Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3b5511ee-703d-3f0b-a332-e4dd28cdb1cb.roa
File:                     3b5511ee-703d-3f0b-a332-e4dd28cdb1cb.roa (raw, json)
Hash identifier:          iUIAVk4aO9g6VHMkY0w8naxo79G2Y9FiNKdbSfDXJQc=
Subject key identifier:   2D:54:2D:F1:59:5A:FB:C2:A1:D6:2A:DC:9D:D7:B5:4E:32:4E:5B:AD
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584DBBA04DA640A202E9F84A53C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3b5511ee-703d-3f0b-a332-e4dd28cdb1cb.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     3360
IP address blocks:        192.85.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:4d:a6:40:a2:02:e9:f8:4a:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=ed55bf25-0c66-4ead-aed1-26a99cbbe573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ac:f7:95:ad:72:10:89:20:9b:cc:cb:c7:67:
                    2c:0a:16:05:5d:e7:36:dc:88:56:e3:e5:8f:3d:2d:
                    1e:c1:7c:44:55:78:fc:37:3a:1f:85:74:e9:be:32:
                    c9:7f:b6:7d:9e:be:e0:0c:75:4e:04:73:48:63:2e:
                    e6:a0:39:d2:b9:3a:04:14:20:2d:b4:11:8b:78:44:
                    20:19:81:c0:45:23:b9:6b:b4:ce:cf:b8:eb:93:0c:
                    f8:f4:63:da:75:3d:b4:86:eb:eb:ec:a4:2b:d9:66:
                    85:dd:c0:78:ac:11:d6:a8:9a:da:75:a4:d0:eb:7b:
                    1a:f0:5a:82:7f:69:d7:85:8f:d1:22:44:0d:82:12:
                    8c:72:4e:43:14:94:c0:9e:e8:a7:fd:59:f0:93:78:
                    e5:a5:db:47:27:dd:77:5a:ab:9d:54:7f:35:f2:c5:
                    59:4b:f7:0c:9b:0a:0c:30:b9:7e:99:01:7f:d9:f5:
                    b0:8f:ed:e4:b0:16:d5:1d:02:ba:d9:99:77:12:59:
                    25:b5:0c:c0:22:64:48:31:87:e4:1b:97:1c:7e:fe:
                    bb:92:ee:4e:c0:ae:3b:e5:0e:67:99:71:d2:f1:18:
                    f8:2a:be:ab:39:97:cc:40:e8:78:3f:93:7b:32:f7:
                    d8:a5:26:fa:26:9d:15:6a:41:0d:9d:f7:45:7b:3a:
                    8d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:54:2D:F1:59:5A:FB:C2:A1:D6:2A:DC:9D:D7:B5:4E:32:4E:5B:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3b5511ee-703d-3f0b-a332-e4dd28cdb1cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:df:6d:6b:1e:4a:0a:a3:98:c1:88:59:64:fe:fd:14:8e:a6:
         03:59:cc:eb:26:2d:5f:5d:45:19:a6:30:30:e4:92:ce:05:00:
         48:ef:87:17:c0:bf:4f:e9:cd:53:22:ad:53:52:86:7c:ff:ea:
         26:31:20:fc:3a:d9:5b:0d:ed:b9:30:c2:ab:ad:98:0a:65:eb:
         84:7f:9e:c5:82:c6:ba:ec:83:84:13:0a:04:93:6e:f3:ac:6c:
         d6:21:6f:84:29:d2:9b:1c:03:c2:f5:64:42:f6:d7:f5:c4:a5:
         2b:69:75:8d:b8:f2:35:f7:26:ae:05:88:f4:fb:73:4a:31:a9:
         51:94:aa:9b:d0:07:5e:1e:36:db:94:3a:9f:e1:0e:62:f2:08:
         7b:90:33:96:e9:25:2a:ca:bb:f2:91:5a:19:5e:87:08:5b:03:
         62:09:53:e0:3f:3c:e0:fe:ee:8b:c7:65:7c:c1:4e:19:d8:60:
         80:bb:6f:ff:77:43:e5:86:75:63:3f:d8:5e:92:49:42:59:57:
         68:33:a6:62:64:77:ff:4e:0b:2f:b2:69:1a:5d:3f:c1:6c:79:
         4d:19:84:3d:ab:46:16:c2:78:0f:d4:32:58:19:0a:a1:5c:8c:
         ca:ae:f7:3c:89:1a:29:1b:06:a5:0f:9b:9d:81:e4:94:1b:6e:
         83:a0:82:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE27oE2mQKIC6fhKU8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk
ZWQ1NWJmMjUtMGM2Ni00ZWFkLWFlZDEtMjZhOTljYmJlNTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6z3la1yEIkgm8zLx2csChYFXec23IhW4+WP
PS0ewXxEVXj8NzofhXTpvjLJf7Z9nr7gDHVOBHNIYy7moDnSuToEFCAttBGLeEQg
GYHARSO5a7TOz7jrkwz49GPadT20huvr7KQr2WaF3cB4rBHWqJradaTQ63sa8FqC
f2nXhY/RIkQNghKMck5DFJTAnuin/Vnwk3jlpdtHJ913WqudVH818sVZS/cMmwoM
MLl+mQF/2fWwj+3ksBbVHQK62Zl3ElkltQzAImRIMYfkG5ccfv67ku5OwK475Q5n
mXHS8Rj4Kr6rOZfMQOh4P5N7MvfYpSb6Jp0VakENnfdFezqNrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC1ULfFZWvvCodYq3J3XtU4yTlutMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvM2I1NTExZWUtNzAzZC0z
ZjBiLWEzMzItZTRkZDI4Y2RiMWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwFVOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFvfbWseSgqjmMGIWWT+/RSOpgNZzOsmLV9dRRmmMDDkks4FAEjvhxfA
v0/pzVMirVNShnz/6iYxIPw62VsN7bkwwqutmApl64R/nsWCxrrsg4QTCgSTbvOs
bNYhb4Qp0pscA8L1ZEL21/XEpStpdY248jX3Jq4FiPT7c0oxqVGUqpvQB14eNtuU
Op/hDmLyCHuQM5bpJSrKu/KRWhlehwhbA2IJU+A/POD+7ovHZXzBThnYYIC7b/93
Q+WGdWM/2F6SSUJZV2gzpmJkd/9OCy+yaRpdP8FseU0ZhD2rRhbCeA/UMlgZCqFc
jMqu9zyJGikbBqUPm52B5JQbboOggnI=
-----END CERTIFICATE-----
Generated at Wed May 13 08:37:35 2026 by rpki-client