Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/762fb9da-1e64-46dd-8f1f-dd257fd1cc9c/9c197608-6929-3870-a43a-53f0d02d3ab5.roa
File:                     9c197608-6929-3870-a43a-53f0d02d3ab5.roa (raw, json)
Hash identifier:          MMN8VagoCVWcQrKsmMK2zZp2eaSDyDNcm5bjvQusrTw=
Subject key identifier:   59:B7:71:5F:A4:BF:86:39:97:D3:F0:20:02:90:BF:8E:23:98:79:E4
Certificate issuer:       /CN=762fb9da-1e64-46dd-8f1f-dd257fd1cc9c
Certificate serial:       010D0C9F4328584B12716664C70F01D6FC7F41E6
Authority key identifier: 98:20:A3:61:27:44:13:15:E7:23:D9:AB:DC:B2:18:12:C7:2C:68:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/762fb9da-1e64-46dd-8f1f-dd257fd1cc9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/762fb9da-1e64-46dd-8f1f-dd257fd1cc9c/9c197608-6929-3870-a43a-53f0d02d3ab5.roa
Signing time:             Wed 03 Sep 2025 13:00:41 +0000
ROA not before:           Wed 03 Sep 2025 13:00:41 +0000
ROA not after:            Tue 02 Dec 2025 14:00:41 +0000
asID:                     376
IP address blocks:        205.236.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/762fb9da-1e64-46dd-8f1f-dd257fd1cc9c/762fb9da-1e64-46dd-8f1f-dd257fd1cc9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/762fb9da-1e64-46dd-8f1f-dd257fd1cc9c/762fb9da-1e64-46dd-8f1f-dd257fd1cc9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/762fb9da-1e64-46dd-8f1f-dd257fd1cc9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:12:71:66:64:c7:0f:01:d6:fc:7f:41:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762fb9da-1e64-46dd-8f1f-dd257fd1cc9c
        Validity
            Not Before: Sep  3 13:00:41 2025 GMT
            Not After : Dec  2 14:00:41 2025 GMT
        Subject: CN=93712809-de90-4f75-a1df-c3b5785555e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f8:af:39:52:49:c3:89:14:8e:55:22:6e:00:
                    84:5e:ea:18:08:18:86:2d:5a:4f:60:44:d7:80:31:
                    2e:dc:f4:e2:78:d3:41:41:fc:f9:75:56:e6:87:44:
                    e2:06:f7:f3:53:65:25:95:75:54:94:8a:e4:df:e6:
                    4f:8a:c3:44:3c:cf:46:d6:6f:07:f5:8b:14:bd:b7:
                    3f:9b:bb:ad:d4:d6:9a:c8:0a:1d:5e:38:d9:8c:d7:
                    bd:b9:43:cd:5f:c4:c6:d1:e0:33:fe:34:05:38:6f:
                    77:e1:75:1a:fb:fa:d6:1e:57:1a:63:d3:2c:e4:27:
                    ec:ae:15:86:e4:23:3a:3d:c0:ae:1d:da:54:04:34:
                    68:02:b6:6b:e6:4b:88:a4:75:bb:d2:ba:40:87:fb:
                    55:98:59:77:5f:1e:9c:3b:a9:c1:45:f6:74:ac:b1:
                    f2:03:29:69:46:a4:e4:ca:85:6b:ff:26:99:b6:ac:
                    60:84:c3:55:54:57:18:d4:22:a2:dd:c8:1f:7b:e6:
                    20:d8:87:52:03:89:31:7c:3d:b0:36:39:13:5a:4e:
                    5c:00:ca:b3:04:a7:97:a6:7a:93:bd:c7:a9:9f:c0:
                    e1:c4:e3:0e:40:0a:5d:5d:57:40:78:0a:68:cf:e6:
                    e7:48:fb:28:29:00:cf:7c:8e:b2:df:7d:39:d0:3c:
                    18:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B7:71:5F:A4:BF:86:39:97:D3:F0:20:02:90:BF:8E:23:98:79:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/762fb9da-1e64-46dd-8f1f-dd257fd1cc9c/9c197608-6929-3870-a43a-53f0d02d3ab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/762fb9da-1e64-46dd-8f1f-dd257fd1cc9c/762fb9da-1e64-46dd-8f1f-dd257fd1cc9c.crl

            X509v3 Authority Key Identifier:
                keyid:98:20:A3:61:27:44:13:15:E7:23:D9:AB:DC:B2:18:12:C7:2C:68:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/762fb9da-1e64-46dd-8f1f-dd257fd1cc9c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.236.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:29:cc:b2:69:a3:df:95:c4:31:b6:b5:69:26:98:b5:b2:e8:
         a0:e4:f9:35:f9:99:02:3c:db:73:4d:00:a0:8e:b3:72:53:fd:
         eb:3e:12:e5:1b:32:6b:85:2a:e1:74:a3:df:ca:4a:30:0b:ff:
         6e:2b:ed:6e:5f:40:f4:0b:22:6a:51:f5:e6:86:a6:e6:39:83:
         1e:5b:0c:05:06:f3:32:75:95:59:3c:26:17:48:42:cd:96:cd:
         1e:76:e2:2f:aa:a9:c6:c8:4b:35:c2:00:ba:19:91:6a:61:36:
         72:04:1a:9b:3e:68:91:d2:86:c1:99:88:d3:e1:2f:d9:1e:04:
         76:ec:32:48:41:88:34:d1:12:6a:7a:83:ae:be:8d:5c:2e:db:
         0e:01:37:c6:40:a2:fd:5b:63:24:41:53:b4:7b:45:58:27:c0:
         5d:d7:df:9b:0b:6d:5a:e2:bb:c2:33:38:95:00:cc:25:4c:52:
         a7:52:0d:f1:71:f5:08:87:90:f8:72:e4:97:33:0d:07:25:69:
         77:73:bd:0f:75:c4:5a:b9:4c:50:54:08:ae:db:71:fd:88:78:
         cd:c8:5f:a5:11:0b:f1:a5:09:3f:a5:87:45:ab:34:6e:2e:be:
         77:b7:a8:ad:04:0d:9b:a7:6c:9a:28:c7:88:ab:3a:7e:d1:f5:
         9e:31:f3:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsScWZkxw8B1vx/QeYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzYyZmI5ZGEtMWU2NC00NmRkLThmMWYtZGQyNTdmZDFj
YzljMB4XDTI1MDkwMzEzMDA0MVoXDTI1MTIwMjE0MDA0MVowLzEtMCsGA1UEAxMk
OTM3MTI4MDktZGU5MC00Zjc1LWExZGYtYzNiNTc4NTU1NWUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvivOVJJw4kUjlUibgCEXuoYCBiGLVpPYETX
gDEu3PTieNNBQfz5dVbmh0TiBvfzU2UllXVUlIrk3+ZPisNEPM9G1m8H9YsUvbc/
m7ut1NaayAodXjjZjNe9uUPNX8TG0eAz/jQFOG934XUa+/rWHlcaY9Ms5CfsrhWG
5CM6PcCuHdpUBDRoArZr5kuIpHW70rpAh/tVmFl3Xx6cO6nBRfZ0rLHyAylpRqTk
yoVr/yaZtqxghMNVVFcY1CKi3cgfe+Yg2IdSA4kxfD2wNjkTWk5cAMqzBKeXpnqT
vcepn8DhxOMOQApdXVdAeApoz+bnSPsoKQDPfI6y33050DwYCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFm3cV+kv4Y5l9PwIAKQv44jmHnkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83NjJm
YjlkYS0xZTY0LTQ2ZGQtOGYxZi1kZDI1N2ZkMWNjOWMvOWMxOTc2MDgtNjkyOS0z
ODcwLWE0M2EtNTNmMGQwMmQzYWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNzYyZmI5ZGEtMWU2NC00NmRkLThm
MWYtZGQyNTdmZDFjYzljLzc2MmZiOWRhLTFlNjQtNDZkZC04ZjFmLWRkMjU3ZmQx
Y2M5Yy5jcmwwHwYDVR0jBBgwFoAUmCCjYSdEExXnI9mr3LIYEscsaAwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy83NjJmYjlkYS0xZTY0LTQ2ZGQtOGYxZi1kZDI1
N2ZkMWNjOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzexMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADwpzLJpo9+VxDG2tWkmmLWy6KDk+TX5mQI823NNAKCOs3JT/es+EuUb
MmuFKuF0o9/KSjAL/24r7W5fQPQLImpR9eaGpuY5gx5bDAUG8zJ1lVk8JhdIQs2W
zR524i+qqcbISzXCALoZkWphNnIEGps+aJHShsGZiNPhL9keBHbsMkhBiDTREmp6
g66+jVwu2w4BN8ZAov1bYyRBU7R7RVgnwF3X35sLbVriu8IzOJUAzCVMUqdSDfFx
9QiHkPhy5JczDQclaXdzvQ91xFq5TFBUCK7bcf2IeM3IX6URC/GlCT+lh0WrNG4u
vne3qK0EDZunbJoox4irOn7R9Z4x83k=
-----END CERTIFICATE-----
Generated at Mon Sep 15 10:44:51 2025 by rpki-client