Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a080b260-2012-373f-9010-a38709b84ea4.roa
File:                     a080b260-2012-373f-9010-a38709b84ea4.roa (raw, json)
Hash identifier:          QFBVjBaK2uKwsTZefhwrTK2C9TW2/IKx0rFZ8g7Cs5g=
Subject key identifier:   3D:F1:ED:A8:0E:AE:0E:3F:28:E1:06:A2:18:8F:66:BE:82:B2:D0:F3
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F17FD43F3C66854D724E6D00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a080b260-2012-373f-9010-a38709b84ea4.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     202
IP address blocks:        192.208.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:d4:3f:3c:66:85:4d:72:4e:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=ff81084d-0a2d-40ee-ba5d-44d09478a6f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:22:22:c9:66:2e:82:7d:9f:02:4d:5d:90:d3:
                    ac:41:6c:6c:20:84:92:32:b1:26:ba:74:7e:8c:71:
                    78:7e:e3:67:6d:90:19:8b:7e:0f:d5:38:c6:09:07:
                    b8:24:bf:6e:ce:7f:bc:e9:17:4c:ec:9b:20:e5:6a:
                    a9:28:7d:26:05:28:ea:70:9b:17:3b:ed:7f:b2:7e:
                    d6:5f:c0:1a:83:b2:c8:cf:d7:24:c2:96:17:74:07:
                    31:49:26:d2:48:11:cf:1c:cd:b7:94:c5:62:91:75:
                    ae:c5:5f:2f:b7:46:a8:45:d1:45:62:e8:77:cc:3c:
                    82:ef:c0:dd:26:7f:38:75:92:10:83:a0:13:7e:d5:
                    bd:96:ca:43:ab:e4:54:b6:7d:84:c8:5a:1d:6f:65:
                    43:81:5f:8d:cc:88:48:55:6c:75:42:4b:b4:b2:4d:
                    33:9b:e5:ef:55:91:88:a0:08:3f:28:3b:35:25:0b:
                    2d:f3:5b:a9:9c:8d:5f:9c:9b:72:18:71:4a:c1:d1:
                    c4:58:ec:cd:a8:d5:c8:c4:41:34:5d:f2:64:ca:77:
                    28:5b:b8:d0:97:31:3e:0c:a9:89:68:cf:61:64:bd:
                    45:f3:63:d5:88:fa:76:d0:99:76:31:91:97:e9:8c:
                    e3:97:bc:9f:d8:89:2b:32:28:f3:ea:a3:bb:7c:08:
                    58:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F1:ED:A8:0E:AE:0E:3F:28:E1:06:A2:18:8F:66:BE:82:B2:D0:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a080b260-2012-373f-9010-a38709b84ea4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:a4:9d:31:f2:55:23:41:83:78:d2:d8:80:1d:c4:ea:c2:b8:
         47:23:65:4f:2c:57:e1:24:30:48:6d:31:ea:84:7b:0d:1f:71:
         93:30:2e:35:bf:12:9b:1d:56:c0:70:77:36:5a:9e:b4:63:5b:
         2b:31:8d:b4:53:16:b6:be:a6:be:57:30:a0:1c:b6:ef:b9:75:
         78:ab:00:1e:c7:bc:d2:ce:66:b0:86:40:3d:65:d1:22:7d:94:
         e9:14:f5:6c:06:8b:9e:a2:68:c9:20:24:1b:a6:84:b9:6b:71:
         0d:69:fd:28:04:be:91:50:f6:1d:6e:94:dd:4d:45:06:2f:cb:
         f2:2c:95:e2:f1:98:61:54:78:05:aa:fc:03:44:8d:36:96:64:
         bc:ea:66:50:de:01:d2:79:56:ac:93:4c:8f:fb:6e:06:67:fb:
         a3:58:40:fb:86:5a:b7:d6:27:0c:74:99:53:c5:7c:7c:be:74:
         d8:9b:1a:07:57:5f:cf:83:5f:9a:05:d1:5f:41:ca:18:53:67:
         90:81:6b:89:fb:ff:16:36:2b:a2:f2:50:b5:63:60:23:41:3c:
         2a:33:1d:fa:13:4f:98:27:b2:30:a1:22:e1:7b:8f:d0:de:d2:
         fa:e9:ce:de:9b:8d:73:14:a7:23:d2:4b:62:e6:29:39:93:d5:
         fa:c3:38:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf9Q/PGaFTXJObQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
ZmY4MTA4NGQtMGEyZC00MGVlLWJhNWQtNDRkMDk0NzhhNmY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiIiyWYugn2fAk1dkNOsQWxsIISSMrEmunR+
jHF4fuNnbZAZi34P1TjGCQe4JL9uzn+86RdM7Jsg5WqpKH0mBSjqcJsXO+1/sn7W
X8Aag7LIz9ckwpYXdAcxSSbSSBHPHM23lMVikXWuxV8vt0aoRdFFYuh3zDyC78Dd
Jn84dZIQg6ATftW9lspDq+RUtn2EyFodb2VDgV+NzIhIVWx1Qku0sk0zm+XvVZGI
oAg/KDs1JQst81upnI1fnJtyGHFKwdHEWOzNqNXIxEE0XfJkyncoW7jQlzE+DKmJ
aM9hZL1F82PViPp20Jl2MZGX6Yzjl7yf2IkrMijz6qO7fAhYnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD3x7agOrg4/KOEGohiPZr6CstDzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTA4MGIyNjAtMjAxMi0z
NzNmLTkwMTAtYTM4NzA5Yjg0ZWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwNAlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEWknTHyVSNBg3jS2IAdxOrCuEcjZU8sV+EkMEhtMeqEew0fcZMwLjW/
EpsdVsBwdzZanrRjWysxjbRTFra+pr5XMKActu+5dXirAB7HvNLOZrCGQD1l0SJ9
lOkU9WwGi56iaMkgJBumhLlrcQ1p/SgEvpFQ9h1ulN1NRQYvy/IsleLxmGFUeAWq
/ANEjTaWZLzqZlDeAdJ5VqyTTI/7bgZn+6NYQPuGWrfWJwx0mVPFfHy+dNibGgdX
X8+DX5oF0V9ByhhTZ5CBa4n7/xY2K6LyULVjYCNBPCozHfoTT5gnsjChIuF7j9De
0vrpzt6bjXMUpyPSS2LmKTmT1frDOP8=
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:13:34 2025 by rpki-client