Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a080b260-2012-373f-9010-a38709b84ea4.roa
File:                     a080b260-2012-373f-9010-a38709b84ea4.roa (raw, json)
Hash identifier:          bmOXuAJkHUbWxnZmd7yKJptoBcKKJgyxL6z06PfBwxw=
Subject key identifier:   42:CD:7F:53:1C:CC:39:F1:CD:6D:84:20:38:B9:DA:BB:95:EE:92:BB
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD23BD5419018EAF2F2585A60
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a080b260-2012-373f-9010-a38709b84ea4.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     202
IP address blocks:        192.208.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:d5:41:90:18:ea:f2:f2:58:5a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=809f77c4-daa6-4656-be7c-6466678e0027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:44:26:8b:9c:50:3e:85:08:eb:29:2b:37:62:
                    5a:2b:75:11:7a:ea:18:f9:3d:96:91:20:35:7d:cf:
                    6e:bc:04:cc:76:b4:5f:a4:7b:7a:f5:b8:de:48:fd:
                    be:67:a3:0e:c3:e7:c1:8f:3e:6f:cd:45:37:64:b3:
                    fb:9f:96:1c:5c:fb:b5:74:29:11:26:73:03:c1:7a:
                    07:1a:96:ec:17:1c:32:70:eb:b7:a8:9b:01:f9:bc:
                    df:d8:ab:7b:32:e6:c5:39:1c:34:92:8a:49:55:9b:
                    02:9c:b4:7a:fc:14:ef:d4:ac:89:f1:99:04:8a:5b:
                    bc:94:5f:07:31:b9:42:62:e9:5b:0f:b3:f0:7f:df:
                    78:d3:fc:ca:7f:b3:63:3e:aa:d1:cf:c6:f2:58:8a:
                    1e:33:77:93:37:aa:82:8f:26:40:78:12:f4:b2:dc:
                    c5:02:dc:68:37:ba:2d:81:87:36:df:5e:74:fa:b5:
                    ff:29:ba:00:06:5f:f1:40:79:96:16:4f:89:30:23:
                    0b:42:dd:cb:e1:50:df:21:b2:03:b9:d2:ab:22:8d:
                    36:c3:0f:ea:b6:7b:1f:94:d7:72:80:bb:23:b2:a9:
                    4c:c1:63:f8:d5:1f:dd:86:32:bc:d8:5e:2d:06:b6:
                    f9:4b:a2:b9:68:9b:15:17:6e:7b:db:09:31:a7:ed:
                    07:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CD:7F:53:1C:CC:39:F1:CD:6D:84:20:38:B9:DA:BB:95:EE:92:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a080b260-2012-373f-9010-a38709b84ea4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:dd:1d:89:0e:56:6a:ce:b5:3a:2a:5d:e1:bc:c9:e5:42:54:
         d1:f8:31:cd:9f:aa:36:a0:93:5a:e7:7d:86:46:92:ea:bb:7f:
         b7:1b:00:a5:7a:be:8e:e3:ba:f1:22:1e:e1:a4:e1:8e:a2:12:
         07:66:44:89:d8:a6:59:9d:d7:89:0f:f2:52:90:57:dd:90:1b:
         5b:0a:b4:85:af:38:86:ba:c9:52:07:29:05:a8:90:fc:2b:9e:
         83:ed:61:81:46:e7:46:6a:32:58:ba:dd:2a:f1:58:6c:17:4e:
         cf:ce:72:9f:ab:56:dd:b6:6e:b1:06:e3:69:ba:89:27:47:39:
         b6:04:b0:d9:3e:1c:66:41:52:09:3f:7a:8a:d4:ef:80:14:a2:
         a6:69:21:e2:54:21:4b:8d:7c:a8:d1:4c:04:2c:51:17:44:7c:
         02:50:7a:43:0e:b3:20:01:56:63:fb:76:16:fe:5e:0c:79:02:
         ff:2d:62:cf:cc:f0:03:fe:7c:c0:5e:27:67:1d:6f:3e:17:71:
         ca:ef:f5:98:34:b9:2e:cf:a8:71:2b:58:7d:1e:18:10:63:60:
         ef:f5:2a:31:1d:7d:c8:24:ef:a2:73:7d:82:70:2c:d6:11:e6:
         d3:03:d8:25:7e:cc:09:1a:37:d5:b7:22:83:b3:cd:85:c1:3c:
         18:d7:9b:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO9VBkBjq8vJYWmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk
ODA5Zjc3YzQtZGFhNi00NjU2LWJlN2MtNjQ2NjY3OGUwMDI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0Qmi5xQPoUI6ykrN2JaK3UReuoY+T2WkSA1
fc9uvATMdrRfpHt69bjeSP2+Z6MOw+fBjz5vzUU3ZLP7n5YcXPu1dCkRJnMDwXoH
GpbsFxwycOu3qJsB+bzf2Kt7MubFORw0kopJVZsCnLR6/BTv1KyJ8ZkEilu8lF8H
MblCYulbD7Pwf9940/zKf7NjPqrRz8byWIoeM3eTN6qCjyZAeBL0stzFAtxoN7ot
gYc23150+rX/KboABl/xQHmWFk+JMCMLQt3L4VDfIbIDudKrIo02ww/qtnsflNdy
gLsjsqlMwWP41R/dhjK82F4tBrb5S6K5aJsVF2572wkxp+0H/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFELNf1MczDnxzW2EIDi52ruV7pK7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTA4MGIyNjAtMjAxMi0z
NzNmLTkwMTAtYTM4NzA5Yjg0ZWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwNAlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEfdHYkOVmrOtToqXeG8yeVCVNH4Mc2fqjagk1rnfYZGkuq7f7cbAKV6
vo7juvEiHuGk4Y6iEgdmRInYplmd14kP8lKQV92QG1sKtIWvOIa6yVIHKQWokPwr
noPtYYFG50ZqMli63SrxWGwXTs/Ocp+rVt22brEG42m6iSdHObYEsNk+HGZBUgk/
eorU74AUoqZpIeJUIUuNfKjRTAQsURdEfAJQekMOsyABVmP7dhb+Xgx5Av8tYs/M
8AP+fMBeJ2cdbz4Xccrv9Zg0uS7PqHErWH0eGBBjYO/1KjEdfcgk76JzfYJwLNYR
5tMD2CV+zAkaN9W3IoOzzYXBPBjXm1U=
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:50:42 2025 by rpki-client