Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/56f3e8d5-c8b8-365b-a649-5cf63058640c.roa
File:                     56f3e8d5-c8b8-365b-a649-5cf63058640c.roa (raw, json)
Hash identifier:          6DEJXDHp+RPlQXPHuFh+qOXxWRw47GQ9eA5E3fZR21Q=
Subject key identifier:   6D:D5:1C:14:04:A7:95:7F:1C:66:E0:BA:17:A5:36:A1:CE:B1:D5:38
Certificate issuer:       /CN=dde9f29d-2580-453b-ad9f-2dca85edaa48
Certificate serial:       010D0C9F4328584B52A753AF2AC9C8057383BA80
Authority key identifier: 87:DB:F8:A2:F9:3B:FF:88:79:0B:06:0C:AF:B8:2D:43:1A:01:47:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/56f3e8d5-c8b8-365b-a649-5cf63058640c.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     394968
IP address blocks:        69.42.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/dde9f29d-2580-453b-ad9f-2dca85edaa48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/dde9f29d-2580-453b-ad9f-2dca85edaa48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:53:af:2a:c9:c8:05:73:83:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dde9f29d-2580-453b-ad9f-2dca85edaa48
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=031b7df2-a240-4e69-bf84-5f0473832f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9f:eb:2c:50:5a:17:fb:13:ae:b3:53:02:be:
                    76:93:62:3e:8d:5e:fa:29:73:a6:1f:8f:8c:6e:e7:
                    ac:40:5d:af:06:f9:62:89:f8:40:26:88:76:4d:c0:
                    3d:eb:45:1a:ce:bb:98:55:93:83:ca:f4:24:f0:b3:
                    ac:e9:f7:9f:f1:6a:7f:8b:c8:39:f5:f0:eb:5e:a3:
                    7f:50:4f:4c:c2:e2:09:e8:54:81:40:3e:87:8c:58:
                    fd:e6:2f:92:f8:5a:92:b2:8a:15:2e:24:9d:9b:cf:
                    3a:58:13:5e:8f:d0:31:7e:d3:ca:3c:7d:1b:4a:13:
                    78:12:7f:6a:65:2e:18:73:ff:69:bc:b2:a6:fe:87:
                    c5:78:d8:89:6f:fc:a2:89:ec:e6:ad:0b:a7:94:7e:
                    a9:ed:1a:b8:c9:ac:82:72:18:eb:6c:75:45:3c:6e:
                    ab:09:f4:1c:8b:30:9b:e2:6c:87:1c:3d:c9:d3:c4:
                    6b:e3:29:46:ae:0f:a4:55:97:71:23:ba:08:83:3a:
                    e7:13:21:b1:74:d8:45:d1:1d:8f:ff:4a:84:2c:a9:
                    b6:af:5f:cb:bc:70:62:d2:a0:bf:63:1c:74:c4:07:
                    47:bc:73:3e:0a:d5:a0:95:30:76:0e:af:4c:03:13:
                    45:b3:92:12:ae:5d:3d:4d:a1:e3:4a:eb:9a:f0:5a:
                    e9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D5:1C:14:04:A7:95:7F:1C:66:E0:BA:17:A5:36:A1:CE:B1:D5:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/56f3e8d5-c8b8-365b-a649-5cf63058640c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/dde9f29d-2580-453b-ad9f-2dca85edaa48.crl

            X509v3 Authority Key Identifier:
                keyid:87:DB:F8:A2:F9:3B:FF:88:79:0B:06:0C:AF:B8:2D:43:1A:01:47:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.42.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:52:d4:27:fa:92:94:b8:8b:00:9a:53:12:b3:9e:4a:56:85:
         97:46:00:16:f7:3f:91:9a:f4:8f:60:03:f5:dd:8c:ea:a7:ef:
         80:e1:d6:fe:a9:da:2a:83:6c:53:03:da:7e:a5:f7:f4:9e:65:
         00:cc:bb:ec:e1:7e:22:0c:b7:f5:cb:a8:ac:f6:fa:75:3a:45:
         41:ad:ed:00:e7:a5:b4:64:73:0d:37:bc:06:e7:53:ee:b7:7b:
         db:62:6a:33:9a:4d:19:3f:74:1a:d7:4c:ee:f1:66:72:6a:84:
         b9:fa:4c:96:6e:51:a8:8e:3d:97:64:ea:ec:c6:54:3d:6c:1a:
         5c:60:07:e0:05:16:1b:14:45:1a:d0:7e:8c:0e:81:30:f9:ac:
         ce:04:32:d3:93:75:94:6e:02:10:c4:78:37:43:f0:c9:79:c7:
         05:a7:a5:60:35:21:b0:d9:ef:ee:3c:4c:7c:f0:73:bf:7e:a4:
         91:3c:32:94:fd:8e:8f:ff:cd:8c:74:e7:e6:30:d8:8d:5c:05:
         60:11:3d:13:2a:b1:9d:9d:dc:45:ea:03:d8:b1:ae:34:90:4e:
         54:36:8a:73:e7:92:cd:d3:d1:7d:d7:9d:9f:29:ae:6b:4d:e4:
         50:17:a6:50:2d:a1:d0:ee:96:7e:d5:4a:9c:a1:c7:47:cd:0c:
         60:02:6a:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1OvKsnIBXODuoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGRlOWYyOWQtMjU4MC00NTNiLWFkOWYtMmRjYTg1ZWRh
YTQ4MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk
MDMxYjdkZjItYTI0MC00ZTY5LWJmODQtNWYwNDczODMyZjdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5/rLFBaF/sTrrNTAr52k2I+jV76KXOmH4+M
buesQF2vBvliifhAJoh2TcA960UazruYVZODyvQk8LOs6fef8Wp/i8g59fDrXqN/
UE9MwuIJ6FSBQD6HjFj95i+S+FqSsooVLiSdm886WBNej9AxftPKPH0bShN4En9q
ZS4Yc/9pvLKm/ofFeNiJb/yiiezmrQunlH6p7Rq4yayCchjrbHVFPG6rCfQcizCb
4myHHD3J08Rr4ylGrg+kVZdxI7oIgzrnEyGxdNhF0R2P/0qELKm2r1/LvHBi0qC/
Yxx0xAdHvHM+CtWglTB2Dq9MAxNFs5ISrl09TaHjSuua8Frp5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG3VHBQEp5V/HGbguhelNqHOsdU4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZGU5
ZjI5ZC0yNTgwLTQ1M2ItYWQ5Zi0yZGNhODVlZGFhNDgvNTZmM2U4ZDUtYzhiOC0z
NjViLWE2NDktNWNmNjMwNTg2NDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGRlOWYyOWQtMjU4MC00NTNiLWFk
OWYtMmRjYTg1ZWRhYTQ4L2RkZTlmMjlkLTI1ODAtNDUzYi1hZDlmLTJkY2E4NWVk
YWE0OC5jcmwwHwYDVR0jBBgwFoAUh9v4ovk7/4h5CwYMr7gtQxoBRxUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZGU5ZjI5ZC0yNTgwLTQ1M2ItYWQ5Zi0yZGNh
ODVlZGFhNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERSrAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD5S1Cf6kpS4iwCaUxKznkpWhZdGABb3P5Ga9I9gA/XdjOqn74Dh1v6p
2iqDbFMD2n6l9/SeZQDMu+zhfiIMt/XLqKz2+nU6RUGt7QDnpbRkcw03vAbnU+63
e9tiajOaTRk/dBrXTO7xZnJqhLn6TJZuUaiOPZdk6uzGVD1sGlxgB+AFFhsURRrQ
fowOgTD5rM4EMtOTdZRuAhDEeDdD8Ml5xwWnpWA1IbDZ7+48THzwc79+pJE8MpT9
jo//zYx05+Yw2I1cBWARPRMqsZ2d3EXqA9ixrjSQTlQ2inPnks3T0X3XnZ8prmtN
5FAXplAtodDuln7VSpyhx0fNDGACaqU=
-----END CERTIFICATE-----
Generated at Thu Oct 9 03:51:18 2025 by rpki-client