Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/12bedcfa-5d84-39dc-9c77-a74dab5a5c5f.roa
File:                     12bedcfa-5d84-39dc-9c77-a74dab5a5c5f.roa (raw, json)
Hash identifier:          ivo37HNQ3FQ4NoeVYZGuhpY101AKx+ayGcncW2sZDk4=
Subject key identifier:   CE:3F:55:9C:D5:B7:46:C2:4C:D4:39:00:4B:75:45:22:ED:6C:4B:C1
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AAB266371019F48B179CA4340
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/12bedcfa-5d84-39dc-9c77-a74dab5a5c5f.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     3360
IP address blocks:        204.103.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:63:71:01:9f:48:b1:79:ca:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=3a6ea5c3-c7fa-4fb2-84bc-0ae791d8de5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:00:d4:de:ce:f5:6e:ef:70:1f:df:fb:04:8d:
                    4e:0e:c8:bb:bd:32:ce:7d:12:05:da:63:1d:e9:4b:
                    ad:b2:2a:66:44:9c:9b:17:05:90:e8:bb:e2:cf:9a:
                    84:4b:34:8a:52:8a:6a:0b:46:8a:5a:07:18:67:90:
                    db:4c:80:bc:a7:3e:4d:0d:e9:44:56:5b:dd:34:65:
                    c4:0d:0d:48:69:44:6e:57:42:7a:9c:98:87:6b:b7:
                    4b:45:0b:b4:34:3d:6e:34:80:d1:5f:e2:d2:1a:f5:
                    27:92:77:ec:a3:13:31:04:3d:0e:4f:a9:7f:90:00:
                    e0:8b:6d:1b:83:e6:f7:48:d8:a3:59:73:4b:22:15:
                    6a:fb:c1:fd:dc:26:10:23:0c:8c:61:6d:e7:64:47:
                    c9:c9:22:52:b0:e8:d6:e4:a3:e6:63:4f:5d:1f:5c:
                    58:0d:16:43:fb:e6:c1:93:b6:b9:65:c3:fa:6a:00:
                    5f:be:ee:ba:eb:f2:40:0a:cf:e4:e6:ae:91:2c:3b:
                    60:13:0d:3b:c7:87:88:9c:58:c8:af:27:9d:a5:72:
                    8f:be:d6:a2:ba:7a:9f:f6:2f:f7:10:8e:3a:f1:06:
                    26:e2:ab:cd:f7:38:b3:0a:9b:41:4f:04:4d:41:59:
                    cd:58:18:0e:9e:0f:19:5c:d9:2e:d3:b8:43:8c:2b:
                    41:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3F:55:9C:D5:B7:46:C2:4C:D4:39:00:4B:75:45:22:ED:6C:4B:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/12bedcfa-5d84-39dc-9c77-a74dab5a5c5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.103.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:f2:88:89:ef:cf:0c:d7:ce:13:a4:da:28:7c:9c:0f:b3:0b:
         6f:b4:ad:a7:ff:7c:5f:e9:a1:5d:5b:38:1d:62:95:e0:32:bb:
         4f:8e:34:91:89:54:9f:a5:45:87:03:d4:b0:89:28:49:50:b9:
         8f:f4:9e:49:54:07:85:ef:6a:38:2d:21:8a:30:cd:a3:27:b4:
         3f:89:1f:64:d9:05:9b:b0:93:c7:70:dd:40:a4:13:78:80:84:
         a0:82:3d:ff:74:c1:a2:c3:99:00:2a:d1:a5:8f:1a:c2:bd:5a:
         a2:6d:bc:1d:7c:44:39:6a:17:4f:fb:12:96:87:ad:ab:c2:22:
         40:58:11:89:bd:20:f1:91:ec:ba:d4:fc:d4:91:4e:bd:94:11:
         5f:1e:b0:aa:f6:d4:d1:2c:e5:59:ce:39:9e:1a:f8:a4:20:1d:
         78:ca:0a:aa:b4:20:1e:d1:bf:04:c4:e1:ba:f1:22:5c:02:9a:
         62:be:ae:62:09:86:4b:81:d0:df:6e:39:c8:aa:24:5a:28:40:
         81:84:49:7f:ba:24:2a:ef:99:32:23:4d:3a:f7:c7:eb:61:93:
         f8:ed:70:20:68:a4:ac:88:7d:41:16:75:6d:7c:80:05:2e:5c:
         9b:42:a6:f0:16:00:21:a8:95:72:be:81:59:e2:af:de:c5:e2:
         3d:06:b3:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJmNxAZ9IsXnKQ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk
M2E2ZWE1YzMtYzdmYS00ZmIyLTg0YmMtMGFlNzkxZDhkZTViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwDU3s71bu9wH9/7BI1ODsi7vTLOfRIF2mMd
6UutsipmRJybFwWQ6Lviz5qESzSKUopqC0aKWgcYZ5DbTIC8pz5NDelEVlvdNGXE
DQ1IaURuV0J6nJiHa7dLRQu0ND1uNIDRX+LSGvUnknfsoxMxBD0OT6l/kADgi20b
g+b3SNijWXNLIhVq+8H93CYQIwyMYW3nZEfJySJSsOjW5KPmY09dH1xYDRZD++bB
k7a5ZcP6agBfvu666/JACs/k5q6RLDtgEw07x4eInFjIryedpXKPvtaiunqf9i/3
EI468QYm4qvN9zizCptBTwRNQVnNWBgOng8ZXNku07hDjCtBKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM4/VZzVt0bCTNQ5AEt1RSLtbEvBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTJiZWRjZmEtNWQ4NC0z
OWRjLTljNzctYTc0ZGFiNWE1YzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzGdwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGjyiInvzwzXzhOk2ih8nA+zC2+0raf/fF/poV1bOB1ileAyu0+ONJGJ
VJ+lRYcD1LCJKElQuY/0nklUB4XvajgtIYowzaMntD+JH2TZBZuwk8dw3UCkE3iA
hKCCPf90waLDmQAq0aWPGsK9WqJtvB18RDlqF0/7EpaHravCIkBYEYm9IPGR7LrU
/NSRTr2UEV8esKr21NEs5VnOOZ4a+KQgHXjKCqq0IB7RvwTE4brxIlwCmmK+rmIJ
hkuB0N9uOciqJFooQIGESX+6JCrvmTIjTTr3x+thk/jtcCBopKyIfUEWdW18gAUu
XJtCpvAWACGolXK+gVnir97F4j0Gs8s=
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:10:49 2025 by rpki-client