Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/d8d40582-bd1e-3c2e-9795-777694a9d1af.roa
File:                     d8d40582-bd1e-3c2e-9795-777694a9d1af.roa (raw, json)
Hash identifier:          /hNsAmjGmJ2X2NHobKv54h6UBxm6qQvye17JPuz2yvI=
Subject key identifier:   6A:E6:B8:C0:55:A1:AD:ED:01:73:68:90:C6:CC:B4:1B:A3:C1:10:27
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584A2ABADA9D27F1E874125E4980
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/d8d40582-bd1e-3c2e-9795-777694a9d1af.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     13414
IP address blocks:        209.237.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:da:9d:27:f1:e8:74:12:5e:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=bc64f4b1-057b-466b-9326-6c25e0279604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ba:4c:85:f9:50:2d:cb:4a:8f:df:32:6a:7f:
                    68:c4:28:cc:b4:4c:24:83:24:39:77:46:f3:0b:86:
                    73:1d:05:a0:ff:97:84:87:64:25:37:34:9b:0e:4d:
                    73:69:a6:59:78:b9:05:a4:85:e1:1a:d4:7e:54:7b:
                    92:3b:dc:cc:b5:20:f5:4a:1d:57:dd:c3:b9:65:48:
                    ae:1d:96:9a:19:86:55:97:17:e7:27:3b:5f:56:cf:
                    3d:ac:ac:c2:00:46:f9:90:3f:f2:94:80:2e:d2:c9:
                    bc:3c:6b:3e:38:4f:06:4f:26:92:9a:90:0c:51:20:
                    df:d4:32:3d:e5:4a:5d:d5:d2:13:9e:60:c5:74:f7:
                    f2:d8:48:70:42:48:7d:c5:86:7d:3d:53:55:4e:ca:
                    2b:73:55:8c:de:1f:e3:ac:91:07:46:13:c2:1c:92:
                    e8:a7:e5:8e:47:1c:44:e5:36:15:6e:4a:61:f9:9c:
                    f2:d1:04:17:03:1a:84:2e:e1:f2:3a:9f:5b:9e:46:
                    d8:d0:15:92:30:d1:47:39:fc:96:12:ea:40:53:cd:
                    1d:05:fb:d7:14:ac:f6:91:ce:7e:40:9f:24:b5:21:
                    33:3a:0a:b5:d8:63:10:0f:30:ea:6f:94:b5:21:cc:
                    3c:75:f3:23:40:c1:50:dd:c7:2b:88:d4:96:3b:e3:
                    fc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E6:B8:C0:55:A1:AD:ED:01:73:68:90:C6:CC:B4:1B:A3:C1:10:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/d8d40582-bd1e-3c2e-9795-777694a9d1af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:2f:47:cd:c1:f1:50:aa:d0:9c:af:49:bd:f1:ff:70:b6:0a:
         16:bb:61:ef:25:4f:dd:f1:4f:c2:78:b4:40:41:12:4d:31:7f:
         11:97:4b:c8:ef:8f:91:9b:67:2c:b8:85:79:0a:d5:b2:1d:da:
         5a:d7:24:5f:94:bd:db:2c:4e:5c:4e:cf:e8:55:a7:77:92:f7:
         bf:c3:63:6c:27:08:fa:d4:38:70:c2:56:20:d2:9e:5c:cc:85:
         65:0f:bf:02:7a:f1:4a:cd:b8:5b:56:d8:b4:fe:6d:9d:45:d2:
         2f:5b:3b:c8:86:cc:19:41:c0:e1:cd:de:9c:44:4d:a1:63:a1:
         b7:2b:60:52:eb:28:34:b3:ec:9e:31:ed:ab:a9:eb:8e:c5:0a:
         eb:55:00:a6:c3:3d:2d:c6:71:f3:ba:f6:56:48:43:4c:61:3d:
         02:2d:b6:c8:82:c8:e1:21:e5:7b:39:ad:56:b9:41:fa:dc:c9:
         f3:42:3e:cf:87:33:af:0d:ce:e2:d5:34:ef:98:0f:8a:48:45:
         a0:7b:51:61:45:20:4e:03:4b:fb:5c:b8:ff:83:33:83:ef:14:
         9a:03:1c:cc:e2:c3:3b:3e:14:c4:d4:7c:c1:d8:00:39:ac:95:
         26:2a:2f:bb:c7:bf:fb:19:d9:9f:c8:78:56:41:33:cf:0f:d0:
         df:46:58:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoqutqdJ/HodBJeSYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy
NTc2MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk
YmM2NGY0YjEtMDU3Yi00NjZiLTkzMjYtNmMyNWUwMjc5NjA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrpMhflQLctKj98yan9oxCjMtEwkgyQ5d0bz
C4ZzHQWg/5eEh2QlNzSbDk1zaaZZeLkFpIXhGtR+VHuSO9zMtSD1Sh1X3cO5ZUiu
HZaaGYZVlxfnJztfVs89rKzCAEb5kD/ylIAu0sm8PGs+OE8GTyaSmpAMUSDf1DI9
5Upd1dITnmDFdPfy2EhwQkh9xYZ9PVNVTsorc1WM3h/jrJEHRhPCHJLop+WORxxE
5TYVbkph+Zzy0QQXAxqELuHyOp9bnkbY0BWSMNFHOfyWEupAU80dBfvXFKz2kc5+
QJ8ktSEzOgq12GMQDzDqb5S1Icw8dfMjQMFQ3ccriNSWO+P8GwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGrmuMBVoa3tAXNokMbMtBujwRAnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3
YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZDhkNDA1ODItYmQxZS0z
YzJlLTk3OTUtNzc3Njk0YTlkMWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3
YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi
MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh
NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAUvR83B8VCq0JyvSb3x/3C2Cha7Ye8lT93xT8J4tEBBEk0xfxGXS8jv
j5GbZyy4hXkK1bId2lrXJF+UvdssTlxOz+hVp3eS97/DY2wnCPrUOHDCViDSnlzM
hWUPvwJ68UrNuFtW2LT+bZ1F0i9bO8iGzBlBwOHN3pxETaFjobcrYFLrKDSz7J4x
7aup647FCutVAKbDPS3GcfO69lZIQ0xhPQIttsiCyOEh5Xs5rVa5QfrcyfNCPs+H
M68NzuLVNO+YD4pIRaB7UWFFIE4DS/tcuP+DM4PvFJoDHMziwzs+FMTUfMHYADms
lSYqL7vHv/sZ2Z/IeFZBM88P0N9GWHw=
-----END CERTIFICATE-----
Generated at Tue Jun 17 18:19:19 2025 by rpki-client