Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa
File:                     fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa (raw, json)
Hash identifier:          3twXjdrpOBtLbRZ6RBFyogbiXVo+nFrNjKnPSSKCX9A=
Subject key identifier:   63:E8:96:04:60:14:64:F5:97:6C:27:92:23:DC:36:83:2B:59:83:BB
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285849AA4F6C373D1F0601B4A51000
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     55293
IP address blocks:        200.69.20.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:6c:37:3d:1f:06:01:b4:a5:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=8897459c-d831-41dd-9133-35948195cc8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fc:16:d2:e5:4d:72:9b:b9:1b:6b:83:c6:b2:
                    5a:59:04:87:6b:e8:6b:7b:cb:03:69:de:cc:f1:b4:
                    d1:7a:f3:89:2f:32:b1:b6:49:5e:ff:8b:e8:e1:15:
                    da:c3:95:bb:f5:dc:9f:2e:c2:4b:f5:3f:32:cf:09:
                    c8:20:d9:eb:86:a8:a8:2c:6d:3c:f4:8e:e7:e6:11:
                    87:54:ed:af:94:2c:a3:db:76:f9:eb:d3:d1:40:c1:
                    17:73:e3:a8:0c:ca:9e:3f:9c:27:26:12:cb:87:89:
                    8f:ec:82:26:5d:3e:05:db:0a:a7:2c:64:2d:66:27:
                    58:b2:58:b7:e4:98:8d:8b:36:f0:ee:35:fb:22:a8:
                    a2:10:9e:4d:77:1c:a3:f2:8a:08:cc:fc:62:2d:e5:
                    71:28:a6:37:93:e5:a4:af:9a:32:2a:ff:54:12:11:
                    f7:ad:e4:42:1f:e2:c0:e3:45:86:6b:fc:6b:b9:8e:
                    a5:f4:fb:dc:9a:8b:d7:af:fc:31:99:7c:e4:36:54:
                    c9:93:27:e7:31:35:2e:32:8b:c1:89:67:ab:87:cc:
                    fa:7b:a3:7d:04:10:5d:54:de:68:28:b1:6d:a8:db:
                    dd:fd:21:9f:cb:18:6d:97:38:26:de:9f:05:6c:3f:
                    2e:67:9f:22:f1:4c:0e:c3:27:6a:79:e0:47:7f:bd:
                    a1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E8:96:04:60:14:64:F5:97:6C:27:92:23:DC:36:83:2B:59:83:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.69.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:4c:61:ff:20:12:53:5e:c0:cb:1c:3b:47:40:d2:8c:d2:4a:
         e2:7f:22:98:fb:b6:55:d5:1c:f3:13:22:69:a6:56:3e:ad:35:
         35:dc:1f:12:79:54:2a:0d:0d:4a:14:15:63:cd:97:f0:4f:01:
         29:0b:09:42:b7:62:54:0e:e2:a8:37:a5:9e:b3:ea:f8:1f:46:
         8d:cf:ed:ac:13:db:52:56:f9:70:8a:73:00:2c:6d:d8:2c:bc:
         3d:d9:27:31:b5:34:71:21:74:2a:50:a7:8e:29:84:2d:de:62:
         a9:e2:bc:d9:ed:5c:ff:ac:df:82:be:ac:a2:31:f5:46:89:39:
         f8:51:74:2b:dc:9f:b7:b2:19:4e:e9:c0:de:4a:29:03:64:be:
         02:1a:54:1f:4a:db:56:c3:24:b0:20:bb:37:32:55:dc:14:e7:
         22:5e:07:56:03:ce:e6:47:d9:d6:22:db:e0:c3:87:2c:bd:d9:
         84:91:27:06:99:1e:a9:62:58:39:2f:36:f2:b6:13:ec:ae:92:
         e9:3e:03:ac:72:d7:78:4f:82:ad:2a:dc:78:29:64:ce:73:e3:
         09:ce:bc:3b:2d:b2:ca:25:53:63:31:09:ad:2d:97:1b:21:1e:
         5b:ad:9d:22:d5:40:1e:7b:dc:07:78:88:a9:b5:bc:0e:ec:57:
         98:60:60:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT2w3PR8GAbSlEAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1
YjU4MB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk
ODg5NzQ1OWMtZDgzMS00MWRkLTkxMzMtMzU5NDgxOTVjYzhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfwW0uVNcpu5G2uDxrJaWQSHa+hre8sDad7M
8bTRevOJLzKxtkle/4vo4RXaw5W79dyfLsJL9T8yzwnIINnrhqioLG089I7n5hGH
VO2vlCyj23b569PRQMEXc+OoDMqeP5wnJhLLh4mP7IImXT4F2wqnLGQtZidYsli3
5JiNizbw7jX7IqiiEJ5Ndxyj8ooIzPxiLeVxKKY3k+Wkr5oyKv9UEhH3reRCH+LA
40WGa/xruY6l9PvcmovXr/wxmXzkNlTJkyfnMTUuMovBiWerh8z6e6N9BBBdVN5o
KLFtqNvd/SGfyxhtlzgm3p8FbD8uZ58i8UwOwydqeeBHf72hKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGPolgRgFGT1l2wnkiPcNoMrWYO7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz
ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvZmM5YWE1YTYtMDJjZC0z
NzUwLTg5OGUtZjIyMWFlODE4Y2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm
ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj
NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5
ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyEUUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACdMYf8gElNewMscO0dA0ozSSuJ/Ipj7tlXVHPMTImmmVj6tNTXcHxJ5
VCoNDUoUFWPNl/BPASkLCUK3YlQO4qg3pZ6z6vgfRo3P7awT21JW+XCKcwAsbdgs
vD3ZJzG1NHEhdCpQp44phC3eYqnivNntXP+s34K+rKIx9UaJOfhRdCvcn7eyGU7p
wN5KKQNkvgIaVB9K21bDJLAguzcyVdwU5yJeB1YDzuZH2dYi2+DDhyy92YSRJwaZ
HqliWDkvNvK2E+yukuk+A6xy13hPgq0q3HgpZM5z4wnOvDstssolU2MxCa0tlxsh
HlutnSLVQB573Ad4iKm1vA7sV5hgYP4=
-----END CERTIFICATE-----
Generated at Fri Jun 6 12:04:40 2025 by rpki-client