Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/8ba267bf-794f-36ab-9754-45a32ee2832a.roa
File:                     8ba267bf-794f-36ab-9754-45a32ee2832a.roa (raw, json)
Hash identifier:          zJYtqPEP4dao4W6oORHSAJo+u6enlEMWDBFGnTa+47I=
Subject key identifier:   AB:E1:D9:C6:C3:61:FE:E7:B4:28:E7:2D:31:98:FF:D7:53:D5:24:3C
Certificate issuer:       /CN=3f61b400-76de-4d47-93da-b04c33b5a504
Certificate serial:       010D0C9F4328584B047C21C972CB0B95FF77EE80
Authority key identifier: 26:B9:26:5A:06:2F:12:37:EE:F0:69:D4:14:DB:9F:74:3A:6A:80:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/8ba267bf-794f-36ab-9754-45a32ee2832a.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        192.67.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/3f61b400-76de-4d47-93da-b04c33b5a504.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/3f61b400-76de-4d47-93da-b04c33b5a504.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:21:c9:72:cb:0b:95:ff:77:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f61b400-76de-4d47-93da-b04c33b5a504
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=aeac56d4-2b18-4916-87bf-022d046d14f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:96:95:0d:a3:b7:e9:3e:ab:70:bb:42:db:91:
                    a5:50:6c:50:64:f2:ff:fd:ce:62:ff:2a:81:03:fd:
                    e0:4d:97:ba:d1:b8:f2:1c:65:68:36:67:08:49:3a:
                    2b:31:0b:85:95:90:7d:94:b6:1d:e1:84:d6:1f:61:
                    b3:ef:d2:68:98:87:35:f6:2f:6b:58:05:c8:eb:c9:
                    f5:6f:ea:39:62:5c:db:e1:19:13:c8:3d:58:33:5b:
                    0b:25:ea:ad:b8:b8:d1:0b:86:63:2c:03:be:6a:1f:
                    32:c6:f1:e7:de:ce:e7:85:c0:9e:ad:8c:5e:c4:80:
                    5f:96:23:ee:79:3f:c5:9e:2f:04:d4:74:51:01:10:
                    7d:20:88:28:7d:ff:79:8e:93:1a:09:98:00:c8:fd:
                    89:a2:fc:e1:e3:4e:30:57:32:05:05:c6:b5:b1:c2:
                    61:ae:ea:b3:ee:cf:a2:78:56:8a:a4:bc:d7:a4:60:
                    0b:2e:67:8b:af:79:c4:09:d1:65:5b:c1:e6:73:0b:
                    c2:00:e1:f1:31:6a:66:1f:51:12:c9:f5:36:0f:1b:
                    a7:3e:6e:17:37:7c:f9:8d:d7:4f:6d:c0:5d:3d:8c:
                    1b:77:26:e8:73:9e:2d:6f:41:f4:6d:ee:0b:3f:16:
                    7d:4f:97:82:db:f9:a9:34:b6:da:aa:ba:7c:39:1b:
                    a6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E1:D9:C6:C3:61:FE:E7:B4:28:E7:2D:31:98:FF:D7:53:D5:24:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/8ba267bf-794f-36ab-9754-45a32ee2832a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504/3f61b400-76de-4d47-93da-b04c33b5a504.crl

            X509v3 Authority Key Identifier:
                keyid:26:B9:26:5A:06:2F:12:37:EE:F0:69:D4:14:DB:9F:74:3A:6A:80:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f61b400-76de-4d47-93da-b04c33b5a504.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:73:61:82:87:d7:2d:97:62:b3:72:3c:29:e3:71:47:92:79:
         98:2e:41:6f:7e:d8:f8:5e:4f:24:44:63:96:72:a5:e3:ab:0e:
         3a:4c:d8:eb:3f:50:aa:41:35:ca:fc:8e:6c:3a:89:3b:c8:b6:
         c3:cb:1a:93:00:19:27:12:cb:2c:2f:84:be:11:36:c0:bb:64:
         b4:94:90:22:93:84:04:6d:3b:2c:19:eb:c9:a9:d5:4e:c3:c4:
         19:fc:bb:8f:41:af:cf:23:9a:af:3b:d8:97:e5:45:af:c9:8e:
         ff:55:71:15:e0:0b:6d:c1:c7:e4:ca:21:14:9c:cf:77:e9:12:
         f2:0d:85:12:7e:a2:99:83:10:e7:fd:a2:43:d2:b0:ce:89:ac:
         2e:a7:d8:3d:12:70:f5:70:54:ca:ae:e7:f0:08:ba:f6:33:f4:
         5c:34:80:50:f7:0e:7d:90:0d:3b:c9:e7:04:ab:9d:26:08:c3:
         3c:11:69:b0:8e:dd:25:89:d6:8b:de:db:ef:c6:8a:6d:5b:f9:
         af:01:9d:31:39:58:8b:33:63:6f:40:a4:3b:b5:c9:74:04:f8:
         fa:80:9b:da:dd:b1:26:9d:ad:e6:b1:12:46:a0:cd:ca:ba:c6:
         87:71:e8:5d:eb:29:2b:c0:9d:61:d8:b3:95:ab:bd:79:54:16:
         6b:ec:a8:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfCHJcssLlf937oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2MWI0MDAtNzZkZS00ZDQ3LTkzZGEtYjA0YzMzYjVh
NTA0MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk
YWVhYzU2ZDQtMmIxOC00OTE2LTg3YmYtMDIyZDA0NmQxNGY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpaVDaO36T6rcLtC25GlUGxQZPL//c5i/yqB
A/3gTZe60bjyHGVoNmcISTorMQuFlZB9lLYd4YTWH2Gz79JomIc19i9rWAXI68n1
b+o5Ylzb4RkTyD1YM1sLJeqtuLjRC4ZjLAO+ah8yxvHn3s7nhcCerYxexIBfliPu
eT/Fni8E1HRRARB9IIgoff95jpMaCZgAyP2Jovzh404wVzIFBca1scJhruqz7s+i
eFaKpLzXpGALLmeLr3nECdFlW8HmcwvCAOHxMWpmH1ESyfU2DxunPm4XN3z5jddP
bcBdPYwbdyboc54tb0H0be4LPxZ9T5eC2/mpNLbaqrp8ORum6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKvh2cbDYf7ntCjnLTGY/9dT1SQ8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjYx
YjQwMC03NmRlLTRkNDctOTNkYS1iMDRjMzNiNWE1MDQvOGJhMjY3YmYtNzk0Zi0z
NmFiLTk3NTQtNDVhMzJlZTI4MzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y2MWI0MDAtNzZkZS00ZDQ3LTkz
ZGEtYjA0YzMzYjVhNTA0LzNmNjFiNDAwLTc2ZGUtNGQ0Ny05M2RhLWIwNGMzM2I1
YTUwNC5jcmwwHwYDVR0jBBgwFoAUJrkmWgYvEjfu8GnUFNufdDpqgD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjYxYjQwMC03NmRlLTRkNDctOTNkYS1iMDRj
MzNiNWE1MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEMHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABlzYYKH1y2XYrNyPCnjcUeSeZguQW9+2PheTyREY5ZypeOrDjpM2Os/
UKpBNcr8jmw6iTvItsPLGpMAGScSyywvhL4RNsC7ZLSUkCKThARtOywZ68mp1U7D
xBn8u49Br88jmq872JflRa/Jjv9VcRXgC23Bx+TKIRScz3fpEvINhRJ+opmDEOf9
okPSsM6JrC6n2D0ScPVwVMqu5/AIuvYz9Fw0gFD3Dn2QDTvJ5wSrnSYIwzwRabCO
3SWJ1ove2+/Gim1b+a8BnTE5WIszY29ApDu1yXQE+PqAm9rdsSadreaxEkagzcq6
xodx6F3rKSvAnWHYs5WrvXlUFmvsqPU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:56:45 2025 by rpki-client