Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/957d37b0-4607-38f4-8d9e-5317eee853fe.roa
File:                     957d37b0-4607-38f4-8d9e-5317eee853fe.roa (raw, json)
Hash identifier:          6WubXcOsS7ijRzc5Q8uNFfEH8GnKecXkXeJ+rz9UCso=
Subject key identifier:   61:24:A9:BD:31:CF:58:75:F4:B6:9D:DF:1B:39:A6:22:F6:71:4E:E5
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584B2A2C33B4DD15F724FAE58A80
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/957d37b0-4607-38f4-8d9e-5317eee853fe.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     13720
IP address blocks:        69.174.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:33:b4:dd:15:f7:24:fa:e5:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=64d02ef0-e82a-4b81-9636-38cf38d0c888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f5:80:af:ec:0a:03:e3:47:6c:a8:67:7d:33:
                    75:81:40:32:43:81:7f:5a:ad:2c:4f:7c:2b:eb:60:
                    ea:a9:1c:10:66:fe:3a:c2:9f:93:5d:d5:e6:6f:3f:
                    2f:90:6f:47:e2:7c:89:80:9c:20:d1:4e:41:41:8d:
                    80:6d:aa:bc:e7:4f:9a:90:99:18:26:7a:d8:60:98:
                    1e:52:3e:74:21:29:e9:f6:c7:94:5c:97:6f:c0:6b:
                    6e:5e:ec:1d:9c:d0:b0:74:1e:c5:b9:85:8b:35:bb:
                    62:31:d3:15:c7:2f:5d:ec:b0:ad:0f:8f:af:db:00:
                    59:a3:7e:48:8b:ec:9d:f9:c2:5e:8d:0b:51:d6:68:
                    0c:52:a8:54:d6:a9:8d:64:89:1c:ea:d9:7d:86:f0:
                    6f:4d:ec:a1:d7:96:a5:4b:e7:de:4c:2d:6b:7c:ee:
                    e3:ef:b5:8a:cc:23:bf:0e:9c:24:02:9c:35:5a:90:
                    30:e9:73:d0:55:af:e7:3b:33:ed:15:21:ab:af:e7:
                    b6:b5:16:7e:2a:29:f6:a5:e3:49:66:12:05:e5:f1:
                    24:26:c3:b2:c6:1e:72:71:a3:f6:65:6b:88:88:23:
                    dd:ec:e4:ce:e0:85:ff:00:b5:1b:dd:80:f4:50:ce:
                    3d:82:bf:4a:aa:fd:82:6b:91:08:46:98:cf:8f:32:
                    74:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:24:A9:BD:31:CF:58:75:F4:B6:9D:DF:1B:39:A6:22:F6:71:4E:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/957d37b0-4607-38f4-8d9e-5317eee853fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.174.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:ab:1a:55:c6:5c:ab:e1:51:94:34:bd:4d:5a:9b:26:7d:1c:
         f8:97:55:3d:6c:ca:5d:3d:8d:8a:4e:73:26:3f:32:00:ca:fe:
         53:d9:ef:5a:71:0f:78:af:80:0c:7f:b0:45:f4:5f:53:43:97:
         04:07:63:5a:28:e9:97:c8:97:c0:8c:52:37:57:da:0b:d3:df:
         81:84:30:08:d6:2e:48:ff:ef:68:4b:20:31:f9:00:97:28:86:
         7c:c8:77:cf:0c:28:97:4a:7f:16:fb:32:ae:8c:e0:aa:f2:2a:
         b9:9a:e2:b1:ea:fa:09:48:16:73:de:45:70:32:2b:de:be:78:
         74:fd:bf:b1:9d:c4:d2:30:14:c0:bc:53:fa:9c:94:9f:f4:bf:
         f3:d1:4b:80:fe:93:16:ea:6d:e0:dc:74:bf:41:e4:ac:f7:30:
         f0:02:f6:4c:0f:0f:83:cf:1c:e8:55:72:d8:d3:73:95:c1:cf:
         bf:c8:51:b1:a7:ae:21:35:e9:bc:78:11:2d:bb:90:69:cc:40:
         b4:eb:7e:d3:4a:eb:80:db:ce:14:fe:97:38:1e:be:77:fa:42:
         35:76:92:58:5c:d8:d8:81:cb:e6:71:f1:4c:97:ff:ac:de:69:
         4d:31:8a:23:36:85:4f:2d:a8:f0:14:4d:56:eb:f4:31:14:9a:
         60:70:bf:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLDO03RX3JPrlioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM3YTZmYzgtMzVjMy00MTUxLWFhMmUtMjUxMzQyMGY5
MzQ0MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk
NjRkMDJlZjAtZTgyYS00YjgxLTk2MzYtMzhjZjM4ZDBjODg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvWAr+wKA+NHbKhnfTN1gUAyQ4F/Wq0sT3wr
62DqqRwQZv46wp+TXdXmbz8vkG9H4nyJgJwg0U5BQY2Abaq850+akJkYJnrYYJge
Uj50ISnp9seUXJdvwGtuXuwdnNCwdB7FuYWLNbtiMdMVxy9d7LCtD4+v2wBZo35I
i+yd+cJejQtR1mgMUqhU1qmNZIkc6tl9hvBvTeyh15alS+feTC1rfO7j77WKzCO/
DpwkApw1WpAw6XPQVa/nOzPtFSGrr+e2tRZ+Kin2peNJZhIF5fEkJsOyxh5ycaP2
ZWuIiCPd7OTO4IX/ALUb3YD0UM49gr9Kqv2Ca5EIRpjPjzJ0owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGEkqb0xz1h19Lad3xs5piL2cU7lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85Mzdh
NmZjOC0zNWMzLTQxNTEtYWEyZS0yNTEzNDIwZjkzNDQvOTU3ZDM3YjAtNDYwNy0z
OGY0LThkOWUtNTMxN2VlZTg1M2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTM3YTZmYzgtMzVjMy00MTUxLWFh
MmUtMjUxMzQyMGY5MzQ0LzkzN2E2ZmM4LTM1YzMtNDE1MS1hYTJlLTI1MTM0MjBm
OTM0NC5jcmwwHwYDVR0jBBgwFoAUah/mTh0WOW2Gbpk7qGQprsNO/HgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MzdhNmZjOC0zNWMzLTQxNTEtYWEyZS0yNTEz
NDIwZjkzNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRa7IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAASrGlXGXKvhUZQ0vU1amyZ9HPiXVT1syl09jYpOcyY/MgDK/lPZ71px
D3ivgAx/sEX0X1NDlwQHY1oo6ZfIl8CMUjdX2gvT34GEMAjWLkj/72hLIDH5AJco
hnzId88MKJdKfxb7Mq6M4KryKrma4rHq+glIFnPeRXAyK96+eHT9v7GdxNIwFMC8
U/qclJ/0v/PRS4D+kxbqbeDcdL9B5Kz3MPAC9kwPD4PPHOhVctjTc5XBz7/IUbGn
riE16bx4ES27kGnMQLTrftNK64DbzhT+lzgevnf6QjV2klhc2NiBy+Zx8UyX/6ze
aU0xiiM2hU8tqPAUTVbr9DEUmmBwv/8=
-----END CERTIFICATE-----
Generated at Sat Oct 11 07:46:24 2025 by rpki-client