Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/899fc356-7769-3771-8801-72b850e98504.roa
File:                     899fc356-7769-3771-8801-72b850e98504.roa (raw, json)
Hash identifier:          ZtVrGOqNjgqmBfkEQF4D7snfVQIq6AgSgL13NzQPALw=
Subject key identifier:   88:A9:B2:5F:C6:1B:17:53:40:27:B9:F2:BB:45:6B:9E:F2:B5:32:CD
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584A49706B88757DDF8EE6EE3C60
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/899fc356-7769-3771-8801-72b850e98504.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     13720
IP address blocks:        69.174.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:6b:88:75:7d:df:8e:e6:ee:3c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=414f2df9-7d31-474b-b95b-16242b0635a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cc:e2:6c:99:5d:15:33:c8:88:99:90:78:75:
                    54:c9:31:8b:93:c1:e6:84:bb:33:4b:a4:87:58:82:
                    d8:87:ab:b6:e8:43:7f:cf:97:0c:b4:d2:56:bd:f9:
                    ef:e9:1a:5c:b6:36:fe:b5:1e:bb:b2:fb:02:e7:8a:
                    b2:77:f7:5b:15:d1:a9:79:66:c7:e8:3d:d3:e4:88:
                    af:e5:e9:bf:c4:75:a5:d2:43:47:34:ad:8d:80:ed:
                    bd:a4:3e:d2:dc:af:95:18:0f:6b:60:37:c1:13:4f:
                    78:e3:b4:86:bc:04:df:e6:36:52:43:bb:11:3d:5f:
                    24:82:a6:73:e6:65:1c:e8:61:b8:45:52:6a:ca:94:
                    1c:ad:c9:54:46:09:37:06:e4:ef:19:c0:58:b2:ec:
                    8d:a8:3a:8b:f4:18:70:23:27:1b:28:5a:b0:63:61:
                    63:8c:82:07:0a:17:24:21:2f:33:93:a3:62:b9:f8:
                    1b:94:d9:16:cb:a0:18:2f:9f:aa:fe:a0:a7:e1:94:
                    ed:b0:7e:a1:ed:41:e3:92:03:56:8e:05:89:5e:ba:
                    49:61:56:73:a5:c2:67:56:f5:1b:9a:99:00:e6:0e:
                    14:58:5c:b9:82:a5:63:0d:d4:20:08:be:d5:20:8c:
                    27:aa:02:cb:c6:63:b8:6e:10:58:16:48:72:06:a9:
                    70:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A9:B2:5F:C6:1B:17:53:40:27:B9:F2:BB:45:6B:9E:F2:B5:32:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/899fc356-7769-3771-8801-72b850e98504.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.174.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:29:73:c4:2c:e2:f3:3f:64:a6:1d:24:a3:00:8f:55:e9:c2:
         a6:58:1b:ed:e9:d2:b9:bf:c2:24:9d:12:87:6a:cb:d1:a3:99:
         f4:5d:c9:37:bf:30:b4:34:22:a3:f5:98:df:17:93:88:7e:d8:
         58:c9:48:9c:c3:9f:20:da:00:6b:27:8e:99:e6:09:7e:39:32:
         6d:32:36:72:1b:92:3b:ff:69:3f:80:f5:94:83:2f:3f:d3:a5:
         a7:0c:84:7e:ce:ea:f6:13:24:00:50:36:5c:62:53:0e:1e:5c:
         14:91:02:b3:f9:5d:7e:9a:7a:f8:a8:e6:48:a8:79:6f:11:f5:
         d2:9e:47:53:a8:64:21:ca:d5:e1:98:7f:a4:08:85:69:9e:30:
         ff:a1:72:e8:62:98:db:a8:a9:b8:e9:ee:be:a3:44:81:f4:a2:
         13:06:46:93:f0:be:08:d9:31:f7:33:76:2f:3b:f3:e9:a6:8e:
         10:43:35:3c:13:1c:12:7d:6b:56:88:14:f9:0b:4f:4d:b8:93:
         f3:d7:4d:fa:26:dc:48:6f:f0:22:fe:fd:de:6b:de:c5:8b:8b:
         17:44:52:8e:58:79:8f:b8:fa:cc:02:55:10:97:45:5d:d7:10:
         5f:e0:2b:17:5f:07:cc:cc:79:c0:12:b6:41:92:34:80:ac:52:
         85:2c:d8:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcGuIdX3fjubuPGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM3YTZmYzgtMzVjMy00MTUxLWFhMmUtMjUxMzQyMGY5
MzQ0MB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk
NDE0ZjJkZjktN2QzMS00NzRiLWI5NWItMTYyNDJiMDYzNWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMzibJldFTPIiJmQeHVUyTGLk8HmhLszS6SH
WILYh6u26EN/z5cMtNJWvfnv6Rpctjb+tR67svsC54qyd/dbFdGpeWbH6D3T5Iiv
5em/xHWl0kNHNK2NgO29pD7S3K+VGA9rYDfBE09447SGvATf5jZSQ7sRPV8kgqZz
5mUc6GG4RVJqypQcrclURgk3BuTvGcBYsuyNqDqL9BhwIycbKFqwY2FjjIIHChck
IS8zk6NiufgblNkWy6AYL5+q/qCn4ZTtsH6h7UHjkgNWjgWJXrpJYVZzpcJnVvUb
mpkA5g4UWFy5gqVjDdQgCL7VIIwnqgLLxmO4bhBYFkhyBqlw6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIipsl/GGxdTQCe58rtFa57ytTLNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85Mzdh
NmZjOC0zNWMzLTQxNTEtYWEyZS0yNTEzNDIwZjkzNDQvODk5ZmMzNTYtNzc2OS0z
NzcxLTg4MDEtNzJiODUwZTk4NTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTM3YTZmYzgtMzVjMy00MTUxLWFh
MmUtMjUxMzQyMGY5MzQ0LzkzN2E2ZmM4LTM1YzMtNDE1MS1hYTJlLTI1MTM0MjBm
OTM0NC5jcmwwHwYDVR0jBBgwFoAUah/mTh0WOW2Gbpk7qGQprsNO/HgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MzdhNmZjOC0zNWMzLTQxNTEtYWEyZS0yNTEz
NDIwZjkzNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRa7AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACIpc8Qs4vM/ZKYdJKMAj1XpwqZYG+3p0rm/wiSdEodqy9GjmfRdyTe/
MLQ0IqP1mN8Xk4h+2FjJSJzDnyDaAGsnjpnmCX45Mm0yNnIbkjv/aT+A9ZSDLz/T
pacMhH7O6vYTJABQNlxiUw4eXBSRArP5XX6aevio5kioeW8R9dKeR1OoZCHK1eGY
f6QIhWmeMP+hcuhimNuoqbjp7r6jRIH0ohMGRpPwvgjZMfczdi878+mmjhBDNTwT
HBJ9a1aIFPkLT024k/PXTfom3Ehv8CL+/d5r3sWLixdEUo5YeY+4+swCVRCXRV3X
EF/gKxdfB8zMecAStkGSNICsUoUs2K0=
-----END CERTIFICATE-----
Generated at Tue Jul 1 19:26:45 2025 by rpki-client