Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/f7006826-2bf1-3819-80d8-926248c131f1.roa
File:                     f7006826-2bf1-3819-80d8-926248c131f1.roa (raw, json)
Hash identifier:          e1xJVEn+DT1yjbR9VERSD+TxC0q3pPZBKelyBtl5oRU=
Subject key identifier:   04:87:CE:5B:91:96:D8:0F:34:24:96:47:B1:49:F3:FE:D6:F0:AF:8F
Certificate issuer:       /CN=ab3f3ae8-1db7-413e-9713-ab05c3fa5d75
Certificate serial:       010D0C9F4328584B328C3DD4C7A43653175EC040
Authority key identifier: 10:C3:83:01:E1:40:17:0E:14:D9:BF:C7:7D:C7:8B:B3:D8:1B:74:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/f7006826-2bf1-3819-80d8-926248c131f1.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     23368
IP address blocks:        199.66.76.0/24 maxlen: 24
                          199.66.77.0/24 maxlen: 24
                          199.66.78.0/24 maxlen: 24
                          199.66.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:3d:d4:c7:a4:36:53:17:5e:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab3f3ae8-1db7-413e-9713-ab05c3fa5d75
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=6e70101b-d2e8-4c41-993b-af4740846106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3b:fe:19:29:ba:9b:6c:73:19:e8:60:94:62:
                    ab:97:ee:ce:04:0a:e5:3c:84:a4:34:2e:05:af:45:
                    47:86:7e:f4:f9:37:18:38:e2:b3:91:53:8b:c5:4e:
                    ac:96:67:a9:33:89:0c:b0:78:32:da:09:07:bb:ac:
                    09:ce:0b:a3:09:e4:09:61:ca:60:41:14:10:3c:08:
                    09:ba:33:cc:79:49:39:1c:b9:cf:82:c4:c1:9e:d9:
                    35:60:e2:9c:3d:22:67:f7:8d:34:e5:b0:6c:82:1b:
                    c5:5e:a8:91:78:35:07:03:75:dc:24:58:0b:30:01:
                    36:62:84:3f:5d:0b:ee:aa:f4:b7:28:62:a1:f5:4c:
                    e1:6d:a6:ce:cb:97:58:b5:9c:7c:69:f0:f2:93:4e:
                    87:15:9e:f9:32:80:70:08:9e:91:ec:2f:a6:07:98:
                    25:07:e5:75:2a:ea:78:05:d0:48:f0:29:a4:17:1d:
                    53:fd:fe:0f:72:3f:ec:1f:cb:18:fa:21:96:ac:8f:
                    a5:08:50:22:03:13:c2:fa:37:d7:6d:79:7d:db:be:
                    89:52:16:18:38:3c:5a:28:41:6b:91:c9:cf:a2:a7:
                    de:66:87:d5:f6:c5:44:15:dd:91:0d:39:66:ee:ea:
                    b3:0d:66:3a:bd:d3:28:01:cb:79:c2:11:c5:bc:c8:
                    ea:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:87:CE:5B:91:96:D8:0F:34:24:96:47:B1:49:F3:FE:D6:F0:AF:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/f7006826-2bf1-3819-80d8-926248c131f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.crl

            X509v3 Authority Key Identifier:
                keyid:10:C3:83:01:E1:40:17:0E:14:D9:BF:C7:7D:C7:8B:B3:D8:1B:74:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.66.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:d0:2f:3d:c1:38:dd:05:34:86:44:9c:f0:94:5b:e2:60:77:
         22:90:07:c5:3e:b9:1b:6b:82:99:ce:ca:99:ae:ea:70:92:9a:
         1c:2c:70:c0:06:43:41:74:ad:81:db:40:04:cf:a2:57:3b:f0:
         40:44:16:f1:79:32:27:e5:94:82:7b:9e:74:7f:a8:75:8c:29:
         72:05:b3:26:e5:9a:4a:e4:cf:f0:59:62:a5:44:f8:73:24:a0:
         fd:5a:56:72:aa:06:c4:ed:8b:e2:a2:de:3c:d2:98:24:5b:e7:
         41:fb:bd:13:ce:48:5d:84:5e:5c:97:0b:29:4b:6b:8b:8e:f9:
         56:5e:77:02:69:84:33:d8:0c:92:23:ee:98:15:0e:76:a9:4a:
         18:b2:cb:c1:1c:d8:2f:df:d7:dc:45:45:ab:2a:fe:70:9b:18:
         0d:26:cd:82:13:12:5d:6e:57:fb:14:ef:2f:96:6d:b8:6d:38:
         56:8f:12:12:8c:7b:02:7b:1b:0f:96:01:50:72:d8:e4:3d:12:
         59:ef:85:d7:7c:f5:9d:02:38:dc:56:29:49:7c:be:60:77:08:
         35:4a:f1:19:1c:b9:e2:10:07:fd:c8:68:15:72:80:25:99:c7:
         0c:6e:d1:c5:3d:e3:f9:30:36:eb:9f:25:83:3c:ad:03:3b:8f:
         3b:ba:99:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjD3Ux6Q2UxdewEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWIzZjNhZTgtMWRiNy00MTNlLTk3MTMtYWIwNWMzZmE1
ZDc1MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk
NmU3MDEwMWItZDJlOC00YzQxLTk5M2ItYWY0NzQwODQ2MTA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjv+GSm6m2xzGehglGKrl+7OBArlPISkNC4F
r0VHhn70+TcYOOKzkVOLxU6slmepM4kMsHgy2gkHu6wJzgujCeQJYcpgQRQQPAgJ
ujPMeUk5HLnPgsTBntk1YOKcPSJn94005bBsghvFXqiReDUHA3XcJFgLMAE2YoQ/
XQvuqvS3KGKh9UzhbabOy5dYtZx8afDyk06HFZ75MoBwCJ6R7C+mB5glB+V1Kup4
BdBI8CmkFx1T/f4Pcj/sH8sY+iGWrI+lCFAiAxPC+jfXbXl9276JUhYYODxaKEFr
kcnPoqfeZofV9sVEFd2RDTlm7uqzDWY6vdMoAct5whHFvMjqQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFASHzluRltgPNCSWR7FJ8/7W8K+PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjNm
M2FlOC0xZGI3LTQxM2UtOTcxMy1hYjA1YzNmYTVkNzUvZjcwMDY4MjYtMmJmMS0z
ODE5LTgwZDgtOTI2MjQ4YzEzMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWIzZjNhZTgtMWRiNy00MTNlLTk3
MTMtYWIwNWMzZmE1ZDc1L2FiM2YzYWU4LTFkYjctNDEzZS05NzEzLWFiMDVjM2Zh
NWQ3NS5jcmwwHwYDVR0jBBgwFoAUEMODAeFAFw4U2b/HfceLs9gbdLgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjNmM2FlOC0xZGI3LTQxM2UtOTcxMy1hYjA1
YzNmYTVkNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx0JMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIrQLz3BON0FNIZEnPCUW+JgdyKQB8U+uRtrgpnOypmu6nCSmhwscMAG
Q0F0rYHbQATPolc78EBEFvF5MifllIJ7nnR/qHWMKXIFsyblmkrkz/BZYqVE+HMk
oP1aVnKqBsTti+Ki3jzSmCRb50H7vRPOSF2EXlyXCylLa4uO+VZedwJphDPYDJIj
7pgVDnapShiyy8Ec2C/f19xFRasq/nCbGA0mzYITEl1uV/sU7y+WbbhtOFaPEhKM
ewJ7Gw+WAVBy2OQ9Elnvhdd89Z0CONxWKUl8vmB3CDVK8RkcueIQB/3IaBVygCWZ
xwxu0cU94/kwNuufJYM8rQM7jzu6mbU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:19:11 2025 by rpki-client