a6:ef:
         60:dd:d8:77:33:33:a9:f4:06:00:e6:04:d6:e0:39:6a:3c:35:
         ac:b7:61:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRrjHJoY3BeXo1MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk
NjYwMTQ3NjktNGU3MC00ZTg2LWE4MTQtYTMxZWRjNzY3ZjIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv/QgiOZTKwKQSWgv69AWYu/EerAZ1qzrwBN
/fyOOY93T5UpWdV94QIUKXp5rO7RMe9JXS/p0bMyKc7LG7faBuLv0nrUHJ8zxOew
oEEnevzub6tpKqgxLFEljdZO57c1GSLwgt4IcanMqqQK0YjJqLeK/dPEaUVZWk9o
lUgJumpJwAuAgyJx5xIlQtWc/H6iWYFSfdwOtPIUvwxe6/wvxuAJziOFBCCZH3AG
p/yWPJTgI0LpOLB4qGjXidfL7nGk2OWJsHPUNletEiqlvcKlJLm+1EDrp7c4BTmv
MTgV4BXOwPu0e9nlOVL3n+CxW5kiF/tTZ0KFGMhy+PIQgnad8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGHRnCF1yEvwlNq9EJIDKQHFB8miMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDIwZmE5MGItNGZmZi0z
Y2Q4LWFmMjMtZGRlNTJmNWZlMGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzGcuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF3OVXF/a8zYcd54xCzQv0SQX9tGwq8wBIvo6qVzEdEJ2FwizFTbg+w0
bFfyeWUm30UzPEO6iprG+5+QiPPRgBynp6pqg8+UXZPrjgKAbBSugq4cs/2wJBEa
DCIqMO4/we0eOxI3Rqa9xyESG0IV0xajJqTJbDA3/ecv+nR+7mk7kFsnaIOhScfQ
yC3gqEqz1KzVBvLPGu0AbPDPHEvlIvEIGpbK6yYrswK6bdcO9UYio72SYVrHSR1K
ik7HfW8mcSpECXagygavuMGsGQxWVJ7LABznN69oRa1HFyFdz+CGE/4tL421kLGm
72Dd2HczM6n0BgDmBNbgOWo8Nay3YTo=
-----END CERTIFICATE-----
Generated at Thu Sep 18 20:46:17 2025 by rpki-client