Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/40b5c67a-9ac0-3589-acab-9c3b29acdede.roa
File:                     40b5c67a-9ac0-3589-acab-9c3b29acdede.roa (raw, json)
Hash identifier:          lZ1kxNvvpc73WJsElJqcI/xyKg6/cmAMZOusksjadoU=
Subject key identifier:   80:BF:67:D7:2C:61:ED:A7:F5:AB:B6:93:BA:2B:4B:F5:38:23:EB:C1
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A6825FA164A2A17D978EBB940
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/40b5c67a-9ac0-3589-acab-9c3b29acdede.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     132121
IP address blocks:        168.87.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:25:fa:16:4a:2a:17:d9:78:eb:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=538a4983-99a3-4d9c-861f-7c01775c2b9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:05:d8:87:78:b8:ab:38:a3:a1:a0:b8:db:e8:
                    b3:c0:6d:2a:d9:89:4e:3b:07:07:ba:b7:a2:78:6b:
                    81:80:0d:8b:3d:65:c8:68:31:e1:61:34:15:ff:b0:
                    67:8f:85:28:2e:80:d4:22:8b:43:3a:8a:68:8b:74:
                    8d:32:24:0f:a8:48:d8:2d:9f:1f:ce:3d:c6:33:4e:
                    a4:9c:39:af:f9:eb:c9:77:01:79:20:7b:dc:63:9b:
                    a5:c1:26:66:40:22:11:b1:f0:b5:55:4b:5a:41:15:
                    3c:5a:e5:93:ad:c9:7a:2a:e7:b2:c7:93:27:45:b7:
                    59:d5:81:da:2a:6a:52:60:15:bd:06:8d:b8:1d:bc:
                    95:7e:be:67:6a:7d:70:b8:8c:5f:6a:3a:53:71:b6:
                    77:56:19:7a:1a:16:e2:8a:7f:10:75:26:b1:61:29:
                    a3:2c:d4:47:1f:01:8b:2f:3f:63:87:62:35:27:f9:
                    c9:a6:c2:a6:f5:15:21:3a:e2:31:eb:af:72:d9:e0:
                    d7:76:06:f9:15:b3:07:dd:86:45:92:6a:72:91:f5:
                    d3:06:93:3f:82:e2:85:11:c5:de:ae:ba:5e:cc:22:
                    f4:ed:0a:d2:bb:18:38:b8:22:dd:1c:70:68:0c:d9:
                    0e:b8:99:ed:8d:c3:ed:1b:48:64:54:89:42:fc:6d:
                    ab:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:BF:67:D7:2C:61:ED:A7:F5:AB:B6:93:BA:2B:4B:F5:38:23:EB:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/40b5c67a-9ac0-3589-acab-9c3b29acdede.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:ae:5a:9f:d1:8a:f7:5a:a7:86:2a:7f:cd:4e:a7:c2:84:c7:
         2e:e5:f2:fa:77:41:e2:0b:19:84:65:27:77:0a:d0:4d:84:4e:
         bd:d9:0a:31:44:29:cb:36:e8:f9:89:35:e5:ee:b9:5f:5a:31:
         f6:be:2b:26:f2:bf:08:62:ac:23:28:c5:26:6b:ad:09:44:61:
         f8:de:80:90:ff:25:6b:52:7c:ab:e6:08:97:b2:62:d7:17:cd:
         8f:47:43:70:70:e9:8d:4a:42:fd:c6:0b:a6:7c:13:31:fc:fb:
         19:af:8e:c0:ca:56:85:52:76:25:5b:95:45:a2:c8:6a:e5:8b:
         d3:fa:e4:d8:fd:ec:69:0a:5c:14:c7:48:9d:77:d9:90:a5:c7:
         35:86:45:b9:7d:d7:da:f0:24:c6:48:51:b8:7d:41:99:8c:6b:
         1c:45:3f:cc:35:73:57:ec:4f:04:59:97:5a:fc:82:99:ec:c6:
         68:10:ca:04:ce:3f:cc:7a:96:40:52:bb:35:e1:63:95:ce:77:
         7f:97:44:36:59:ed:ef:80:27:49:e9:a6:1b:66:f6:32:b2:be:
         35:da:56:62:3d:ef:39:3d:fc:ce:8a:09:77:ba:8b:8d:a3:90:
         a5:e6:ba:0f:b7:02:a8:c4:d5:4c:75:2b:cb:94:ee:1d:b6:1e:
         13:1e:18:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJfoWSioX2XjruUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
NTM4YTQ5ODMtOTlhMy00ZDljLTg2MWYtN2MwMTc3NWMyYjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwXYh3i4qzijoaC42+izwG0q2YlOOwcHurei
eGuBgA2LPWXIaDHhYTQV/7Bnj4UoLoDUIotDOopoi3SNMiQPqEjYLZ8fzj3GM06k
nDmv+evJdwF5IHvcY5ulwSZmQCIRsfC1VUtaQRU8WuWTrcl6Kueyx5MnRbdZ1YHa
KmpSYBW9Bo24HbyVfr5nan1wuIxfajpTcbZ3Vhl6Ghbiin8QdSaxYSmjLNRHHwGL
Lz9jh2I1J/nJpsKm9RUhOuIx669y2eDXdgb5FbMH3YZFkmpykfXTBpM/guKFEcXe
rrpezCL07QrSuxg4uCLdHHBoDNkOuJntjcPtG0hkVIlC/G2rzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIC/Z9csYe2n9au2k7orS/U4I+vBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDBiNWM2N2EtOWFjMC0z
NTg5LWFjYWItOWMzYjI5YWNkZWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFdQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE2uWp/Rivdap4Yqf81Op8KExy7l8vp3QeILGYRlJ3cK0E2ETr3ZCjFE
Kcs26PmJNeXuuV9aMfa+KybyvwhirCMoxSZrrQlEYfjegJD/JWtSfKvmCJeyYtcX
zY9HQ3Bw6Y1KQv3GC6Z8EzH8+xmvjsDKVoVSdiVblUWiyGrli9P65Nj97GkKXBTH
SJ132ZClxzWGRbl919rwJMZIUbh9QZmMaxxFP8w1c1fsTwRZl1r8gpnsxmgQygTO
P8x6lkBSuzXhY5XOd3+XRDZZ7e+AJ0npphtm9jKyvjXaVmI97zk9/M6KCXe6i42j
kKXmug+3AqjE1Ux1K8uU7h22HhMeGFs=
-----END CERTIFICATE-----
Generated at Sat Jul 5 05:01:28 2025 by rpki-client