Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/e376c5d0-fcf2-335b-9ebd-52755e943374.roa
File:                     e376c5d0-fcf2-335b-9ebd-52755e943374.roa (raw, json)
Hash identifier:          wp8M9zephl9/bI5EVSdoLQzGfcmqnHdycbAsDLS8K4Y=
Subject key identifier:   87:64:BD:E7:DC:64:46:7F:63:D0:B8:BA:89:E4:EA:E4:FD:DC:EB:CE
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F4328584B0746B014B9AF2E436C978920
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/e376c5d0-fcf2-335b-9ebd-52755e943374.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     12189
IP address blocks:        67.43.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:b0:14:b9:af:2e:43:6c:97:89:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=beda36be-3d62-4193-9958-830b300306c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2f:b4:b6:bc:3b:af:69:8c:e9:99:c2:9b:b9:
                    2d:ef:8a:86:8a:cc:8a:98:2b:61:7e:16:b3:eb:7c:
                    75:93:66:b1:d3:e2:2c:78:ac:0c:57:4a:58:1c:60:
                    d2:a0:59:2b:d5:c0:0f:b6:f1:79:50:05:42:fb:49:
                    02:e3:6f:f7:82:7e:6c:df:97:68:dd:32:33:87:24:
                    ce:75:82:7a:3e:ac:86:77:11:46:cb:6e:c8:25:9d:
                    41:f3:f4:0d:2b:6b:60:59:48:0a:6e:f2:d2:39:36:
                    0a:cf:4b:3a:42:06:b5:e9:87:f1:0c:47:9d:90:81:
                    af:ff:2b:53:3e:69:bc:ab:2e:54:c3:1d:47:a5:a2:
                    e9:ca:82:69:a6:6d:aa:6d:7c:75:a2:cd:9e:49:03:
                    5c:0b:92:3a:4e:d0:a4:4c:38:44:ef:0d:a5:4c:3b:
                    76:ce:4d:22:39:76:7d:97:1e:67:6e:27:5f:f9:74:
                    1b:c1:52:51:49:a6:75:b2:05:9a:52:59:a8:af:fd:
                    46:90:5f:4c:4b:72:3c:64:51:fe:44:67:af:45:e9:
                    64:4f:17:28:78:84:d1:0b:43:b5:74:63:36:55:b1:
                    c2:05:84:eb:89:55:8b:17:0f:3f:68:a6:42:12:ba:
                    75:48:04:1d:f8:68:97:b1:62:d1:01:21:e2:5a:b8:
                    9e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:64:BD:E7:DC:64:46:7F:63:D0:B8:BA:89:E4:EA:E4:FD:DC:EB:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/e376c5d0-fcf2-335b-9ebd-52755e943374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:d8:dd:ca:53:6e:eb:1d:52:08:f2:ab:79:1c:e6:dd:68:5e:
         d0:a1:20:42:7f:f9:e7:13:a1:40:e5:e6:a3:9b:a6:33:a0:0c:
         4b:b4:32:fe:40:d6:0a:64:5a:37:12:96:c7:02:00:83:92:f5:
         09:dc:0e:22:3d:2d:61:8f:f8:52:ed:bd:5a:1d:0c:94:65:46:
         ab:89:28:74:bd:51:e1:55:df:2e:74:f4:82:59:ef:a4:aa:89:
         ad:30:41:48:91:5f:76:9a:a8:56:11:1e:ab:15:a2:02:16:4f:
         a7:d7:69:3a:0a:2e:b8:bb:8b:8b:5b:29:6b:d9:f2:ca:f7:e5:
         23:b3:d2:ff:b7:3c:b2:1e:2c:9b:ce:10:9a:44:de:a6:d2:0a:
         bc:ef:ac:d9:09:42:47:1f:62:9e:c7:27:4c:81:a0:37:09:da:
         8b:db:6b:cd:49:68:a7:22:4c:0d:3e:06:32:b0:ea:39:71:49:
         4c:ae:df:cd:58:bc:a6:15:f5:2f:26:67:b6:37:df:0d:6d:10:
         28:e5:a9:a9:de:6c:87:36:17:d0:b0:a2:9f:ff:9f:a0:d8:af:
         f2:e6:4f:88:36:7c:b4:e8:61:f9:f8:68:c8:cc:06:1f:d3:2c:
         93:ed:5f:3e:07:60:2d:49:bb:b1:18:58:7b:5a:1e:6e:8c:98:
         7e:85:da:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRrAUua8uQ2yXiSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli
NGU1MB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk
YmVkYTM2YmUtM2Q2Mi00MTkzLTk5NTgtODMwYjMwMDMwNmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS+0trw7r2mM6ZnCm7kt74qGisyKmCthfhaz
63x1k2ax0+IseKwMV0pYHGDSoFkr1cAPtvF5UAVC+0kC42/3gn5s35do3TIzhyTO
dYJ6PqyGdxFGy27IJZ1B8/QNK2tgWUgKbvLSOTYKz0s6Qga16YfxDEedkIGv/ytT
Pmm8qy5Uwx1HpaLpyoJppm2qbXx1os2eSQNcC5I6TtCkTDhE7w2lTDt2zk0iOXZ9
lx5nbidf+XQbwVJRSaZ1sgWaUlmor/1GkF9MS3I8ZFH+RGevRelkTxcoeITRC0O1
dGM2VbHCBYTriVWLFw8/aKZCErp1SAQd+GiXsWLRASHiWrie+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIdkvefcZEZ/Y9C4uonk6uT93OvOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk
NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvZTM3NmM1ZDAtZmNmMi0z
MzViLTllYmQtNTI3NTVlOTQzMzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3
ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5
YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3
N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQyssMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANXY3cpTbusdUgjyq3kc5t1oXtChIEJ/+ecToUDl5qObpjOgDEu0Mv5A
1gpkWjcSlscCAIOS9QncDiI9LWGP+FLtvVodDJRlRquJKHS9UeFV3y509IJZ76Sq
ia0wQUiRX3aaqFYRHqsVogIWT6fXaToKLri7i4tbKWvZ8sr35SOz0v+3PLIeLJvO
EJpE3qbSCrzvrNkJQkcfYp7HJ0yBoDcJ2ovba81JaKciTA0+BjKw6jlxSUyu381Y
vKYV9S8mZ7Y33w1tECjlqanebIc2F9Cwop//n6DYr/LmT4g2fLToYfn4aMjMBh/T
LJPtXz4HYC1Ju7EYWHtaHm6MmH6F2pk=
-----END CERTIFICATE-----
Generated at Thu Sep 18 01:01:15 2025 by rpki-client