Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/7c54fd35-e023-3e09-b469-e7ddddab2445.roa
File:                     7c54fd35-e023-3e09-b469-e7ddddab2445.roa (raw, json)
Hash identifier:          SAdPr8wh8Tfynjms+FoA0uPedQbz8SiCGBsRyyFsN/8=
Subject key identifier:   E8:CD:1F:88:A2:C7:75:24:83:6F:5B:3F:64:FD:18:CB:EA:E2:04:B6
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F4328584A612B21EDE1DE88A4C87B5BB0
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/7c54fd35-e023-3e09-b469-e7ddddab2445.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     1121
IP address blocks:        69.176.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:21:ed:e1:de:88:a4:c8:7b:5b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=0a359825-fa31-4b13-b968-3ffad78e62f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a6:06:47:f7:9f:fd:a3:d6:52:b2:a0:f8:3c:
                    e1:2b:4f:5b:e0:79:fb:88:f2:e4:8c:56:78:12:44:
                    69:ba:ef:28:8c:c9:17:d7:2c:fb:04:ba:b2:34:03:
                    52:4d:7b:e2:c5:fc:88:d5:35:fe:f3:39:3a:c8:6f:
                    5d:d5:6a:d9:60:53:7b:7e:1f:19:1d:56:99:96:80:
                    f4:a7:ba:6c:0c:48:39:10:27:e9:8a:08:26:b6:7f:
                    28:c0:63:4c:a7:61:ef:da:09:25:d1:8b:81:96:d4:
                    e1:5a:ad:58:21:12:42:87:51:8f:a7:ed:ad:eb:8f:
                    ac:af:84:37:00:a4:d2:d7:ef:53:e2:5d:f4:9d:b9:
                    bc:a4:c5:1c:cc:74:bb:4c:7a:bb:a0:25:66:24:40:
                    58:d7:aa:04:98:64:b7:b8:9d:2a:2d:5b:da:f8:ce:
                    b2:f5:5b:bf:76:b3:67:a6:c5:bb:7b:1c:f6:63:f1:
                    e9:fd:36:38:aa:56:f3:8e:8a:de:b8:6f:ae:86:6c:
                    7f:72:72:73:5b:50:84:a0:fb:12:75:8a:ca:3e:d8:
                    07:59:26:a5:52:53:67:da:f7:30:a8:18:0b:a0:3c:
                    19:2d:1c:a2:c4:29:34:b2:ee:d0:f4:29:a2:be:59:
                    e0:be:37:fe:ee:87:08:64:38:8c:2a:54:af:b6:65:
                    8f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CD:1F:88:A2:C7:75:24:83:6F:5B:3F:64:FD:18:CB:EA:E2:04:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/7c54fd35-e023-3e09-b469-e7ddddab2445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.176.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:03:c7:31:a3:c6:ae:2b:c7:30:7f:93:34:5c:65:71:22:71:
         51:7a:66:5e:cf:a8:66:19:dd:00:53:c6:c4:d9:be:c4:62:e4:
         d8:95:83:66:f3:b5:e2:7f:9e:57:67:bf:3c:da:02:0b:ac:b0:
         66:f8:3f:a1:df:80:02:f2:96:ba:5f:42:57:50:7b:f4:bf:db:
         ab:e5:c8:64:8f:51:1f:2e:57:f2:02:83:ca:ba:95:b1:60:8c:
         db:08:2f:6e:94:b9:8f:34:cc:1c:fa:a6:38:e3:95:ce:45:e6:
         b2:63:de:30:f2:d7:fe:0d:c6:ae:ce:0f:ef:c4:c1:0e:fd:c9:
         f2:a7:14:db:de:ec:fd:bb:c5:3d:38:51:da:56:aa:fe:98:87:
         a2:c5:32:e3:5a:2e:99:e7:52:6c:fd:03:4b:38:2e:88:ef:a1:
         1f:ca:17:f2:b4:34:40:b1:06:6d:93:11:7f:68:0e:d5:98:83:
         e7:b5:38:8e:9c:16:68:4f:1d:ee:54:05:23:22:6b:6d:4d:c5:
         0d:3d:a9:9e:1c:07:d9:c0:86:ba:38:f3:c2:13:47:83:eb:b9:
         e8:fe:0e:1f:e0:6e:4a:5f:48:56:17:a8:f2:ea:22:a9:3a:40:
         97:6c:8a:49:98:f7:92:ec:b2:74:6c:50:8d:7a:00:11:ba:bf:
         3a:2e:98:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKyHt4d6IpMh7W7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1
MGU4MB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk
MGEzNTk4MjUtZmEzMS00YjEzLWI5NjgtM2ZmYWQ3OGU2MmYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaYGR/ef/aPWUrKg+DzhK09b4Hn7iPLkjFZ4
EkRpuu8ojMkX1yz7BLqyNANSTXvixfyI1TX+8zk6yG9d1WrZYFN7fh8ZHVaZloD0
p7psDEg5ECfpiggmtn8owGNMp2Hv2gkl0YuBltThWq1YIRJCh1GPp+2t64+sr4Q3
AKTS1+9T4l30nbm8pMUczHS7THq7oCVmJEBY16oEmGS3uJ0qLVva+M6y9Vu/drNn
psW7exz2Y/Hp/TY4qlbzjoreuG+uhmx/cnJzW1CEoPsSdYrKPtgHWSalUlNn2vcw
qBgLoDwZLRyixCk0su7Q9Cmivlngvjf+7ocIZDiMKlSvtmWP9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOjNH4iix3Ukg29bP2T9GMvq4gS2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0
NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvN2M1NGZkMzUtZTAyMy0z
ZTA5LWI0NjktZTdkZGRkYWIyNDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk
MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz
NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3
NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARbBcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAgDxzGjxq4rxzB/kzRcZXEicVF6Zl7PqGYZ3QBTxsTZvsRi5NiVg2bz
teJ/nldnvzzaAgussGb4P6HfgALylrpfQldQe/S/26vlyGSPUR8uV/ICg8q6lbFg
jNsIL26UuY80zBz6pjjjlc5F5rJj3jDy1/4Nxq7OD+/EwQ79yfKnFNve7P27xT04
UdpWqv6Yh6LFMuNaLpnnUmz9A0s4LojvoR/KF/K0NECxBm2TEX9oDtWYg+e1OI6c
FmhPHe5UBSMia21NxQ09qZ4cB9nAhro488ITR4Pruej+Dh/gbkpfSFYXqPLqIqk6
QJdsikmY95LssnRsUI16ABG6vzoumNU=
-----END CERTIFICATE-----
Generated at Thu Jul 24 04:54:57 2025 by rpki-client