Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/fff01e26-8c69-32bd-b1ba-5567dbdd6213.roa
File:                     fff01e26-8c69-32bd-b1ba-5567dbdd6213.roa (raw, json)
Hash identifier:          5Xa9dmrye0vqhhgVnNwKg42LHIYAo9opZs0D0kcorP4=
Subject key identifier:   D7:6B:AC:7F:23:61:FC:9D:10:BF:98:BD:7E:A2:91:F0:D9:46:81:36
Certificate issuer:       /CN=dde9f29d-2580-453b-ad9f-2dca85edaa48
Certificate serial:       010D0C9F4328584A71EB50B7F2F4363704390E00
Authority key identifier: 87:DB:F8:A2:F9:3B:FF:88:79:0B:06:0C:AF:B8:2D:43:1A:01:47:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/fff01e26-8c69-32bd-b1ba-5567dbdd6213.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     26404
IP address blocks:        69.42.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/dde9f29d-2580-453b-ad9f-2dca85edaa48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/dde9f29d-2580-453b-ad9f-2dca85edaa48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:50:b7:f2:f4:36:37:04:39:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dde9f29d-2580-453b-ad9f-2dca85edaa48
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=aa335f88-8246-4070-a7a7-f116abb17b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:06:e2:a3:70:6b:dc:ee:9b:1b:24:0c:ce:22:
                    18:eb:a6:e0:46:68:64:b3:99:1f:22:1b:a1:76:7f:
                    9b:65:04:15:a8:f7:b6:e3:b9:3d:b7:dc:5f:fd:51:
                    71:62:f0:4c:a5:96:26:87:33:96:ce:53:50:b9:73:
                    bf:80:38:87:8c:07:9a:27:d3:f8:f0:2e:5a:ea:4e:
                    54:64:a8:6e:7f:97:0c:24:09:2f:0c:ab:b1:c4:3f:
                    89:a8:95:7a:ad:df:72:ae:cb:2c:76:69:fb:0e:30:
                    88:df:95:c7:e3:1d:aa:1e:9a:9a:47:db:d8:4e:09:
                    6b:d3:09:e3:ac:3f:c9:04:cb:3c:ae:71:13:50:91:
                    b8:b8:e2:8c:5a:17:37:f2:c8:16:71:13:1b:79:50:
                    d9:73:33:ce:0c:83:28:1c:96:fd:e8:be:3a:9f:0f:
                    69:be:c0:e1:06:90:38:12:cc:47:5c:6e:ef:19:32:
                    a0:16:c4:33:a1:36:9a:33:cd:f1:c1:1d:8a:0b:07:
                    8e:7c:01:cf:07:a5:7f:ed:0f:8d:e5:15:37:c0:14:
                    23:0c:be:1b:a8:c8:2e:51:51:71:00:ff:a2:a9:f2:
                    aa:94:6a:7a:27:2b:d1:c0:ce:d0:94:8e:55:34:d1:
                    ab:e6:c0:5d:0d:fb:82:81:f5:1e:d9:f5:03:e4:87:
                    38:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6B:AC:7F:23:61:FC:9D:10:BF:98:BD:7E:A2:91:F0:D9:46:81:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/fff01e26-8c69-32bd-b1ba-5567dbdd6213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/dde9f29d-2580-453b-ad9f-2dca85edaa48.crl

            X509v3 Authority Key Identifier:
                keyid:87:DB:F8:A2:F9:3B:FF:88:79:0B:06:0C:AF:B8:2D:43:1A:01:47:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.42.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:9c:9a:48:3a:0b:6d:5a:1b:ec:24:c6:96:bc:b9:75:36:89:
         7c:95:92:9a:e1:de:44:e3:6c:13:87:9d:cb:0f:06:04:68:00:
         dd:2a:5a:15:03:5d:fd:49:ac:de:b8:cb:69:f8:08:5f:89:e0:
         d7:dc:5f:5d:00:93:b8:97:a9:4a:1a:18:86:3f:f8:68:11:35:
         43:c1:54:cd:aa:ea:a0:66:8b:b2:61:22:71:39:51:17:cd:cc:
         c0:8e:e7:26:f1:13:33:d3:2b:3f:d0:2f:91:d7:fd:70:cb:42:
         da:7b:ee:94:f8:6f:db:89:c3:e4:1a:88:33:c4:4e:1c:13:6d:
         aa:cb:eb:ef:77:74:f2:7b:82:36:a5:16:c4:03:6d:e7:f9:fa:
         a5:1c:74:fc:a3:74:7a:5e:29:df:3e:c1:95:19:7a:ec:2d:12:
         de:74:8f:57:27:95:43:2f:e5:88:c7:85:42:81:91:4b:75:e5:
         d9:01:31:10:0a:f4:ff:8f:af:f8:2c:4e:7c:7c:b0:8f:eb:df:
         a7:eb:b2:bd:ec:2b:80:42:3f:30:22:ea:61:91:ff:7c:af:c3:
         4a:67:a6:75:4b:38:7d:ff:1a:f4:77:49:be:c4:f0:15:2d:11:
         b2:41:07:a4:23:54:08:73:fa:ed:4b:ad:6c:bc:af:f7:06:36:
         03:11:46:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx61C38vQ2NwQ5DgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGRlOWYyOWQtMjU4MC00NTNiLWFkOWYtMmRjYTg1ZWRh
YTQ4MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk
YWEzMzVmODgtODI0Ni00MDcwLWE3YTctZjExNmFiYjE3YjM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQbio3Br3O6bGyQMziIY66bgRmhks5kfIhuh
dn+bZQQVqPe247k9t9xf/VFxYvBMpZYmhzOWzlNQuXO/gDiHjAeaJ9P48C5a6k5U
ZKhuf5cMJAkvDKuxxD+JqJV6rd9yrsssdmn7DjCI35XH4x2qHpqaR9vYTglr0wnj
rD/JBMs8rnETUJG4uOKMWhc38sgWcRMbeVDZczPODIMoHJb96L46nw9pvsDhBpA4
EsxHXG7vGTKgFsQzoTaaM83xwR2KCweOfAHPB6V/7Q+N5RU3wBQjDL4bqMguUVFx
AP+iqfKqlGp6JyvRwM7QlI5VNNGr5sBdDfuCgfUe2fUD5Ic4JwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNdrrH8jYfydEL+YvX6ikfDZRoE2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZGU5
ZjI5ZC0yNTgwLTQ1M2ItYWQ5Zi0yZGNhODVlZGFhNDgvZmZmMDFlMjYtOGM2OS0z
MmJkLWIxYmEtNTU2N2RiZGQ2MjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGRlOWYyOWQtMjU4MC00NTNiLWFk
OWYtMmRjYTg1ZWRhYTQ4L2RkZTlmMjlkLTI1ODAtNDUzYi1hZDlmLTJkY2E4NWVk
YWE0OC5jcmwwHwYDVR0jBBgwFoAUh9v4ovk7/4h5CwYMr7gtQxoBRxUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZGU5ZjI5ZC0yNTgwLTQ1M2ItYWQ5Zi0yZGNh
ODVlZGFhNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERSrAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFucmkg6C21aG+wkxpa8uXU2iXyVkprh3kTjbBOHncsPBgRoAN0qWhUD
Xf1JrN64y2n4CF+J4NfcX10Ak7iXqUoaGIY/+GgRNUPBVM2q6qBmi7JhInE5URfN
zMCO5ybxEzPTKz/QL5HX/XDLQtp77pT4b9uJw+QaiDPEThwTbarL6+93dPJ7gjal
FsQDbef5+qUcdPyjdHpeKd8+wZUZeuwtEt50j1cnlUMv5YjHhUKBkUt15dkBMRAK
9P+Pr/gsTnx8sI/r36frsr3sK4BCPzAi6mGR/3yvw0pnpnVLOH3/GvR3Sb7E8BUt
EbJBB6QjVAhz+u1LrWy8r/cGNgMRRgo=
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:14:51 2025 by rpki-client