Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9f473396-3958-39ad-8347-00413e951173.roa
File:                     9f473396-3958-39ad-8347-00413e951173.roa (raw, json)
Hash identifier:          H+5llIJCehcqr+kTnxlFvWw8e2Mfr/dxdRN4utEMURc=
Subject key identifier:   60:20:4C:B0:73:60:D4:18:CD:AB:42:A0:0E:B7:E0:46:31:FF:E8:80
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B2B919BFC302FB1E7982C91C0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9f473396-3958-39ad-8347-00413e951173.roa
Signing time:             Fri 12 Sep 2025 13:00:42 +0000
ROA not before:           Fri 12 Sep 2025 13:00:42 +0000
ROA not after:            Thu 11 Dec 2025 14:00:42 +0000
asID:                     399073
IP address blocks:        69.17.6.0/24 maxlen: 24
                          69.17.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2b:91:9b:fc:30:2f:b1:e7:98:2c:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 12 13:00:42 2025 GMT
            Not After : Dec 11 14:00:42 2025 GMT
        Subject: CN=ccc1c252-3479-4b1a-9e2e-bdb24d1d53b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:81:2a:b8:9f:1e:5b:ad:2d:49:a1:0c:ed:37:
                    9c:7b:2d:16:31:5f:4b:3a:82:71:d2:ec:87:72:1b:
                    3e:85:3c:a0:95:e4:03:5f:ee:34:2b:4d:d4:3e:9f:
                    91:5a:d7:3c:08:fd:13:b8:f4:7d:29:f6:44:8a:9e:
                    ef:a7:bd:52:34:52:f9:1c:5a:87:6c:88:35:94:2c:
                    3b:7f:40:be:33:7c:62:e0:47:6d:02:05:8f:e6:30:
                    ae:df:1a:2b:2f:df:c1:74:d1:ff:cb:9a:f6:a7:a9:
                    aa:fd:8a:99:cf:a6:61:08:2f:6a:25:01:c8:2d:a9:
                    2b:3c:49:ca:ac:6c:12:59:07:55:fb:f7:b0:51:41:
                    31:79:30:d7:46:fe:84:4f:b6:99:7b:1f:e8:b3:b7:
                    cc:d1:fe:6d:da:3e:f3:c9:c7:af:77:9f:51:b4:1a:
                    93:83:2d:46:b5:86:cd:48:0b:e1:f1:6a:b4:89:b0:
                    c0:3d:70:2b:32:4f:18:93:d4:ba:04:17:6c:dd:d0:
                    be:01:05:88:39:cf:15:78:0c:aa:eb:d1:fc:d2:54:
                    e9:84:71:de:53:bd:8e:3c:eb:1d:08:cc:34:a2:cb:
                    8f:e7:67:e6:f1:28:b9:7e:2b:09:d8:c2:45:9a:5a:
                    13:13:54:7c:a8:33:6d:15:89:e0:1f:5c:af:8c:d1:
                    93:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:20:4C:B0:73:60:D4:18:CD:AB:42:A0:0E:B7:E0:46:31:FF:E8:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9f473396-3958-39ad-8347-00413e951173.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:62:d1:ab:1f:56:98:ea:1d:94:2d:08:7f:6e:48:30:fd:df:
         5e:88:b9:ec:19:da:4f:65:1f:02:32:d3:7b:48:be:68:64:f3:
         55:4a:fe:7d:de:ca:0b:7f:d5:ca:b1:01:83:b3:b2:b2:b3:18:
         7e:6a:eb:35:79:fe:14:db:2f:76:92:25:51:c4:8a:0e:c7:2d:
         ee:08:76:37:cb:c3:78:a0:2d:6f:57:8d:c5:8d:2c:4d:c5:de:
         e6:dd:4c:d8:cc:02:fa:8f:41:36:84:8d:ee:e1:9b:34:17:24:
         07:14:1b:7e:fe:e3:16:0a:32:a6:a9:2b:06:1f:db:8d:43:68:
         04:a6:5d:9f:75:03:5e:e4:59:df:0c:5b:d7:0f:dc:b0:07:13:
         75:fa:e1:0d:be:29:90:b5:38:ad:77:ad:7c:a0:10:a5:e0:2c:
         ad:38:0c:36:cf:30:f5:6d:fc:31:0a:ca:ca:96:71:06:ce:f8:
         87:42:2f:7d:e7:38:18:0f:64:22:91:62:d1:0a:51:41:6c:2f:
         de:5f:f0:a6:b8:6a:0f:87:d3:0f:ef:e3:33:37:9f:f7:2b:cf:
         81:b0:1c:30:85:3f:e0:d0:ee:2c:57:a0:59:5f:f0:48:87:a6:
         d4:52:61:16:d7:22:ce:df:d4:da:85:0c:96:4d:7b:09:ef:e2:
         25:7b:fc:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkZv8MC+x55gskcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk
Y2NjMWMyNTItMzQ3OS00YjFhLTllMmUtYmRiMjRkMWQ1M2IzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoEquJ8eW60tSaEM7Tecey0WMV9LOoJx0uyH
chs+hTygleQDX+40K03UPp+RWtc8CP0TuPR9KfZEip7vp71SNFL5HFqHbIg1lCw7
f0C+M3xi4EdtAgWP5jCu3xorL9/BdNH/y5r2p6mq/YqZz6ZhCC9qJQHILakrPEnK
rGwSWQdV+/ewUUExeTDXRv6ET7aZex/os7fM0f5t2j7zycevd59RtBqTgy1GtYbN
SAvh8Wq0ibDAPXArMk8Yk9S6BBds3dC+AQWIOc8VeAyq69H80lTphHHeU72OPOsd
CMw0osuP52fm8Si5fisJ2MJFmloTE1R8qDNtFYngH1yvjNGTIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGAgTLBzYNQYzatCoA634EYx/+iAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOWY0NzMzOTYtMzk1OC0z
OWFkLTgzNDctMDA0MTNlOTUxMTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRREGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHZi0asfVpjqHZQtCH9uSDD9316IuewZ2k9lHwIy03tIvmhk81VK/n3e
ygt/1cqxAYOzsrKzGH5q6zV5/hTbL3aSJVHEig7HLe4IdjfLw3igLW9XjcWNLE3F
3ubdTNjMAvqPQTaEje7hmzQXJAcUG37+4xYKMqapKwYf241DaASmXZ91A17kWd8M
W9cP3LAHE3X64Q2+KZC1OK13rXygEKXgLK04DDbPMPVt/DEKysqWcQbO+IdCL33n
OBgPZCKRYtEKUUFsL95f8Ka4ag+H0w/v4zM3n/crz4GwHDCFP+DQ7ixXoFlf8EiH
ptRSYRbXIs7f1NqFDJZNewnv4iV7/Gs=
-----END CERTIFICATE-----
Generated at Sat Oct 11 08:56:38 2025 by rpki-client