Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/60d097de-52d2-3b91-8ec9-4d66b33f986e.roa
File:                     60d097de-52d2-3b91-8ec9-4d66b33f986e.roa (raw, json)
Hash identifier:          CNXuGQevlYFp+DOk3Kc3gBxJshTZV9CszkcIVixlkFI=
Subject key identifier:   99:72:60:A4:58:C3:18:2E:A9:16:51:70:CA:CB:3A:70:BA:86:98:2D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B4A472804EADBBBAE4D7AAB80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/60d097de-52d2-3b91-8ec9-4d66b33f986e.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     202
IP address blocks:        204.104.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:28:04:ea:db:bb:ae:4d:7a:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=dc579a92-2f08-4ac5-8ed5-42756afcb019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d4:7f:e4:42:69:c1:f0:d1:4f:76:f4:99:68:
                    3b:db:84:95:a7:b2:e8:fa:31:ac:4e:ed:d5:e1:e1:
                    b2:e9:31:5e:b9:26:31:2b:a1:d1:eb:ed:62:8f:2b:
                    53:ec:16:c3:19:4e:fc:1d:44:04:92:f4:61:56:9d:
                    a7:46:7e:70:c7:5d:96:34:f5:33:95:14:b4:38:14:
                    21:de:cf:20:b8:2e:4b:a3:15:b6:cb:b4:19:44:9e:
                    26:16:0d:6b:1a:c5:8a:bb:69:07:a7:74:23:b8:2c:
                    6f:f7:5f:2d:52:d4:05:06:89:2e:15:0a:ff:09:be:
                    09:74:6a:fc:d3:4e:7c:12:69:b6:12:81:95:83:7c:
                    57:4a:82:00:c9:e8:a8:20:6f:11:dd:21:6f:e5:43:
                    94:10:46:57:c8:f5:ea:b5:5a:06:93:1f:28:6e:48:
                    80:b3:d4:4d:58:19:ff:cd:2a:be:f6:39:50:b1:49:
                    80:cb:4a:02:38:95:a9:05:bb:39:11:40:0f:9b:ad:
                    6c:fa:71:36:75:04:fd:dd:7a:18:90:95:04:d3:c9:
                    95:32:5c:6f:2e:c8:b9:38:99:f3:b5:9f:27:4d:33:
                    80:ac:47:bb:64:50:03:5f:e9:22:53:e9:2d:a0:7b:
                    bb:8e:7c:3e:74:de:af:fa:6b:ac:72:56:2b:db:e8:
                    4a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:72:60:A4:58:C3:18:2E:A9:16:51:70:CA:CB:3A:70:BA:86:98:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/60d097de-52d2-3b91-8ec9-4d66b33f986e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:95:dd:ac:ec:9d:f4:46:da:6c:12:8f:6e:3b:2e:5d:a3:9d:
         e9:a5:4a:ae:b8:20:85:48:82:02:47:ad:16:c4:b6:30:9c:58:
         e3:fd:1e:20:75:80:b5:2d:e8:46:d1:b7:c0:ea:91:f8:c2:4d:
         b0:d3:27:55:19:ea:57:0e:fa:66:ca:8b:b8:d4:63:d7:d2:ac:
         37:3d:e2:a3:68:d7:06:7d:e0:b3:6d:31:e4:9f:c4:7c:b6:67:
         f9:1a:9c:5c:b5:30:1c:ea:05:32:ab:cd:bf:c4:1e:b6:7f:85:
         cd:58:81:19:08:fb:2f:ba:51:06:15:7d:0d:83:f5:13:92:eb:
         3b:c6:c1:a8:89:b9:0f:83:d0:1b:cd:98:87:23:dc:85:9c:35:
         46:0b:b6:79:36:d3:80:e5:20:02:df:06:26:6d:8c:27:7f:47:
         95:be:4b:db:f6:37:e3:91:e6:c0:72:e4:c5:ce:a4:5b:b8:bc:
         53:ab:a9:39:cf:08:ee:2a:99:47:3f:9f:e3:08:67:15:6a:4b:
         16:a8:a0:b1:2d:66:6f:e7:42:f4:17:1f:38:e4:8e:91:65:d2:
         ca:68:df:7e:a7:ef:40:15:b1:f5:0f:f1:42:6a:89:dd:bd:44:
         5d:ff:ca:fa:d4:96:a1:48:41:68:95:d7:0e:ca:4c:12:aa:21:
         ff:a3:c8:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRygE6tu7rk16q4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk
ZGM1NzlhOTItMmYwOC00YWM1LThlZDUtNDI3NTZhZmNiMDE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldR/5EJpwfDRT3b0mWg724SVp7Lo+jGsTu3V
4eGy6TFeuSYxK6HR6+1ijytT7BbDGU78HUQEkvRhVp2nRn5wx12WNPUzlRS0OBQh
3s8guC5LoxW2y7QZRJ4mFg1rGsWKu2kHp3QjuCxv918tUtQFBokuFQr/Cb4JdGr8
0058Emm2EoGVg3xXSoIAyeioIG8R3SFv5UOUEEZXyPXqtVoGkx8obkiAs9RNWBn/
zSq+9jlQsUmAy0oCOJWpBbs5EUAPm61s+nE2dQT93XoYkJUE08mVMlxvLsi5OJnz
tZ8nTTOArEe7ZFADX+kiU+ktoHu7jnw+dN6v+musclYr2+hKuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJlyYKRYwxguqRZRcMrLOnC6hpgtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjBkMDk3ZGUtNTJkMi0z
YjkxLThlYzktNGQ2NmIzM2Y5ODZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGgyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABmV3azsnfRG2mwSj247Ll2jnemlSq64IIVIggJHrRbEtjCcWOP9HiB1
gLUt6EbRt8DqkfjCTbDTJ1UZ6lcO+mbKi7jUY9fSrDc94qNo1wZ94LNtMeSfxHy2
Z/kanFy1MBzqBTKrzb/EHrZ/hc1YgRkI+y+6UQYVfQ2D9ROS6zvGwaiJuQ+D0BvN
mIcj3IWcNUYLtnk204DlIALfBiZtjCd/R5W+S9v2N+OR5sBy5MXOpFu4vFOrqTnP
CO4qmUc/n+MIZxVqSxaooLEtZm/nQvQXHzjkjpFl0spo336n70AVsfUP8UJqid29
RF3/yvrUlqFIQWiV1w7KTBKqIf+jyNI=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:53 2025 by rpki-client