Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/af868b4a-df56-3a8f-adee-7750259a727e.roa
File:                     af868b4a-df56-3a8f-adee-7750259a727e.roa (raw, json)
Hash identifier:          6EwxQTaqe7NT3//RtHDkb8OOfFrSlP9kgoPdCC1+m28=
Subject key identifier:   E1:3C:43:60:8E:C1:22:E8:88:77:05:A4:69:00:B8:28:AC:8E:AF:CA
Certificate issuer:       /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
Certificate serial:       010D0C9F4328584A331AF98C461DA26B1E833A0F
Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/af868b4a-df56-3a8f-adee-7750259a727e.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     23470
IP address blocks:        209.222.96.0/24 maxlen: 24
                          209.222.97.0/24 maxlen: 24
                          209.222.98.0/24 maxlen: 24
                          209.222.99.0/24 maxlen: 24
                          209.222.101.0/24 maxlen: 24
                          209.222.103.0/24 maxlen: 24
                          209.222.104.0/24 maxlen: 24
                          209.222.105.0/24 maxlen: 24
                          209.222.106.0/24 maxlen: 24
                          209.222.107.0/24 maxlen: 24
                          209.222.108.0/24 maxlen: 24
                          209.222.109.0/24 maxlen: 24
                          209.222.110.0/24 maxlen: 24
                          209.222.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:f9:8c:46:1d:a2:6b:1e:83:3a:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=1da7ba1c-1476-47c6-a69f-e84827174267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9e:cc:b6:9d:e0:e0:20:59:25:5a:29:67:65:
                    ec:3b:69:8e:9c:06:f0:8c:49:0f:4e:ce:06:10:73:
                    88:bb:dc:42:c9:b7:34:56:89:9f:2b:de:97:38:bb:
                    56:6f:2f:63:3f:79:6f:42:f5:21:5d:3b:1f:d9:f2:
                    6e:91:09:45:ee:69:ff:44:6f:b8:5a:7b:eb:9e:af:
                    d3:6f:19:35:0c:3f:a7:21:f8:32:2d:c7:b6:12:a2:
                    e7:d7:33:44:10:dd:a5:6e:d2:ca:6c:f1:0c:0c:c1:
                    9d:a5:fd:cc:e2:d3:70:1e:28:32:35:c5:58:26:fb:
                    81:9c:ec:da:23:67:02:4c:fd:2f:d3:0e:0c:c0:9c:
                    44:31:b5:b1:00:c4:a0:5f:f9:cd:29:83:4f:1e:02:
                    97:6e:33:5a:2b:7b:01:23:08:a8:3f:6e:b6:71:ec:
                    84:2a:92:b9:2c:5b:bf:d0:31:f9:65:d4:e8:3a:bc:
                    17:65:84:d7:e1:ba:c1:ba:ab:ee:ed:5c:ea:bd:90:
                    e7:5e:62:41:83:50:f4:17:93:53:2d:bb:4e:93:5d:
                    f0:5d:0a:76:9a:ea:81:7b:6c:07:c1:63:e5:f4:3e:
                    24:c7:22:ee:fa:e0:a4:31:2a:02:49:2b:4c:4b:f3:
                    2a:f3:98:86:09:36:13:d1:79:93:ee:ca:b7:4a:2f:
                    5f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3C:43:60:8E:C1:22:E8:88:77:05:A4:69:00:B8:28:AC:8E:AF:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/af868b4a-df56-3a8f-adee-7750259a727e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl

            X509v3 Authority Key Identifier:
                keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.222.96.0/22
                  209.222.101.0/24
                  209.222.103.0-209.222.111.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:38:63:71:5f:0a:7e:d6:a5:bf:db:f6:85:06:35:71:0b:b0:
         66:96:79:5e:77:34:22:cd:e8:fe:53:10:a6:25:89:7c:d1:57:
         a7:0a:8e:09:23:3b:b0:df:a8:ca:8d:db:0f:96:01:ba:46:e8:
         a8:ee:b1:cb:33:03:77:1a:41:cf:78:c6:94:ac:34:da:ac:3d:
         21:6d:0c:14:bd:c7:f2:1b:ce:79:2f:dd:23:7e:09:f0:37:2c:
         37:af:95:9b:61:19:7e:56:ec:0a:ca:55:be:86:a0:23:9d:cb:
         fd:57:f9:1d:a0:2d:86:7c:ac:58:95:a9:93:fb:85:4d:af:b8:
         1b:77:e4:52:d2:29:16:c3:f9:2d:c8:b5:96:e3:39:1f:e7:09:
         1c:50:e9:74:93:a6:f3:6a:38:96:07:25:76:2f:e3:89:b0:1a:
         63:c1:d1:ab:2b:0b:f0:b7:e1:70:fc:3c:d0:86:48:09:b4:e7:
         7c:0d:c7:a4:6d:86:c6:54:4a:3d:d1:2b:23:77:9b:65:b4:d9:
         2c:60:4d:08:7d:0c:66:d2:cb:49:d6:d0:4a:1c:86:ef:c7:c0:
         ed:1a:6f:e8:79:29:3e:cd:d7:48:6f:4b:e6:31:3a:ea:1b:6a:
         28:58:c7:89:ed:3a:ef:8c:b5:29:12:a9:ed:3f:bc:ef:39:98:
         f9:3f:ac:87
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEozGvmMRh2iax6DOg8wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWM2OWIzMjEtNjliYy00MWM0LWE2ZTEtMzQ5MWRiZmMy
NTQ0MB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk
MWRhN2JhMWMtMTQ3Ni00N2M2LWE2OWYtZTg0ODI3MTc0MjY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ7Mtp3g4CBZJVopZ2XsO2mOnAbwjEkPTs4G
EHOIu9xCybc0VomfK96XOLtWby9jP3lvQvUhXTsf2fJukQlF7mn/RG+4Wnvrnq/T
bxk1DD+nIfgyLce2EqLn1zNEEN2lbtLKbPEMDMGdpf3M4tNwHigyNcVYJvuBnOza
I2cCTP0v0w4MwJxEMbWxAMSgX/nNKYNPHgKXbjNaK3sBIwioP262ceyEKpK5LFu/
0DH5ZdToOrwXZYTX4brBuqvu7VzqvZDnXmJBg1D0F5NTLbtOk13wXQp2muqBe2wH
wWPl9D4kxyLu+uCkMSoCSStMS/Mq85iGCTYT0XmT7sq3Si9fGQIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFOE8Q2COwSLoiHcFpGkAuCisjq/KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5
YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkxZGJmYzI1NDQvYWY4NjhiNGEtZGY1Ni0z
YThmLWFkZWUtNzc1MDI1OWE3MjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWM2OWIzMjEtNjliYy00MWM0LWE2
ZTEtMzQ5MWRiZmMyNTQ0LzljNjliMzIxLTY5YmMtNDFjNC1hNmUxLTM0OTFkYmZj
MjU0NC5jcmwwHwYDVR0jBBgwFoAUHjmb1lU0mBF67zRaH+8vJwq9KawwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkx
ZGJmYzI1NDQuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQC0d5gAwQA
0d5lMAwDBADR3mcDBATR3mAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMjhjcV8Kftalv9v2hQY1cQuwZpZ5
Xnc0Is3o/lMQpiWJfNFXpwqOCSM7sN+oyo3bD5YBukboqO6xyzMDdxpBz3jGlKw0
2qw9IW0MFL3H8hvOeS/dI34J8DcsN6+Vm2EZflbsCspVvoagI53L/Vf5HaAthnys
WJWpk/uFTa+4G3fkUtIpFsP5Lci1luM5H+cJHFDpdJOm82o4lgcldi/jibAaY8HR
qysL8LfhcPw80IZICbTnfA3HpG2GxlRKPdErI3ebZbTZLGBNCH0MZtLLSdbQShyG
78fA7Rpv6HkpPs3XSG9L5jE66htqKFjHie0674y1KRKp7T+87zmY+T+shw==
-----END CERTIFICATE-----
Generated at Mon Jun 30 21:27:22 2025 by rpki-client