Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d0d7641f-1b45-3648-bbf9-4e02129371b5.roa
File:                     d0d7641f-1b45-3648-bbf9-4e02129371b5.roa (raw, json)
Hash identifier:          cUlSWCigX6Q+HEy5/taOMoHCf8E/KrRyh+aIH3zX54Q=
Subject key identifier:   8A:56:B8:52:DE:CB:3C:EE:48:B0:27:A8:F9:17:13:91:32:E2:20:7C
Certificate issuer:       /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
Certificate serial:       010D0C9F4328584B13D6C6673EB1381DA047DBC0
Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d0d7641f-1b45-3648-bbf9-4e02129371b5.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     23470
IP address blocks:        206.221.176.0/24 maxlen: 24
                          206.221.177.0/24 maxlen: 24
                          206.221.178.0/24 maxlen: 24
                          206.221.179.0/24 maxlen: 24
                          206.221.180.0/24 maxlen: 24
                          206.221.181.0/24 maxlen: 24
                          206.221.182.0/24 maxlen: 24
                          206.221.183.0/24 maxlen: 24
                          206.221.184.0/24 maxlen: 24
                          206.221.185.0/24 maxlen: 24
                          206.221.186.0/24 maxlen: 24
                          206.221.187.0/24 maxlen: 24
                          206.221.188.0/24 maxlen: 24
                          206.221.189.0/24 maxlen: 24
                          206.221.190.0/24 maxlen: 24
                          206.221.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:c6:67:3e:b1:38:1d:a0:47:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=15650077-4c7a-48f2-97e0-79b049df95f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:aa:ce:bf:93:3c:e0:96:ec:b0:1d:f1:de:c9:
                    a7:47:28:0a:29:2e:f0:9a:51:45:5b:fa:37:79:c1:
                    e4:eb:80:8f:00:6a:c9:23:aa:da:cb:e2:17:b0:9f:
                    81:13:9d:12:19:b5:75:a3:eb:93:83:7c:bb:81:fb:
                    94:1b:97:e0:c9:46:70:68:d1:cb:fd:60:30:ca:7d:
                    9b:df:21:66:15:50:21:53:cd:d5:93:73:7a:0f:3d:
                    98:47:67:b0:e3:d5:5f:df:fe:01:8c:0f:e8:ad:c8:
                    50:13:61:b2:34:61:da:eb:b5:64:57:d2:5a:33:2c:
                    98:e7:1b:a3:44:b2:57:33:56:6e:eb:36:88:99:b0:
                    fc:a0:63:db:46:63:c6:1f:6d:91:60:73:fe:3d:0f:
                    00:ed:64:ca:6b:c2:21:cd:36:bb:cf:6a:cc:75:22:
                    7c:c4:08:59:96:14:de:c0:17:59:fb:ce:e4:f0:19:
                    ff:65:3f:9c:ed:00:e9:8e:d5:e1:2f:eb:29:ec:b3:
                    5c:11:1e:6d:b6:a4:7d:7c:4c:d7:30:94:7c:c0:f8:
                    7c:4e:1b:74:02:c6:0c:aa:20:ec:3a:3e:45:37:4c:
                    ed:a7:f3:94:c5:ad:ca:a5:e4:a2:f2:3c:cf:ad:ef:
                    ea:43:40:6e:5a:eb:8a:2b:79:c9:11:0a:85:78:2c:
                    81:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:56:B8:52:DE:CB:3C:EE:48:B0:27:A8:F9:17:13:91:32:E2:20:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d0d7641f-1b45-3648-bbf9-4e02129371b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl

            X509v3 Authority Key Identifier:
                keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.221.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:6c:c2:2b:c1:39:1b:d0:ad:91:1c:2f:17:41:9d:34:53:df:
         79:e0:90:52:e5:1c:ad:e7:85:b7:ce:75:44:d9:a8:b1:5b:e3:
         06:0b:5c:94:41:2c:a1:a0:a0:b3:b8:d5:f1:f9:99:fa:26:5c:
         59:37:10:c8:d2:37:c9:47:e5:8a:2f:57:cd:09:ca:c4:32:f4:
         fb:b6:be:dc:8f:76:cf:9f:4b:29:84:b9:e8:4f:f4:e2:dc:e8:
         cf:22:e8:d0:ca:37:8b:35:6f:59:cb:29:35:8d:36:88:3b:83:
         fc:6e:5a:98:64:e0:26:07:03:ef:d0:f5:b9:4e:0c:85:27:77:
         81:f9:b8:00:21:75:7a:22:6c:c0:0d:a8:24:94:69:3c:0e:3c:
         64:2d:bd:8b:45:55:15:6e:48:ba:0d:85:fa:a6:a6:d2:8c:fb:
         d3:49:ba:8e:db:8b:cb:13:e6:fa:f0:e4:e3:97:20:f9:04:95:
         cf:57:4f:06:f8:38:a7:64:48:87:c6:ff:88:ff:e2:68:dd:70:
         1d:72:8f:de:01:c6:0d:d3:c7:38:14:7d:5c:ea:db:3a:5e:6f:
         83:05:9c:33:66:20:4b:b8:83:8f:34:9b:e3:17:79:dd:3e:61:
         71:9b:ef:24:b4:42:15:87:62:31:b4:28:7e:47:9e:8c:ca:c9:
         89:31:fd:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sZnPrE4HaBH28AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWM2OWIzMjEtNjliYy00MWM0LWE2ZTEtMzQ5MWRiZmMy
NTQ0MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk
MTU2NTAwNzctNGM3YS00OGYyLTk3ZTAtNzliMDQ5ZGY5NWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6rOv5M84JbssB3x3smnRygKKS7wmlFFW/o3
ecHk64CPAGrJI6ray+IXsJ+BE50SGbV1o+uTg3y7gfuUG5fgyUZwaNHL/WAwyn2b
3yFmFVAhU83Vk3N6Dz2YR2ew49Vf3/4BjA/orchQE2GyNGHa67VkV9JaMyyY5xuj
RLJXM1Zu6zaImbD8oGPbRmPGH22RYHP+PQ8A7WTKa8IhzTa7z2rMdSJ8xAhZlhTe
wBdZ+87k8Bn/ZT+c7QDpjtXhL+sp7LNcER5ttqR9fEzXMJR8wPh8Tht0AsYMqiDs
Oj5FN0ztp/OUxa3KpeSi8jzPre/qQ0BuWuuKK3nJEQqFeCyB5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIpWuFLeyzzuSLAnqPkXE5Ey4iB8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5
YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkxZGJmYzI1NDQvZDBkNzY0MWYtMWI0NS0z
NjQ4LWJiZjktNGUwMjEyOTM3MWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWM2OWIzMjEtNjliYy00MWM0LWE2
ZTEtMzQ5MWRiZmMyNTQ0LzljNjliMzIxLTY5YmMtNDFjNC1hNmUxLTM0OTFkYmZj
MjU0NC5jcmwwHwYDVR0jBBgwFoAUHjmb1lU0mBF67zRaH+8vJwq9KawwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkx
ZGJmYzI1NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzt2wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHVswivBORvQrZEcLxdBnTRT33ngkFLlHK3nhbfOdUTZqLFb4wYLXJRB
LKGgoLO41fH5mfomXFk3EMjSN8lH5YovV80JysQy9Pu2vtyPds+fSymEuehP9OLc
6M8i6NDKN4s1b1nLKTWNNog7g/xuWphk4CYHA+/Q9blODIUnd4H5uAAhdXoibMAN
qCSUaTwOPGQtvYtFVRVuSLoNhfqmptKM+9NJuo7bi8sT5vrw5OOXIPkElc9XTwb4
OKdkSIfG/4j/4mjdcB1yj94Bxg3TxzgUfVzq2zpeb4MFnDNmIEu4g480m+MXed0+
YXGb7yS0QhWHYjG0KH5HnozKyYkx/Qw=
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:21:44 2025 by rpki-client