Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/cfeacbf8-b239-326a-957a-940599c9e042.roa
File:                     cfeacbf8-b239-326a-957a-940599c9e042.roa (raw, json)
Hash identifier:          naxvaJhtUhCWZdlOLwUMrqOPorIImu0UILVB5naxdEs=
Subject key identifier:   9B:5A:B5:13:A7:31:23:67:08:DB:96:10:29:CC:44:C5:F6:B1:2B:FD
Certificate issuer:       /CN=12380a37-68ce-4e9c-9585-53cd09071ada
Certificate serial:       010D0C9F4328584A66C06667824F3CDF530E8280
Authority key identifier: 0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/cfeacbf8-b239-326a-957a-940599c9e042.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     62523
IP address blocks:        76.78.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:66:67:82:4f:3c:df:53:0e:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12380a37-68ce-4e9c-9585-53cd09071ada
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=b86cd574-1e3a-4413-8018-830cf5e5d2f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:20:00:02:19:6f:42:b3:ee:03:4e:be:59:94:
                    f1:47:b0:40:78:cf:c0:bb:fd:81:2a:d3:93:12:da:
                    59:3f:09:e7:18:25:5b:76:30:2a:e3:c4:08:a9:23:
                    34:18:88:b0:63:9c:e6:68:66:f9:13:1b:15:fc:7e:
                    cb:00:28:5f:b6:ff:da:5c:36:37:4a:15:3c:9b:03:
                    8e:00:a2:cc:d4:00:fb:0b:97:ff:d3:d0:c6:c0:37:
                    cb:49:82:86:06:44:af:39:e8:1a:60:0d:d2:47:fa:
                    8c:66:bb:d5:0c:8b:94:26:72:13:0a:9e:e2:74:f4:
                    1d:31:b0:3b:0e:d0:21:35:41:75:64:28:62:7f:4b:
                    57:3e:44:0d:30:d7:34:1e:b0:84:b7:a8:1b:a4:6e:
                    b5:93:f8:f3:36:85:ef:5f:61:c5:f9:ed:cc:97:5b:
                    0a:cf:74:8f:6d:5b:a9:b0:98:a0:c6:51:45:80:97:
                    79:36:da:92:55:fb:d2:05:e5:47:dd:d8:32:9a:18:
                    7e:bc:f7:b7:9c:e6:4e:54:28:70:09:de:22:9e:48:
                    3b:df:2f:f9:73:77:2b:c4:1b:f3:49:04:29:00:02:
                    99:dd:bc:ba:38:97:2a:a8:57:05:27:1d:c6:4d:f4:
                    d5:f8:b6:af:ac:1f:9e:dc:6a:eb:fd:97:39:51:c7:
                    e5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5A:B5:13:A7:31:23:67:08:DB:96:10:29:CC:44:C5:F6:B1:2B:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/cfeacbf8-b239-326a-957a-940599c9e042.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl

            X509v3 Authority Key Identifier:
                keyid:0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.78.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:f5:36:43:16:42:71:4d:7d:0f:5e:47:65:14:ba:77:4c:34:
         85:9c:0d:e0:6f:41:1b:e9:c9:d6:f4:5a:8f:c5:48:7c:db:d7:
         b9:4d:fd:1a:1e:05:1a:a4:b9:d3:3f:ed:30:63:78:bf:6d:84:
         c7:be:b2:fc:93:c6:96:53:f8:97:ea:be:a0:ca:30:0a:08:41:
         c8:fa:e0:69:17:4b:de:b5:5f:fe:a3:03:c8:c5:ef:7f:ac:71:
         30:8f:ea:08:e1:28:a1:2a:01:ec:72:a1:2e:b5:6f:52:e8:a2:
         71:46:e3:74:a7:c3:c6:fe:35:e0:b4:b2:fb:81:bb:4b:81:1a:
         55:99:0b:08:fe:3d:96:1b:b7:57:34:4c:29:bf:f9:ce:7b:a7:
         de:41:b3:02:a9:3b:ed:04:37:76:e8:86:61:ec:71:fc:1d:ac:
         15:da:89:47:00:d6:a3:08:5c:20:4d:ac:4f:a5:2f:6d:eb:ca:
         66:bd:19:67:aa:1c:cc:aa:f8:5e:d9:4f:f4:4e:63:fd:cd:0e:
         49:73:ca:5a:ea:79:43:f5:5e:09:8c:e4:c7:61:90:a9:39:7d:
         d5:30:5e:ea:b2:af:2b:8e:3a:6e:c0:aa:7e:5d:dd:7d:d0:48:
         14:60:6a:ed:b7:40:f1:89:65:e0:73:f5:84:9c:6e:1d:84:ba:
         71:01:23:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwGZngk8831MOgoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTIzODBhMzctNjhjZS00ZTljLTk1ODUtNTNjZDA5MDcx
YWRhMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk
Yjg2Y2Q1NzQtMWUzYS00NDEzLTgwMTgtODMwY2Y1ZTVkMmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyAAAhlvQrPuA06+WZTxR7BAeM/Au/2BKtOT
EtpZPwnnGCVbdjAq48QIqSM0GIiwY5zmaGb5ExsV/H7LAChftv/aXDY3ShU8mwOO
AKLM1AD7C5f/09DGwDfLSYKGBkSvOegaYA3SR/qMZrvVDIuUJnITCp7idPQdMbA7
DtAhNUF1ZChif0tXPkQNMNc0HrCEt6gbpG61k/jzNoXvX2HF+e3Ml1sKz3SPbVup
sJigxlFFgJd5NtqSVfvSBeVH3dgymhh+vPe3nOZOVChwCd4inkg73y/5c3crxBvz
SQQpAAKZ3by6OJcqqFcFJx3GTfTV+LavrB+e3Grr/Zc5UcflFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJtatROnMSNnCNuWECnMRMX2sSv9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMjM4
MGEzNy02OGNlLTRlOWMtOTU4NS01M2NkMDkwNzFhZGEvY2ZlYWNiZjgtYjIzOS0z
MjZhLTk1N2EtOTQwNTk5YzllMDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTIzODBhMzctNjhjZS00ZTljLTk1
ODUtNTNjZDA5MDcxYWRhLzEyMzgwYTM3LTY4Y2UtNGU5Yy05NTg1LTUzY2QwOTA3
MWFkYS5jcmwwHwYDVR0jBBgwFoAUC+v8Zzc9d2IVQpU/rmHdVlHBuaIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMjM4MGEzNy02OGNlLTRlOWMtOTU4NS01M2Nk
MDkwNzFhZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATE76MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA71NkMWQnFNfQ9eR2UUundMNIWcDeBvQRvpydb0Wo/FSHzb17lN/Roe
BRqkudM/7TBjeL9thMe+svyTxpZT+JfqvqDKMAoIQcj64GkXS961X/6jA8jF73+s
cTCP6gjhKKEqAexyoS61b1LoonFG43Snw8b+NeC0svuBu0uBGlWZCwj+PZYbt1c0
TCm/+c57p95BswKpO+0EN3bohmHscfwdrBXaiUcA1qMIXCBNrE+lL23ryma9GWeq
HMyq+F7ZT/ROY/3NDklzylrqeUP1XgmM5MdhkKk5fdUwXuqyryuOOm7Aqn5d3X3Q
SBRgau23QPGJZeBz9YScbh2EunEBI1A=
-----END CERTIFICATE-----
Generated at Fri Aug 1 18:11:39 2025 by rpki-client