Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa
File:                     fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa (raw, json)
Hash identifier:          3DS4lnlBdftge3rUxA7dwJ5NPbCLv6JoWQzRC832vEo=
Subject key identifier:   68:EE:23:52:88:2A:B6:AB:55:A6:07:55:60:4B:1E:D3:E7:6D:AA:8A
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584A89A61B4FE3E012D766B3CEB0
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     55293
IP address blocks:        200.69.20.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:1b:4f:e3:e0:12:d7:66:b3:ce:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=0dbf37b2-4905-4e07-9171-a4eb613baa82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6c:0a:a0:2c:2d:34:fd:9a:ac:78:00:71:9f:
                    6e:d2:f6:8c:85:53:00:c0:37:02:fc:63:66:b7:0e:
                    1c:b4:79:f6:8e:b5:31:17:1b:d0:4f:35:dc:03:6f:
                    f4:43:23:48:df:b3:06:68:e5:c5:a4:30:d6:0d:fe:
                    89:4f:04:b7:c8:7d:9d:ad:a6:c5:97:6b:a4:64:3e:
                    a1:64:ba:1d:7a:2e:b7:12:b5:54:46:8c:5f:cf:8e:
                    6f:d5:63:cf:c7:51:b8:eb:7f:4b:13:50:25:48:a6:
                    97:9a:cb:5b:c6:1b:c4:81:7a:bc:b2:93:0c:6f:47:
                    84:93:68:1f:59:5a:ba:06:70:66:5f:cb:93:73:96:
                    9f:10:3f:85:40:20:46:d1:d6:9a:b4:43:be:92:ad:
                    31:7d:61:8f:a7:b5:3f:65:5e:a9:7e:89:66:37:55:
                    03:a7:11:d8:3d:9c:0d:ae:8e:66:ec:97:b2:f6:87:
                    83:fa:fb:32:85:e2:2f:b5:6b:39:a1:d0:7d:83:fc:
                    93:45:e6:66:ea:ff:9a:62:48:6d:9d:97:2a:c9:6c:
                    c0:ec:cf:b7:b1:1e:26:af:61:99:f4:2a:55:1e:84:
                    48:30:df:b8:be:ae:12:ef:2f:77:25:6e:ac:5a:3c:
                    d6:2a:27:c6:f7:d5:ad:20:8f:f7:71:cc:0b:47:fd:
                    0b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:EE:23:52:88:2A:B6:AB:55:A6:07:55:60:4B:1E:D3:E7:6D:AA:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.69.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:4d:a4:f0:20:e3:d9:25:05:84:53:bf:f9:56:e8:83:3b:49:
         98:08:d0:cf:aa:5a:25:e6:12:85:98:26:12:7c:87:34:91:ff:
         90:a2:fe:05:59:53:4a:a1:31:c7:b3:c4:8d:f5:13:07:c9:4f:
         97:26:79:89:e7:c6:61:bc:a0:da:ad:4a:7d:18:8f:76:da:be:
         9a:94:05:f4:90:d5:f7:f7:16:e6:dd:27:0d:d3:5c:ad:9a:72:
         0f:a7:dc:a6:78:e0:39:3f:20:77:05:51:60:ff:b9:e8:30:fd:
         9e:32:90:50:33:85:a4:d8:a2:71:d8:c4:0c:d5:f7:c9:b8:ac:
         d1:0c:ba:e1:0b:15:be:01:89:7f:68:23:7d:06:14:ab:11:6d:
         98:8a:c8:3f:25:0c:47:0a:2e:90:55:cc:06:b1:fa:a4:c8:6c:
         c4:30:d4:49:19:1f:60:a6:f0:68:46:2f:0f:fe:4c:a2:d9:e3:
         af:f6:d8:e1:6f:45:81:8f:76:76:45:87:e0:2d:73:50:7c:e7:
         11:d1:f3:d4:36:0a:0d:d8:1a:21:eb:06:56:cf:52:08:62:a3:
         c9:73:46:42:e6:48:75:17:d1:3a:96:b6:23:ed:37:e4:b8:a2:
         ef:7a:79:f9:ca:3f:0b:42:7d:b1:ea:2d:e4:d3:d5:60:6d:21:
         2e:9d:30:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:59:13 2025 by rpki-client