Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d4c972ea-081a-3c2c-9bb0-88fa722e7dff.roa
File:                     d4c972ea-081a-3c2c-9bb0-88fa722e7dff.roa (raw, json)
Hash identifier:          VeJ5iUe8WLgL8HRlcoSOesdvNfMQ3MmIKrOR7XTKDl8=
Subject key identifier:   2C:C2:B5:2D:4A:04:82:BB:93:BA:1F:58:FC:89:A9:E8:24:44:3C:31
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D1F4A201125A9F861A4DCFF00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d4c972ea-081a-3c2c-9bb0-88fa722e7dff.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     3356
IP address blocks:        207.37.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:20:11:25:a9:f8:61:a4:dc:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=8ac14934-593e-41d3-953d-1d23e604d110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6d:fe:7e:eb:07:c8:ca:4d:a4:44:89:c4:2c:
                    6a:4d:37:a5:87:71:4d:28:ee:a5:c5:53:99:4f:a6:
                    e7:00:49:5b:d5:05:61:eb:7e:92:41:4b:e8:c4:08:
                    f7:ae:38:51:eb:54:4b:94:ca:8d:92:56:e6:dd:3a:
                    0a:12:d7:7f:f9:f3:93:56:95:e3:dc:14:8a:fd:38:
                    c8:c6:51:ce:e4:fe:1e:2a:3c:ea:14:e2:02:ea:f6:
                    b9:7a:a6:57:77:e9:17:a3:ba:1f:df:dc:bd:14:24:
                    33:25:4d:20:8f:00:8b:6e:7f:b9:93:62:f2:e3:3a:
                    3a:f4:78:13:1c:f2:c8:cd:80:a9:f1:0c:9a:03:8d:
                    56:7a:5b:5b:e1:72:e1:cc:1b:6a:92:cf:54:a7:33:
                    03:07:82:4b:7d:26:8b:92:82:7d:08:b8:63:1b:9d:
                    81:24:20:9f:09:9c:ff:bf:f6:03:4e:39:c5:5c:74:
                    3e:bd:0c:9b:8d:49:a0:fc:ca:bd:c0:2c:b4:7b:ee:
                    e8:ec:24:df:a5:d9:21:c2:17:b2:fc:55:71:14:eb:
                    3e:c6:83:9d:77:b5:92:a3:f1:2f:91:65:b6:fb:58:
                    a4:76:61:d0:11:19:77:50:f9:68:ee:57:ad:1d:51:
                    58:a3:da:d4:37:87:80:88:81:f3:61:71:ae:94:da:
                    72:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C2:B5:2D:4A:04:82:BB:93:BA:1F:58:FC:89:A9:E8:24:44:3C:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d4c972ea-081a-3c2c-9bb0-88fa722e7dff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.37.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:0a:0d:91:0f:00:15:40:7e:32:96:f7:9a:35:52:46:5a:d4:
         bc:67:1d:5f:38:41:6f:04:d1:b6:e8:7c:4a:f7:42:49:94:1c:
         e2:c6:7d:71:cc:7c:2a:26:9a:46:ae:df:bb:07:35:b9:bd:d2:
         af:fd:d7:8a:d7:c0:0e:76:a9:6e:93:7d:01:64:5d:1b:1d:23:
         5c:98:84:cd:a6:33:eb:df:14:80:0b:6c:62:8f:c1:c3:74:f6:
         04:34:75:b1:2e:56:00:e0:5c:d2:25:8b:02:20:b7:a9:21:31:
         f9:b8:70:76:1f:5a:3d:e8:05:1c:99:06:6f:e5:bd:d6:e1:ca:
         08:92:a1:9e:5f:e8:73:d0:f7:de:b1:51:f3:64:71:5d:e9:d2:
         97:85:2f:ca:95:40:ad:56:e1:f1:0f:76:52:ef:81:57:d8:74:
         96:ae:e0:9c:73:7f:65:5c:e6:a6:28:4c:8f:21:28:2b:ab:31:
         4e:dc:36:7a:d7:e4:d2:0a:6b:66:6c:8f:ba:c9:ea:a9:d1:30:
         56:c7:57:cd:9b:49:63:24:91:a8:fe:5d:de:b7:03:e7:1a:0d:
         ce:97:16:3c:8e:fa:11:b7:f7:e8:d3:d9:c2:5b:f0:79:34:7c:
         fa:44:57:69:34:17:be:c9:98:a5:1e:36:0d:20:39:61:79:a7:
         f4:25:0e:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSiARJan4YaTc/wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
OGFjMTQ5MzQtNTkzZS00MWQzLTk1M2QtMWQyM2U2MDRkMTEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjG3+fusHyMpNpESJxCxqTTelh3FNKO6lxVOZ
T6bnAElb1QVh636SQUvoxAj3rjhR61RLlMqNklbm3ToKEtd/+fOTVpXj3BSK/TjI
xlHO5P4eKjzqFOIC6va5eqZXd+kXo7of39y9FCQzJU0gjwCLbn+5k2Ly4zo69HgT
HPLIzYCp8QyaA41Weltb4XLhzBtqks9UpzMDB4JLfSaLkoJ9CLhjG52BJCCfCZz/
v/YDTjnFXHQ+vQybjUmg/Mq9wCy0e+7o7CTfpdkhwhey/FVxFOs+xoOdd7WSo/Ev
kWW2+1ikdmHQERl3UPlo7letHVFYo9rUN4eAiIHzYXGulNpyWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCzCtS1KBIK7k7ofWPyJqegkRDwxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDRjOTcyZWEtMDgxYS0z
YzJjLTliYjAtODhmYTcyMmU3ZGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzyW8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGcKDZEPABVAfjKW95o1UkZa1LxnHV84QW8E0bbofEr3QkmUHOLGfXHM
fCommkau37sHNbm90q/914rXwA52qW6TfQFkXRsdI1yYhM2mM+vfFIALbGKPwcN0
9gQ0dbEuVgDgXNIliwIgt6khMfm4cHYfWj3oBRyZBm/lvdbhygiSoZ5f6HPQ996x
UfNkcV3p0peFL8qVQK1W4fEPdlLvgVfYdJau4Jxzf2Vc5qYoTI8hKCurMU7cNnrX
5NIKa2Zsj7rJ6qnRMFbHV82bSWMkkaj+Xd63A+caDc6XFjyO+hG39+jT2cJb8Hk0
fPpEV2k0F77JmKUeNg0gOWF5p/QlDhc=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:22:40 2026 by rpki-client