Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f22f5c8c-d07f-3466-ad35-6e64098165e6.roa
File:                     f22f5c8c-d07f-3466-ad35-6e64098165e6.roa (raw, json)
Hash identifier:          kM6GavOxkgQqYj+evF+AadlysD1tdxDSmK61G4ZLVHE=
Subject key identifier:   66:90:91:F8:F7:AF:76:27:21:76:92:6E:F7:40:FC:03:57:AB:A8:87
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B4A4729772F2CBEC0DBD8CF80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f22f5c8c-d07f-3466-ad35-6e64098165e6.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     203
IP address blocks:        204.104.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:29:77:2f:2c:be:c0:db:d8:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=4e7054db-3fa9-4ea7-8d44-be07311bec2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8b:58:50:d0:b8:81:67:44:fb:a7:74:f1:2e:
                    81:fc:e7:5d:93:d2:14:c5:ae:8b:74:8c:a0:bd:82:
                    78:74:c9:9f:e3:59:72:d8:d1:05:3b:02:27:2d:7d:
                    a6:c4:a5:f1:54:2b:d2:99:4e:80:c2:e0:2b:26:c7:
                    20:b3:95:37:aa:f9:ef:08:5e:6b:db:04:6d:48:f8:
                    8b:05:ce:7c:70:a4:94:ef:b0:9c:8a:b8:2f:62:38:
                    1c:4f:b1:9f:07:c5:db:4e:fe:66:d8:82:d5:15:db:
                    c7:65:e9:2b:a9:25:6f:8d:f8:1d:51:cf:77:09:81:
                    d5:fa:d4:f7:0d:f1:56:d5:20:f9:ed:e6:77:8f:69:
                    13:a0:26:ad:53:21:cd:6e:0f:3a:52:5c:20:3a:fd:
                    14:8b:33:74:a9:91:6a:2f:9a:3c:9c:39:c9:20:25:
                    34:44:86:37:42:06:e2:1b:81:9c:ad:be:b5:b8:4c:
                    72:be:ac:7f:09:f4:b1:d9:93:dc:91:91:38:98:7f:
                    bd:82:dc:eb:e9:77:56:95:44:7e:27:70:a9:fc:99:
                    97:03:b8:08:78:e7:db:4e:8b:3f:13:4b:e0:b1:d8:
                    20:56:49:42:67:05:c3:ba:48:6b:e3:5f:3d:07:ab:
                    33:df:83:80:c5:f9:00:d3:ca:07:fb:58:55:1f:4e:
                    d6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:90:91:F8:F7:AF:76:27:21:76:92:6E:F7:40:FC:03:57:AB:A8:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f22f5c8c-d07f-3466-ad35-6e64098165e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.104.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:b2:99:93:91:25:16:6b:a8:68:0c:e1:39:8a:e9:c1:d0:fa:
         6d:b5:26:4f:1d:3d:36:f6:be:f9:d5:45:0a:bf:8e:16:3c:9f:
         25:a2:65:8e:52:e9:cf:29:30:09:16:f4:cc:cf:ca:37:86:01:
         5d:9b:4e:ab:68:ff:3c:a4:cb:a6:f7:3f:8f:36:3d:fb:d2:bc:
         fb:74:89:78:7a:0c:2e:9a:f1:75:fb:15:b7:41:b3:03:f2:5a:
         0b:9b:97:93:01:65:66:8e:a9:c6:be:67:ad:5d:cd:8b:90:96:
         37:5b:27:82:a7:6d:b8:25:9e:74:36:e1:f4:9a:86:d5:6d:16:
         dd:5b:83:b2:d9:7a:28:00:ca:e2:c6:e7:8e:3c:e6:dd:a3:21:
         48:1a:df:b1:ea:75:f6:4d:d4:67:60:23:5a:8c:aa:5b:14:94:
         00:95:f6:40:87:f3:e6:94:46:c3:ba:86:e4:0b:53:fb:1a:09:
         07:48:39:a4:37:54:f4:0c:96:9f:a5:f4:66:78:78:d7:33:b1:
         fb:13:76:26:9c:be:b1:ce:6f:ff:a5:58:0a:cb:6e:cd:0c:40:
         ff:c9:a6:66:1e:92:54:d5:ad:4e:e0:e2:1e:a2:3d:84:19:ca:
         fc:1c:09:8e:59:5b:27:11:46:d9:02:89:de:cf:05:08:76:f8:
         be:a9:07:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRyl3Lyy+wNvYz4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk
NGU3MDU0ZGItM2ZhOS00ZWE3LThkNDQtYmUwNzMxMWJlYzJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4tYUNC4gWdE+6d08S6B/Oddk9IUxa6LdIyg
vYJ4dMmf41ly2NEFOwInLX2mxKXxVCvSmU6AwuArJscgs5U3qvnvCF5r2wRtSPiL
Bc58cKSU77CcirgvYjgcT7GfB8XbTv5m2ILVFdvHZekrqSVvjfgdUc93CYHV+tT3
DfFW1SD57eZ3j2kToCatUyHNbg86UlwgOv0UizN0qZFqL5o8nDnJICU0RIY3Qgbi
G4Gcrb61uExyvqx/CfSx2ZPckZE4mH+9gtzr6XdWlUR+J3Cp/JmXA7gIeOfbTos/
E0vgsdggVklCZwXDukhr4189B6sz34OAxfkA08oH+1hVH07WdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGaQkfj3r3YnIXaSbvdA/ANXq6iHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjIyZjVjOGMtZDA3Zi0z
NDY2LWFkMzUtNmU2NDA5ODE2NWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGjQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJOymZORJRZrqGgM4TmK6cHQ+m21Jk8dPTb2vvnVRQq/jhY8nyWiZY5S
6c8pMAkW9MzPyjeGAV2bTqto/zyky6b3P482PfvSvPt0iXh6DC6a8XX7FbdBswPy
Wgubl5MBZWaOqca+Z61dzYuQljdbJ4KnbbglnnQ24fSahtVtFt1bg7LZeigAyuLG
54485t2jIUga37HqdfZN1GdgI1qMqlsUlACV9kCH8+aURsO6huQLU/saCQdIOaQ3
VPQMlp+l9GZ4eNczsfsTdiacvrHOb/+lWArLbs0MQP/JpmYeklTVrU7g4h6iPYQZ
yvwcCY5ZWycRRtkCid7PBQh2+L6pB40=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:28 2025 by rpki-client