Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5b370caf-082e-3372-a9e8-5edb60bcb0a2.roa
File:                     5b370caf-082e-3372-a9e8-5edb60bcb0a2.roa (raw, json)
Hash identifier:          47osfKxO/360+SpOVzstOpF4qkP/y8yQS0v2x0vP+z8=
Subject key identifier:   58:86:4B:31:F9:9A:65:5A:7E:A5:9A:C3:D9:CD:B8:33:CB:2F:39:47
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B4A47248C630614A5A3881E70
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5b370caf-082e-3372-a9e8-5edb60bcb0a2.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     203
IP address blocks:        199.228.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:24:8c:63:06:14:a5:a3:88:1e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=3052b017-8293-4634-8782-7d309bbf8506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8f:76:e0:a0:b2:9b:50:60:cd:ee:a1:46:a1:
                    87:7c:76:93:06:e8:5a:33:f1:1a:20:54:66:48:42:
                    d4:f2:26:19:d6:03:2b:99:68:46:76:e2:4e:a4:48:
                    f5:db:ae:c1:fc:d4:12:dd:47:58:c4:a0:4e:34:d2:
                    cf:29:50:b9:dd:80:bd:c7:28:ca:ad:95:72:24:b1:
                    b4:08:69:79:2c:45:1b:5d:4c:8e:79:4e:0c:f3:70:
                    a2:f0:39:e3:9b:13:73:d4:66:1f:6f:40:58:6e:44:
                    ce:ad:e0:fb:03:31:52:57:53:61:dc:85:8a:06:6f:
                    75:c5:34:75:31:7d:92:49:df:71:d4:45:bb:e2:ac:
                    aa:b4:c1:71:12:bf:ea:45:8c:fc:01:d4:ed:d5:92:
                    30:ad:1e:2f:71:46:c6:3d:6e:7c:0d:52:d0:1e:7e:
                    ac:1c:6f:01:bb:f8:e9:fc:c8:14:9c:97:e1:b0:43:
                    e6:21:00:5d:b0:45:1f:81:90:0f:76:e9:5b:83:30:
                    13:57:0f:9b:45:bf:62:ae:c5:a2:fe:ce:df:6b:86:
                    bb:b6:94:22:11:0c:a4:46:ba:11:2d:04:28:41:c6:
                    1f:f6:e0:9c:2d:6d:4b:75:25:ac:51:99:08:c7:32:
                    63:35:f1:2b:90:b9:75:b5:a2:85:cc:db:54:00:8f:
                    c1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:86:4B:31:F9:9A:65:5A:7E:A5:9A:C3:D9:CD:B8:33:CB:2F:39:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5b370caf-082e-3372-a9e8-5edb60bcb0a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.228.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:53:2d:fb:fe:c8:79:99:e9:98:47:8f:4e:8d:07:26:01:8e:
         d0:85:52:08:81:62:21:a7:05:d2:50:d8:80:af:06:72:6b:dd:
         9f:35:03:e4:be:8d:4e:11:47:be:8b:0c:3d:87:df:b1:af:43:
         5d:b0:11:45:7f:04:00:7e:12:78:09:e7:ed:aa:7e:6e:ed:bd:
         e7:22:23:f0:f1:7a:8a:11:82:0e:85:ec:89:86:56:7c:ef:a3:
         ca:b1:58:8c:b3:50:c5:d7:36:3d:9a:e8:8d:70:50:7d:de:6a:
         80:08:4a:76:00:6b:c5:64:db:95:8c:bf:c3:a4:60:86:65:77:
         d9:e6:65:c4:d0:2f:70:97:86:52:94:38:c8:03:95:57:7a:cf:
         7c:1b:96:08:a8:85:23:04:4c:3e:b3:0e:0e:e8:e8:f6:bb:98:
         02:f5:f1:74:4a:b4:29:51:de:7d:6c:b5:af:50:d6:d1:4b:6a:
         07:45:83:f0:47:64:fa:3f:20:2c:a8:e1:01:69:6d:8b:59:1d:
         01:79:56:cd:37:fc:20:0e:3d:f0:38:af:3b:43:b2:b9:a1:a1:
         44:2a:bf:ea:85:06:2e:8a:12:95:1b:94:86:6b:39:b5:39:2a:
         05:ef:41:85:d3:c9:65:69:f1:b8:6e:c4:6d:86:47:a7:e9:9d:
         1d:85:fb:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRySMYwYUpaOIHnAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk
MzA1MmIwMTctODI5My00NjM0LTg3ODItN2QzMDliYmY4NTA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho924KCym1Bgze6hRqGHfHaTBuhaM/EaIFRm
SELU8iYZ1gMrmWhGduJOpEj1267B/NQS3UdYxKBONNLPKVC53YC9xyjKrZVyJLG0
CGl5LEUbXUyOeU4M83Ci8DnjmxNz1GYfb0BYbkTOreD7AzFSV1Nh3IWKBm91xTR1
MX2SSd9x1EW74qyqtMFxEr/qRYz8AdTt1ZIwrR4vcUbGPW58DVLQHn6sHG8Bu/jp
/MgUnJfhsEPmIQBdsEUfgZAPdulbgzATVw+bRb9irsWi/s7fa4a7tpQiEQykRroR
LQQoQcYf9uCcLW1LdSWsUZkIxzJjNfErkLl1taKFzNtUAI/BgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFiGSzH5mmVafqWaw9nNuDPLLzlHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNWIzNzBjYWYtMDgyZS0z
MzcyLWE5ZTgtNWVkYjYwYmNiMGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+SPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJFTLfv+yHmZ6ZhHj06NByYBjtCFUgiBYiGnBdJQ2ICvBnJr3Z81A+S+
jU4RR76LDD2H37GvQ12wEUV/BAB+EngJ5+2qfm7tveciI/DxeooRgg6F7ImGVnzv
o8qxWIyzUMXXNj2a6I1wUH3eaoAISnYAa8Vk25WMv8OkYIZld9nmZcTQL3CXhlKU
OMgDlVd6z3wblgiohSMETD6zDg7o6Pa7mAL18XRKtClR3n1sta9Q1tFLagdFg/BH
ZPo/ICyo4QFpbYtZHQF5Vs03/CAOPfA4rztDsrmhoUQqv+qFBi6KEpUblIZrObU5
KgXvQYXTyWVp8bhuxG2GR6fpnR2F+w0=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:37 2025 by rpki-client