Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/340f2c3f-9c84-3a98-9a45-9eec0ee2e366.roa
File:                     340f2c3f-9c84-3a98-9a45-9eec0ee2e366.roa (raw, json)
Hash identifier:          UMkBayz3Ii0ooH1k1b2uF4I+fHV0o5zacO9k365eQ/M=
Subject key identifier:   53:01:42:58:77:33:CA:F8:F6:E7:25:21:E4:07:5C:C5:A3:75:45:5C
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A268ABB1C40E2E3D190676200
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/340f2c3f-9c84-3a98-9a45-9eec0ee2e366.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     3356
IP address blocks:        206.164.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:bb:1c:40:e2:e3:d1:90:67:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=12f9f92b-60d8-43e2-9585-72a39e38c334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4c:15:0e:e2:65:6d:46:31:c0:e6:55:6e:d5:
                    35:bc:eb:ff:e3:2e:73:86:d7:6d:af:2f:8c:e1:73:
                    02:46:52:68:06:1f:c6:09:bd:87:a8:60:0b:4f:d4:
                    25:db:b0:59:b7:cb:dd:62:ce:85:f7:f0:44:18:f4:
                    a5:4a:b7:4f:67:90:90:e8:cf:36:73:de:d5:4e:da:
                    88:65:bb:33:29:d4:94:45:84:85:8d:7f:9d:c8:c5:
                    9f:f6:ba:96:92:a4:9d:9f:97:18:e0:81:fe:29:66:
                    78:82:fe:70:99:bd:e1:67:e7:b5:a6:09:bb:d6:7d:
                    0c:eb:a4:0a:e8:43:d1:98:fe:50:97:2f:bd:6d:41:
                    6c:f6:31:4d:af:11:e3:63:c0:22:42:95:b5:11:8b:
                    37:17:9d:da:5f:cc:67:ec:1b:3f:fd:cc:41:a0:7b:
                    94:2b:2d:3d:68:a7:d1:21:7e:e2:cc:8c:d6:21:e6:
                    af:0c:6b:8a:2b:15:35:45:65:45:97:24:e0:54:ba:
                    8c:5d:23:ae:12:5d:25:84:65:27:69:c6:9c:fb:a8:
                    c8:1a:c7:c9:d9:78:50:75:1d:60:37:74:a8:57:b7:
                    e8:a2:50:99:d4:5b:4a:a0:45:9e:ed:68:15:5c:90:
                    ef:17:80:e2:0f:ff:56:c0:93:2e:59:21:2d:c7:6b:
                    8b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:01:42:58:77:33:CA:F8:F6:E7:25:21:E4:07:5C:C5:A3:75:45:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/340f2c3f-9c84-3a98-9a45-9eec0ee2e366.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.164.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:cc:99:ec:77:90:02:c3:4f:4d:09:29:a9:d2:35:dc:ba:bd:
         2f:99:ce:17:ef:2c:2d:e8:e0:84:2a:52:90:a6:a5:2a:81:56:
         74:30:79:f9:5f:e3:9f:0c:aa:9a:20:a3:6d:cf:92:94:cd:5f:
         ce:71:90:81:cc:b1:e4:3a:6b:3f:c4:0b:80:5b:ec:45:ae:09:
         7d:06:25:a8:2b:5f:28:44:db:42:dc:24:49:33:bc:04:2a:bf:
         e9:4c:96:ea:7e:46:7a:d2:f9:8b:3c:c1:46:3c:a9:fd:00:dc:
         27:ef:b8:37:45:13:0c:f1:f8:fe:a9:58:c7:19:8f:de:1d:8d:
         4d:6d:81:1e:06:e5:c3:62:79:c2:f6:10:ab:ae:11:3a:de:33:
         9f:c4:01:11:f0:58:96:1d:d5:36:c0:4c:08:01:50:d3:40:cc:
         9d:7a:f7:9f:ce:bd:5d:be:a1:84:7c:c3:3b:6c:8d:ac:94:af:
         d5:7a:d0:95:6b:7c:6a:50:c1:d5:f7:4d:77:bc:77:da:f3:09:
         85:3a:6a:90:a8:0f:a6:d8:b7:f5:fa:e7:d6:33:3e:a5:7e:fb:
         17:e5:2e:97:5e:41:e7:97:f6:3e:c1:df:f8:7b:5e:ff:56:3b:
         92:c1:aa:46:a2:31:4f:2a:84:a5:a6:b7:02:bb:f7:c6:9d:21:
         ae:e1:16:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomirscQOLj0ZBnYgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk
MTJmOWY5MmItNjBkOC00M2UyLTk1ODUtNzJhMzllMzhjMzM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0wVDuJlbUYxwOZVbtU1vOv/4y5zhtdtry+M
4XMCRlJoBh/GCb2HqGALT9Ql27BZt8vdYs6F9/BEGPSlSrdPZ5CQ6M82c97VTtqI
ZbszKdSURYSFjX+dyMWf9rqWkqSdn5cY4IH+KWZ4gv5wmb3hZ+e1pgm71n0M66QK
6EPRmP5Qly+9bUFs9jFNrxHjY8AiQpW1EYs3F53aX8xn7Bs//cxBoHuUKy09aKfR
IX7izIzWIeavDGuKKxU1RWVFlyTgVLqMXSOuEl0lhGUnacac+6jIGsfJ2XhQdR1g
N3SoV7foolCZ1FtKoEWe7WgVXJDvF4DiD/9WwJMuWSEtx2uLlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFMBQlh3M8r49uclIeQHXMWjdUVcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzQwZjJjM2YtOWM4NC0z
YTk4LTlhNDUtOWVlYzBlZTJlMzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqQaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEjMmex3kALDT00JKanSNdy6vS+ZzhfvLC3o4IQqUpCmpSqBVnQweflf
458Mqpogo23PkpTNX85xkIHMseQ6az/EC4Bb7EWuCX0GJagrXyhE20LcJEkzvAQq
v+lMlup+RnrS+Ys8wUY8qf0A3CfvuDdFEwzx+P6pWMcZj94djU1tgR4G5cNiecL2
EKuuETreM5/EARHwWJYd1TbATAgBUNNAzJ1695/OvV2+oYR8wztsjayUr9V60JVr
fGpQwdX3TXe8d9rzCYU6apCoD6bYt/X659YzPqV++xflLpdeQeeX9j7B3/h7Xv9W
O5LBqkaiMU8qhKWmtwK798adIa7hFkI=
-----END CERTIFICATE-----
Generated at Mon Jun 30 19:53:13 2025 by rpki-client