Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f3b7a3d6-f308-3253-88d3-e373e4d964ed.roa
File:                     f3b7a3d6-f308-3253-88d3-e373e4d964ed.roa (raw, json)
Hash identifier:          ERKJAde5c0t4eVKA8umKFY7yPBxrdAI0pLQGH5X8tPU=
Subject key identifier:   93:27:92:C1:58:A9:AA:C3:CC:75:C0:BA:1C:A3:C9:C2:BD:5F:10:5D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858499DBF33F8CD8A8BEB3BA51BC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f3b7a3d6-f308-3253-88d3-e373e4d964ed.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     203
IP address blocks:        204.230.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:33:f8:cd:8a:8b:eb:3b:a5:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=7ff6fe6b-671d-4f73-bb9e-79d2fe179cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1e:53:93:14:1c:d5:c5:5d:49:0a:0c:f6:1d:
                    59:e7:c4:c3:c4:75:8e:b7:a5:2c:e3:c6:b0:26:a4:
                    f9:52:b4:b8:3c:74:08:55:b4:50:5f:9a:48:df:b0:
                    60:91:22:c0:73:41:d8:49:b1:ae:46:b2:13:15:81:
                    9f:d7:03:dc:46:6e:ae:e7:d6:e8:67:dd:99:5b:dd:
                    b1:24:cb:fd:c1:b2:19:c1:90:61:da:9f:7a:f5:a5:
                    8c:fe:03:8d:7f:b4:19:50:00:58:cd:62:8e:e7:ed:
                    d2:51:8f:10:e5:87:4b:8e:e6:72:a2:b9:ca:e1:46:
                    da:25:b2:01:1e:86:db:84:3c:c8:a5:78:fa:fc:f8:
                    99:f1:cb:28:f2:9a:b8:d1:ab:1c:db:8a:de:b9:c1:
                    50:e0:9c:d4:05:b7:98:12:39:1b:1e:8b:8c:91:14:
                    37:1a:98:ab:39:31:ba:c6:c6:cd:e9:81:02:ee:1a:
                    d9:69:fe:ff:c0:51:11:a6:c5:ae:22:0f:a9:21:4b:
                    7f:ef:a0:3e:c0:51:aa:e1:52:c5:07:e8:a6:13:3b:
                    52:c5:57:95:3a:1c:da:c2:44:46:49:da:90:52:33:
                    d3:2e:0d:48:eb:2c:36:a8:7e:52:45:5b:d6:35:0c:
                    41:a4:99:94:60:57:88:6e:1b:0e:c3:d2:68:fd:0b:
                    cf:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:27:92:C1:58:A9:AA:C3:CC:75:C0:BA:1C:A3:C9:C2:BD:5F:10:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f3b7a3d6-f308-3253-88d3-e373e4d964ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.230.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f3:1e:01:a8:4e:7d:bc:db:8b:86:09:4b:34:7f:de:d6:ad:
         45:07:9c:4f:ea:55:e4:47:8f:09:6e:89:06:f5:1e:9d:a4:08:
         ef:d4:68:0b:d6:cf:b4:90:80:38:f9:57:a4:bc:d5:ce:db:a9:
         63:36:d3:8b:1b:fb:6f:60:e1:e9:fb:4e:a4:2d:e7:b6:69:04:
         70:58:ab:a2:32:88:bf:e0:41:ab:0e:b0:c6:2f:e5:60:56:df:
         ab:c7:7a:35:71:51:11:b3:27:45:b4:b6:31:40:98:64:42:d8:
         a8:43:60:34:06:fe:52:dd:32:05:6d:18:a2:2e:f6:f7:b7:c9:
         e7:fd:b5:c4:2e:a0:2f:18:18:d6:ce:fe:0a:50:e2:df:ab:07:
         da:f0:ae:38:b8:f5:3f:c4:68:cc:9d:79:44:17:4d:8a:74:95:
         ba:e4:3a:c5:82:19:6b:2b:b4:3e:e3:ad:fd:29:9c:1d:68:b9:
         35:25:30:6d:86:52:c7:13:72:3b:51:84:08:03:6e:94:5b:e3:
         ac:93:01:9a:a0:3a:79:42:eb:95:91:6d:8d:fe:61:8c:0e:af:
         de:76:21:7a:2d:ef:34:83:4c:79:db:44:32:a0:71:8c:c8:0d:
         3f:c0:8b:dd:8b:b9:8a:a3:9d:1a:f6:5c:d9:f8:bb:78:7a:94:
         e0:e2:22:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzP4zYqL6zulG8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk
N2ZmNmZlNmItNjcxZC00ZjczLWJiOWUtNzlkMmZlMTc5Y2RjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4B5TkxQc1cVdSQoM9h1Z58TDxHWOt6Us48aw
JqT5UrS4PHQIVbRQX5pI37BgkSLAc0HYSbGuRrITFYGf1wPcRm6u59boZ92ZW92x
JMv9wbIZwZBh2p969aWM/gONf7QZUABYzWKO5+3SUY8Q5YdLjuZyornK4UbaJbIB
HobbhDzIpXj6/PiZ8cso8pq40asc24reucFQ4JzUBbeYEjkbHouMkRQ3GpirOTG6
xsbN6YEC7hrZaf7/wFERpsWuIg+pIUt/76A+wFGq4VLFB+imEztSxVeVOhzawkRG
SdqQUjPTLg1I6yw2qH5SRVvWNQxBpJmUYFeIbhsOw9Jo/QvPuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJMnksFYqarDzHXAuhyjycK9XxBdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjNiN2EzZDYtZjMwOC0z
MjUzLTg4ZDMtZTM3M2U0ZDk2NGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzOYAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGzzHgGoTn2824uGCUs0f97WrUUHnE/qVeRHjwluiQb1Hp2kCO/UaAvW
z7SQgDj5V6S81c7bqWM204sb+29g4en7TqQt57ZpBHBYq6IyiL/gQasOsMYv5WBW
36vHejVxURGzJ0W0tjFAmGRC2KhDYDQG/lLdMgVtGKIu9ve3yef9tcQuoC8YGNbO
/gpQ4t+rB9rwrji49T/EaMydeUQXTYp0lbrkOsWCGWsrtD7jrf0pnB1ouTUlMG2G
UscTcjtRhAgDbpRb46yTAZqgOnlC65WRbY3+YYwOr952IXot7zSDTHnbRDKgcYzI
DT/Ai92LuYqjnRr2XNn4u3h6lODiIrU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:29:57 2025 by rpki-client