Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/2ce8d0f7-5797-34fb-b804-4e20823372ec.roa
File:                     2ce8d0f7-5797-34fb-b804-4e20823372ec.roa (raw, json)
Hash identifier:          QpJWfA7GV7waIsFVuTjfYBR+nYVfBZB+vGfsrpiItSQ=
Subject key identifier:   E0:9B:68:02:B4:00:F7:81:77:9B:8D:92:33:4D:9F:56:BA:70:4B:9A
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F4328584A93DEDC4136D0EE1742806CC0
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/2ce8d0f7-5797-34fb-b804-4e20823372ec.roa
Signing time:             Sun 20 Jul 2025 04:53:38 +0000
ROA not before:           Sun 20 Jul 2025 04:53:38 +0000
ROA not after:            Sat 18 Oct 2025 04:53:38 +0000
asID:                     401838
IP address blocks:        69.176.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:de:dc:41:36:d0:ee:17:42:80:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Jul 20 04:53:38 2025 GMT
            Not After : Oct 18 04:53:38 2025 GMT
        Subject: CN=309386a6-738a-4346-ba9f-48011931b06b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c1:f9:53:90:e8:61:ce:66:61:9f:ed:d2:c6:
                    cf:43:3f:73:35:0a:58:64:a9:65:6c:18:3c:8a:a7:
                    15:76:d9:38:d4:f1:a8:3a:04:a5:94:33:90:1b:09:
                    e3:56:b3:eb:21:9c:ea:5f:3f:50:ca:46:4b:0d:19:
                    bd:cc:76:0b:5a:1a:76:37:53:56:02:71:07:bc:57:
                    da:13:c5:02:49:c6:5e:d3:ff:03:b1:7e:bc:ca:d0:
                    97:b7:f1:58:30:89:2b:31:be:92:44:67:98:26:ea:
                    25:57:4d:5c:7c:8e:55:b2:9e:e1:93:5d:cf:2f:63:
                    57:b0:cf:4c:0d:25:25:dc:86:7b:59:aa:14:2b:6a:
                    44:58:c7:a3:c9:e1:b7:e3:59:b0:94:61:2f:9d:69:
                    77:d6:15:44:1f:17:02:76:1c:df:f6:f3:19:f6:c4:
                    4a:9d:05:4b:f0:88:4e:8f:58:0a:93:c7:99:79:05:
                    61:ff:68:91:70:6b:81:d9:c2:5c:1a:d1:dc:cb:d8:
                    34:c0:24:75:1e:1e:33:bb:a5:0a:d6:9f:16:e1:2e:
                    ed:3e:44:8d:01:00:e9:e7:44:4e:4b:a3:a0:40:56:
                    b0:66:42:26:ac:41:4a:32:4c:00:76:4f:fe:40:c4:
                    4a:0b:c0:ed:30:17:30:b7:7a:87:bc:da:a7:4c:f7:
                    2d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9B:68:02:B4:00:F7:81:77:9B:8D:92:33:4D:9F:56:BA:70:4B:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/2ce8d0f7-5797-34fb-b804-4e20823372ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.176.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:5f:57:03:e0:c7:f0:74:43:86:51:b1:6c:14:95:3c:a9:4c:
         b1:6f:6d:4e:0b:4e:43:0c:9e:43:5f:87:55:b8:72:36:1b:62:
         65:a9:7b:15:4f:f3:61:0b:f2:79:9a:fd:8c:9a:e3:be:33:81:
         37:35:6c:13:5f:f2:73:90:48:dd:fa:80:dd:9e:19:67:bf:7c:
         96:79:62:44:d4:32:17:fc:1a:b1:0d:75:1a:96:4c:df:6b:b8:
         77:d7:bd:00:17:3a:ed:c6:79:6c:bc:fe:fa:14:dd:13:dc:c2:
         38:80:10:bc:88:0d:87:ab:b8:67:41:6f:fb:28:d8:6b:a3:94:
         c2:ed:ac:64:f3:53:45:b7:a6:d7:c6:a9:2d:ca:60:cf:08:fc:
         78:b3:2f:99:fa:b5:8b:c3:13:d8:1f:cb:bb:d9:22:3e:3b:ab:
         05:a0:22:c6:c8:1e:c0:a7:d0:77:96:5d:b0:31:b7:ef:1e:b8:
         5a:da:d4:ed:a2:c7:58:49:a7:a8:2b:d5:b9:ec:87:f0:67:26:
         fe:64:f6:54:31:27:36:b3:26:fc:1d:b2:5b:22:a2:55:87:a6:
         05:fc:5e:32:09:1f:be:0f:f4:62:1a:1d:a1:8e:fb:64:80:3b:
         53:9b:52:65:a2:43:9a:bd:ca:0a:2d:de:68:12:2f:ae:7b:6a:
         63:f1:da:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqT3txBNtDuF0KAbMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1
MGU4MB4XDTI1MDcyMDA0NTMzOFoXDTI1MTAxODA0NTMzOFowLzEtMCsGA1UEAxMk
MzA5Mzg2YTYtNzM4YS00MzQ2LWJhOWYtNDgwMTE5MzFiMDZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8H5U5DoYc5mYZ/t0sbPQz9zNQpYZKllbBg8
iqcVdtk41PGoOgSllDOQGwnjVrPrIZzqXz9QykZLDRm9zHYLWhp2N1NWAnEHvFfa
E8UCScZe0/8DsX68ytCXt/FYMIkrMb6SRGeYJuolV01cfI5Vsp7hk13PL2NXsM9M
DSUl3IZ7WaoUK2pEWMejyeG341mwlGEvnWl31hVEHxcCdhzf9vMZ9sRKnQVL8IhO
j1gKk8eZeQVh/2iRcGuB2cJcGtHcy9g0wCR1Hh4zu6UK1p8W4S7tPkSNAQDp50RO
S6OgQFawZkImrEFKMkwAdk/+QMRKC8DtMBcwt3qHvNqnTPctGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOCbaAK0APeBd5uNkjNNn1a6cEuaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0
NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMmNlOGQwZjctNTc5Ny0z
NGZiLWI4MDQtNGUyMDgyMzM3MmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk
MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz
NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3
NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARbBYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI1fVwPgx/B0Q4ZRsWwUlTypTLFvbU4LTkMMnkNfh1W4cjYbYmWpexVP
82EL8nma/Yya474zgTc1bBNf8nOQSN36gN2eGWe/fJZ5YkTUMhf8GrENdRqWTN9r
uHfXvQAXOu3GeWy8/voU3RPcwjiAELyIDYeruGdBb/so2GujlMLtrGTzU0W3ptfG
qS3KYM8I/HizL5n6tYvDE9gfy7vZIj47qwWgIsbIHsCn0HeWXbAxt+8euFra1O2i
x1hJp6gr1bnsh/BnJv5k9lQxJzazJvwdslsiolWHpgX8XjIJH74P9GIaHaGO+2SA
O1ObUmWiQ5q9ygot3mgSL657amPx2jg=
-----END CERTIFICATE-----
Generated at Tue Jul 22 11:52:14 2025 by rpki-client