Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa
File:                     fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa (raw, json)
Hash identifier:          xQ5mpVjBy9blrJKdhMeRApXxnSCmuwgX8/Zp/isuejM=
Subject key identifier:   D9:36:A3:12:1F:57:87:8C:E7:23:D5:33:0C:8D:94:CD:C2:7F:2C:CD
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285848CB16551C73D979DEAE93A780
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa
Signing time:             Thu 06 Feb 2025 14:00:52 +0000
ROA not before:           Thu 06 Feb 2025 14:00:52 +0000
ROA not after:            Wed 07 May 2025 13:00:52 +0000
asID:                     55293
IP address blocks:        200.69.20.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:16:55:1c:73:d9:79:de:ae:93:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Feb  6 14:00:52 2025 GMT
            Not After : May  7 13:00:52 2025 GMT
        Subject: CN=fe07600d-ade4-4d15-8e45-6f7ff47e78b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:85:db:96:b4:2b:2f:ed:94:b2:c2:74:bc:62:
                    47:fd:ce:7a:21:ea:cd:28:43:0f:4a:c5:77:75:8a:
                    4c:67:9b:dc:de:c5:e8:0a:ec:b1:9a:41:3f:f7:45:
                    96:b6:77:76:af:08:06:76:66:ca:29:71:7d:3d:4b:
                    8b:a5:96:24:08:4b:eb:91:be:1e:56:e7:a6:ab:95:
                    c5:2f:1f:84:2d:31:df:24:00:60:1f:4b:de:46:ed:
                    8a:3d:38:09:1c:60:3b:a3:04:36:61:c4:c5:62:8c:
                    18:cc:88:b6:e2:92:08:bd:7e:64:c0:b2:c7:95:c2:
                    28:44:3b:f8:10:92:4f:47:b5:d6:9c:31:f3:df:6c:
                    ac:f3:ba:a9:ec:8b:e5:04:45:b0:8c:87:83:f6:db:
                    88:1a:da:7f:6d:65:a5:35:67:85:e1:51:81:38:eb:
                    29:e4:a4:bc:cc:04:44:d2:e1:e7:82:84:2f:56:ea:
                    1a:5d:15:c4:bf:4f:8d:f0:97:69:0e:de:97:0e:2d:
                    f6:79:03:c9:98:a3:6b:61:20:70:5e:1c:d9:32:f2:
                    45:4f:74:9c:77:3a:4e:e9:2d:f7:c9:82:59:42:0b:
                    73:5b:da:bd:23:e1:96:53:91:08:64:88:4b:35:9a:
                    4b:2e:9a:63:e6:13:7c:a1:8c:a1:73:f2:88:79:26:
                    59:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:36:A3:12:1F:57:87:8C:E7:23:D5:33:0C:8D:94:CD:C2:7F:2C:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.69.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:dc:b3:68:c6:02:2a:7a:d8:d4:0e:01:ab:9b:d0:a3:48:9a:
         61:7e:20:be:67:7f:2d:93:90:a0:34:dd:55:fa:24:e6:3b:ae:
         46:e7:a7:33:10:68:0c:a5:3a:a6:41:dd:02:dd:4b:dd:33:06:
         2d:8d:64:b8:b0:b5:ab:c5:21:94:d6:17:56:de:b5:d5:89:58:
         2f:d6:5e:7f:dc:b5:06:eb:64:b9:07:00:cf:b5:0a:d4:f3:bf:
         ea:27:28:30:18:97:97:c0:24:1f:10:12:ff:b9:02:12:5f:52:
         47:36:49:3f:3c:f9:05:d3:7c:2d:c9:0c:b5:7d:84:0c:a9:31:
         0f:0f:fe:16:a3:44:25:d6:21:3b:c6:4c:c4:21:50:c6:76:8e:
         4f:2f:03:b2:6d:0b:f1:57:98:85:f6:bb:6b:29:16:a5:e6:09:
         82:c8:3f:a1:ce:cb:30:db:4a:c9:46:7e:4c:43:bd:bc:ec:74:
         7b:00:2f:03:be:64:ad:b1:62:79:54:11:5e:e8:07:36:36:0d:
         a6:ce:71:af:b2:78:f4:60:ac:e7:57:74:c3:17:17:51:33:a2:
         3e:41:9c:78:3a:5f:68:84:f5:b9:11:f2:ab:dd:c7:d9:e1:bf:
         e5:2f:5e:45:1e:c1:c4:2d:dc:27:06:30:bd:4f:41:5c:fc:3f:
         d9:71:bb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:21:12 2025 by rpki-client