Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0aca68c7-b69d-3a1c-bd79-4dc712637c5a.roa
File:                     0aca68c7-b69d-3a1c-bd79-4dc712637c5a.roa (raw, json)
Hash identifier:          OOhX/Ams9CVSvqmx/Jp/KGBWmFOWyEg59pNJBQD3XvM=
Subject key identifier:   06:07:7B:93:DF:0D:A6:E2:7D:93:E4:EF:16:6D:04:09:A6:62:61:D1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849DF5A7B2D7245723609616A4C
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0aca68c7-b69d-3a1c-bd79-4dc712637c5a.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     20940
IP address blocks:        69.192.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:7b:2d:72:45:72:36:09:61:6a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=a6d46b31-6344-4348-a8af-69226fcb54c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cd:23:0e:7c:f2:74:e8:00:cb:9a:d1:a3:77:
                    00:75:cb:35:a6:3e:9d:4c:4b:22:15:52:b6:2e:bc:
                    63:7e:3a:bc:eb:d4:b4:12:74:a4:34:a2:f7:11:1b:
                    58:9d:e4:d0:cf:9c:54:c7:2b:0d:7b:fb:9c:86:fa:
                    81:7f:41:69:61:d9:64:09:00:91:91:90:fa:79:61:
                    fe:e3:05:d7:99:20:d3:0c:10:7e:4f:f9:1f:17:4b:
                    c1:3d:9e:ce:c5:6d:4e:a2:36:ce:35:2c:d6:99:ed:
                    0c:a1:24:34:37:78:59:d5:58:9b:b7:a5:76:f2:59:
                    64:c9:f7:2c:64:62:4c:c3:26:0a:4e:ea:2a:f3:a8:
                    5b:ba:a4:01:0d:1e:fa:e3:7c:3d:c5:3a:b5:b0:78:
                    b1:82:28:d5:dd:55:44:ae:a6:89:b8:ce:14:b4:57:
                    b8:0f:86:66:8b:88:d5:96:3e:d9:3b:0f:66:96:bd:
                    a5:36:7a:0d:d3:81:a4:79:e6:75:23:ff:37:17:e2:
                    93:2e:bf:48:16:d9:da:04:40:50:30:89:29:f1:a6:
                    26:d1:93:f7:48:8b:8c:78:be:e6:b0:31:6f:8d:eb:
                    a5:fd:81:20:f6:a7:3d:7f:74:fd:14:6e:b9:e0:5a:
                    d3:c4:8e:be:75:0e:83:45:7d:58:92:5f:92:eb:5f:
                    56:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:07:7B:93:DF:0D:A6:E2:7D:93:E4:EF:16:6D:04:09:A6:62:61:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0aca68c7-b69d-3a1c-bd79-4dc712637c5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.192.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:0b:fb:92:fa:7a:f8:20:2c:ac:9e:cc:e1:0d:b0:9b:50:65:
         89:67:e6:7e:aa:14:56:79:c1:52:48:1f:a2:19:4d:a1:bb:ee:
         4c:bb:f2:9c:d8:ea:24:e1:ed:65:57:fc:eb:de:e9:65:fd:96:
         ec:73:42:c7:6b:f3:af:27:7c:38:14:cf:67:25:3b:34:69:1b:
         e4:9e:7e:ca:f9:e2:37:a8:29:b9:f6:30:fb:b6:07:54:1a:95:
         5b:95:5f:eb:69:1d:a3:d9:2a:cf:a5:ce:bd:ce:43:af:40:17:
         3f:28:2b:25:74:65:22:37:72:c9:a5:40:39:99:3b:7f:28:db:
         4a:6b:92:48:9c:ec:e4:db:2b:c0:5a:bd:82:45:d2:98:6d:3b:
         02:58:b0:17:7a:31:92:3c:14:0a:80:98:2e:69:0f:99:e0:49:
         67:d5:14:7b:ba:dd:d9:2e:38:be:f3:2d:d3:46:d5:23:4d:9a:
         3b:f4:8b:31:cd:f2:0d:57:20:56:10:b4:94:f5:d8:f5:60:69:
         18:e3:96:72:12:bd:0e:53:d2:f9:4b:9f:44:37:be:33:a7:9d:
         ab:5b:1a:2a:48:08:25:33:f4:eb:a0:89:61:95:ea:a4:2e:0a:
         bd:40:6b:3a:e4:38:68:c8:25:29:bb:89:67:16:5f:60:fc:9c:
         fa:03:bc:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWnstckVyNglhakwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk
YTZkNDZiMzEtNjM0NC00MzQ4LWE4YWYtNjkyMjZmY2I1NGM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr80jDnzydOgAy5rRo3cAdcs1pj6dTEsiFVK2
Lrxjfjq869S0EnSkNKL3ERtYneTQz5xUxysNe/uchvqBf0FpYdlkCQCRkZD6eWH+
4wXXmSDTDBB+T/kfF0vBPZ7OxW1OojbONSzWme0MoSQ0N3hZ1Vibt6V28llkyfcs
ZGJMwyYKTuoq86hbuqQBDR7643w9xTq1sHixgijV3VVErqaJuM4UtFe4D4Zmi4jV
lj7ZOw9mlr2lNnoN04GkeeZ1I/83F+KTLr9IFtnaBEBQMIkp8aYm0ZP3SIuMeL7m
sDFvjeul/YEg9qc9f3T9FG654FrTxI6+dQ6DRX1Ykl+S619WZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAYHe5PfDabifZPk7xZtBAmmYmHRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGFjYTY4YzctYjY5ZC0z
YTFjLWJkNzktNGRjNzEyNjM3YzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARcABMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADsL+5L6evggLKyezOENsJtQZYln5n6qFFZ5wVJIH6IZTaG77ky78pzY
6iTh7WVX/Ove6WX9luxzQsdr868nfDgUz2clOzRpG+Sefsr54jeoKbn2MPu2B1Qa
lVuVX+tpHaPZKs+lzr3OQ69AFz8oKyV0ZSI3csmlQDmZO38o20prkkic7OTbK8Ba
vYJF0phtOwJYsBd6MZI8FAqAmC5pD5ngSWfVFHu63dkuOL7zLdNG1SNNmjv0izHN
8g1XIFYQtJT12PVgaRjjlnISvQ5T0vlLn0Q3vjOnnatbGipICCUz9OugiWGV6qQu
Cr1AazrkOGjIJSm7iWcWX2D8nPoDvDg=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:17:40 2025 by rpki-client