Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/56f3e8d5-c8b8-365b-a649-5cf63058640c.roa
File:                     56f3e8d5-c8b8-365b-a649-5cf63058640c.roa (raw, json)
Hash identifier:          0SnKMBc8k2D5vrcoKKyBUm1BE4DFoS5DXoRzhx9jbRI=
Subject key identifier:   2F:A5:53:69:66:78:55:A9:5F:FB:CF:38:DF:6F:85:A3:8A:74:A9:D9
Certificate issuer:       /CN=dde9f29d-2580-453b-ad9f-2dca85edaa48
Certificate serial:       010D0C9F4328584A71EB50D5338BAE20AD22F340
Authority key identifier: 87:DB:F8:A2:F9:3B:FF:88:79:0B:06:0C:AF:B8:2D:43:1A:01:47:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/56f3e8d5-c8b8-365b-a649-5cf63058640c.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     394968
IP address blocks:        69.42.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/dde9f29d-2580-453b-ad9f-2dca85edaa48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/dde9f29d-2580-453b-ad9f-2dca85edaa48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:50:d5:33:8b:ae:20:ad:22:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dde9f29d-2580-453b-ad9f-2dca85edaa48
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=c9a06c0d-a6f2-4657-a7a7-81262e3010bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:69:fd:45:3d:89:a3:b7:f5:9a:de:17:07:ea:
                    e0:4a:7c:27:38:e4:04:f0:40:e4:c6:93:5d:5c:61:
                    dc:b5:bb:68:49:dd:70:b4:fb:56:aa:5f:75:98:d4:
                    e8:15:c1:c6:38:09:74:ca:07:02:9f:92:a2:97:14:
                    96:19:f1:67:1c:5a:d5:28:30:94:00:3f:52:81:af:
                    81:2e:d0:64:0c:35:20:35:53:f7:a2:ab:08:cc:ca:
                    1d:27:83:ef:ba:0b:9b:78:b8:cb:97:8c:13:e8:3c:
                    ac:61:79:e5:cd:89:a4:f2:a5:16:a8:94:4b:dc:cf:
                    e0:b3:80:44:ab:17:58:be:6c:fa:4b:db:7c:c1:24:
                    fa:53:aa:73:2f:3a:ca:76:ca:ab:25:c7:d4:9a:69:
                    4f:95:3d:e0:57:c3:0f:a4:e1:9f:0b:7e:72:ca:54:
                    2d:48:e0:ec:8c:e9:9f:49:8f:23:49:f3:18:be:77:
                    22:03:ca:38:b2:2e:17:7c:2b:8b:fd:5e:a7:27:78:
                    ce:50:d8:4e:93:8d:c7:2f:c2:3a:e2:24:f0:c6:59:
                    9a:85:96:f1:38:23:9b:c1:07:d6:d6:2b:82:c1:27:
                    f4:79:f4:69:36:6d:7a:04:29:e6:b2:17:2f:78:57:
                    97:84:f1:64:af:da:b7:4b:61:90:a3:58:bf:5d:04:
                    e2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A5:53:69:66:78:55:A9:5F:FB:CF:38:DF:6F:85:A3:8A:74:A9:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/56f3e8d5-c8b8-365b-a649-5cf63058640c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/dde9f29d-2580-453b-ad9f-2dca85edaa48.crl

            X509v3 Authority Key Identifier:
                keyid:87:DB:F8:A2:F9:3B:FF:88:79:0B:06:0C:AF:B8:2D:43:1A:01:47:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.42.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:9c:55:84:2e:34:46:a6:58:71:a2:97:00:19:59:9c:38:22:
         c9:6c:0f:23:0d:ff:59:f4:c7:e2:c4:37:e8:2c:d0:4b:54:2e:
         53:fc:34:ee:56:67:e0:fc:81:28:d0:33:34:31:33:b1:1e:19:
         6b:16:88:93:2b:21:27:17:58:bc:f4:c8:82:a3:a9:17:1d:2e:
         bf:82:53:17:64:06:ab:16:5a:38:9b:70:35:42:9b:24:d5:fc:
         4f:d1:87:c7:c1:33:17:d2:66:ea:0d:fd:36:e9:72:5b:69:05:
         96:01:82:15:fd:62:6e:ea:4f:b6:0e:9e:37:2f:93:5d:0c:71:
         09:55:0e:20:be:30:c5:88:3f:5e:3f:e6:f9:a1:8a:eb:02:80:
         b6:91:a6:c3:c2:89:6a:62:00:4b:6d:e2:b5:fe:5b:7e:a5:9b:
         9d:eb:04:fb:38:46:6d:12:b6:24:40:3c:72:21:c8:80:2a:9b:
         cf:ce:99:20:e0:9f:2c:9c:8e:a4:0d:63:5a:46:ad:53:dd:5d:
         8e:78:35:9a:28:21:7c:63:b3:f9:b7:1c:12:eb:fb:a6:7b:e5:
         fe:cc:34:b8:3d:73:4c:3a:e6:fe:82:47:2b:71:4e:9d:15:80:
         6d:9d:2b:08:04:83:a5:02:b1:db:31:b9:dd:d8:dc:92:40:97:
         83:70:82:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx61DVM4uuIK0i80AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGRlOWYyOWQtMjU4MC00NTNiLWFkOWYtMmRjYTg1ZWRh
YTQ4MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk
YzlhMDZjMGQtYTZmMi00NjU3LWE3YTctODEyNjJlMzAxMGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWn9RT2Jo7f1mt4XB+rgSnwnOOQE8EDkxpNd
XGHctbtoSd1wtPtWql91mNToFcHGOAl0ygcCn5KilxSWGfFnHFrVKDCUAD9Sga+B
LtBkDDUgNVP3oqsIzModJ4PvugubeLjLl4wT6DysYXnlzYmk8qUWqJRL3M/gs4BE
qxdYvmz6S9t8wST6U6pzLzrKdsqrJcfUmmlPlT3gV8MPpOGfC35yylQtSODsjOmf
SY8jSfMYvnciA8o4si4XfCuL/V6nJ3jOUNhOk43HL8I64iTwxlmahZbxOCObwQfW
1iuCwSf0efRpNm16BCnmshcveFeXhPFkr9q3S2GQo1i/XQTidwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC+lU2lmeFWpX/vPON9vhaOKdKnZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZGU5
ZjI5ZC0yNTgwLTQ1M2ItYWQ5Zi0yZGNhODVlZGFhNDgvNTZmM2U4ZDUtYzhiOC0z
NjViLWE2NDktNWNmNjMwNTg2NDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGRlOWYyOWQtMjU4MC00NTNiLWFk
OWYtMmRjYTg1ZWRhYTQ4L2RkZTlmMjlkLTI1ODAtNDUzYi1hZDlmLTJkY2E4NWVk
YWE0OC5jcmwwHwYDVR0jBBgwFoAUh9v4ovk7/4h5CwYMr7gtQxoBRxUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZGU5ZjI5ZC0yNTgwLTQ1M2ItYWQ5Zi0yZGNh
ODVlZGFhNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERSrAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIicVYQuNEamWHGilwAZWZw4IslsDyMN/1n0x+LEN+gs0EtULlP8NO5W
Z+D8gSjQMzQxM7EeGWsWiJMrIScXWLz0yIKjqRcdLr+CUxdkBqsWWjibcDVCmyTV
/E/Rh8fBMxfSZuoN/TbpcltpBZYBghX9Ym7qT7YOnjcvk10McQlVDiC+MMWIP14/
5vmhiusCgLaRpsPCiWpiAEtt4rX+W36lm53rBPs4Rm0StiRAPHIhyIAqm8/OmSDg
nyycjqQNY1pGrVPdXY54NZooIXxjs/m3HBLr+6Z75f7MNLg9c0w65v6CRytxTp0V
gG2dKwgEg6UCsdsxud3Y3JJAl4Nwgh4=
-----END CERTIFICATE-----
Generated at Thu Aug 7 20:12:17 2025 by rpki-client