Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/39172874-e704-3ead-86af-45a9b5714958.roa
File:                     39172874-e704-3ead-86af-45a9b5714958.roa (raw, json)
Hash identifier:          NBHTe7u1P20DeHuFZUakXJBKwxO0wCBzp/UTGpfU774=
Subject key identifier:   AF:6F:EE:37:91:B7:BB:56:F5:51:30:AD:1E:D1:6F:8F:2B:7B:5E:01
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F43285849C904F02A32692C337B1263C0
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/39172874-e704-3ead-86af-45a9b5714958.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     61317
IP address blocks:        67.43.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:f0:2a:32:69:2c:33:7b:12:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=a7de0ba4-fe16-493a-a6ea-ac5531d7688a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:74:0f:d3:64:6b:13:6f:a7:f6:a4:05:0f:cc:
                    f9:bc:b8:d3:5f:5b:d0:7b:e6:f8:87:aa:37:dc:9b:
                    cc:1c:5f:da:39:4a:1b:34:b8:2d:81:ca:4b:eb:b4:
                    c2:2e:45:66:8a:54:5e:d4:98:d9:f6:32:90:07:0a:
                    d3:65:db:78:e2:11:9d:d5:17:17:a6:ae:d4:a9:3a:
                    4e:14:2d:b6:0d:7a:a9:99:c5:9f:06:43:39:db:ad:
                    2c:a8:6f:57:1d:01:0b:92:9b:f3:88:67:83:54:12:
                    04:cf:ef:eb:81:9e:b9:f3:85:35:5c:47:b9:f8:15:
                    80:82:ef:71:4f:8f:46:bc:26:c1:06:df:25:2e:73:
                    2b:c3:0f:fc:e2:b9:18:e5:65:24:f2:07:46:50:47:
                    4c:b4:9a:2e:b1:ac:67:f4:9e:62:b4:1b:6a:4c:3c:
                    43:b7:61:b6:5b:c5:5d:9b:a7:43:65:4a:3b:f5:6c:
                    5d:3d:26:31:ec:60:99:7b:df:3c:0d:33:91:ab:66:
                    cf:64:27:18:45:0c:25:13:f7:7a:7b:37:36:6d:77:
                    54:a5:38:bc:84:6b:89:e3:61:b1:a8:92:96:4d:8e:
                    93:ae:de:20:5e:cb:08:e3:e3:59:d3:16:51:e3:67:
                    16:b5:95:0b:2d:3b:a0:11:5a:e3:8e:e5:85:94:8e:
                    36:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6F:EE:37:91:B7:BB:56:F5:51:30:AD:1E:D1:6F:8F:2B:7B:5E:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/39172874-e704-3ead-86af-45a9b5714958.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:f5:78:54:27:5c:33:64:95:f9:e0:9d:49:e7:de:22:e5:15:
         20:fa:02:99:42:3c:5e:61:e3:e0:d8:a5:23:02:ff:82:77:8a:
         4a:a0:31:5f:d4:8f:57:42:c9:c6:da:44:83:e6:40:9e:86:05:
         40:5c:ff:2a:df:57:00:39:42:0c:b2:98:13:76:ca:bd:fa:c8:
         c6:62:40:3e:a2:00:c8:63:dc:56:cc:ac:a8:f4:a4:3d:bc:0c:
         9c:64:80:f1:db:8c:ea:7f:85:0b:4d:bc:05:fa:06:05:79:cc:
         5c:6b:9e:f4:18:4a:3f:ff:14:e5:7d:5c:04:60:f0:0a:16:e3:
         d9:ec:71:b3:5d:da:d6:12:49:bc:bb:39:b0:b0:c0:d8:23:8a:
         f0:a1:e1:b4:fd:5f:77:b2:c5:fa:9e:7a:3a:aa:89:22:82:3c:
         ae:a1:31:34:82:1c:7a:1f:c8:36:96:93:04:a3:30:1f:20:bb:
         fa:36:52:5f:5f:41:81:87:1a:26:74:58:e5:50:d1:db:c2:87:
         09:79:f8:08:2f:ef:bd:b3:8f:83:d0:03:b9:4e:5b:15:bc:83:
         76:c0:f4:ea:82:e6:90:15:eb:83:da:93:c6:ea:a2:a9:1b:f1:
         df:b5:0c:cf:fa:0a:06:88:2d:a8:53:19:3f:6c:67:39:12:31:
         f2:5f:4d:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBPAqMmksM3sSY8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli
NGU1MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk
YTdkZTBiYTQtZmUxNi00OTNhLWE2ZWEtYWM1NTMxZDc2ODhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXQP02RrE2+n9qQFD8z5vLjTX1vQe+b4h6o3
3JvMHF/aOUobNLgtgcpL67TCLkVmilRe1JjZ9jKQBwrTZdt44hGd1RcXpq7UqTpO
FC22DXqpmcWfBkM5260sqG9XHQELkpvziGeDVBIEz+/rgZ6584U1XEe5+BWAgu9x
T49GvCbBBt8lLnMrww/84rkY5WUk8gdGUEdMtJousaxn9J5itBtqTDxDt2G2W8Vd
m6dDZUo79WxdPSYx7GCZe988DTORq2bPZCcYRQwlE/d6ezc2bXdUpTi8hGuJ42Gx
qJKWTY6Trt4gXssI4+NZ0xZR42cWtZULLTugEVrjjuWFlI429wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK9v7jeRt7tW9VEwrR7Rb48re14BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk
NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvMzkxNzI4NzQtZTcwNC0z
ZWFkLTg2YWYtNDVhOWI1NzE0OTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3
ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5
YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3
N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQyslMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI/1eFQnXDNklfngnUnn3iLlFSD6AplCPF5h4+DYpSMC/4J3ikqgMV/U
j1dCycbaRIPmQJ6GBUBc/yrfVwA5QgyymBN2yr36yMZiQD6iAMhj3FbMrKj0pD28
DJxkgPHbjOp/hQtNvAX6BgV5zFxrnvQYSj//FOV9XARg8AoW49nscbNd2tYSSby7
ObCwwNgjivCh4bT9X3eyxfqeejqqiSKCPK6hMTSCHHofyDaWkwSjMB8gu/o2Ul9f
QYGHGiZ0WOVQ0dvChwl5+Agv772zj4PQA7lOWxW8g3bA9OqC5pAV64Pak8bqoqkb
8d+1DM/6CgaILahTGT9sZzkSMfJfTVw=
-----END CERTIFICATE-----
Generated at Sun May 11 00:42:32 2025 by rpki-client