Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/c727e6f4-ca9a-3b1b-88d6-63500df77a16.roa
File:                     c727e6f4-ca9a-3b1b-88d6-63500df77a16.roa (raw, json)
Hash identifier:          TMwc2tJnL1aVlUkVcPm5H7+LkYm8w/c5RRytxdTmXgM=
Subject key identifier:   8F:9A:09:03:B8:4D:08:65:07:D7:52:CE:23:2F:00:3F:8B:BB:66:0F
Certificate issuer:       /CN=911afcc4-db22-4282-acca-e1e676a5ae20
Certificate serial:       010D0C9F4328584A411051BC79913041B9BDE480
Authority key identifier: 69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/c727e6f4-ca9a-3b1b-88d6-63500df77a16.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     16509
IP address blocks:        69.7.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:51:bc:79:91:30:41:b9:bd:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=911afcc4-db22-4282-acca-e1e676a5ae20
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=f7473013-ae6d-47be-8383-f058e0f3cf5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d7:a5:db:3c:b1:01:9d:93:61:ab:86:6c:fd:
                    58:cb:db:a5:89:8c:da:37:14:55:c8:7e:be:c9:bf:
                    6e:42:f2:cd:cd:12:a5:71:6c:04:2a:f5:53:79:0e:
                    5e:54:1b:68:a1:8d:cf:d4:78:6a:a7:9f:b1:7b:1d:
                    c7:83:8f:e6:96:1a:0b:0a:42:4f:29:bf:45:36:c0:
                    fb:ec:eb:c6:fc:27:1d:a4:0f:75:66:23:50:97:38:
                    d5:ae:ef:1f:76:91:65:c8:e2:c3:46:2c:8c:36:0f:
                    6b:86:f4:bb:c6:eb:9c:20:72:51:0a:3e:03:ce:14:
                    52:cd:b4:41:fa:3b:d2:fc:e2:32:75:d9:cd:84:27:
                    8a:68:c2:a6:b1:cb:fa:1f:09:af:b4:97:59:b5:a1:
                    ad:c3:8f:e5:30:7e:9d:ee:a9:84:39:25:7a:93:5e:
                    9b:e1:b1:1b:3e:f9:dc:ee:5e:c3:f7:7a:da:09:79:
                    3d:0a:08:d3:d3:00:91:df:89:ea:d2:40:3a:35:7e:
                    22:26:17:b2:26:f1:51:b8:99:63:04:5d:6e:13:d1:
                    eb:6d:02:63:36:dd:77:96:a5:7e:bc:d8:1a:cc:69:
                    64:e3:69:d9:94:a7:26:ca:8a:83:16:13:88:12:83:
                    b5:a3:16:0f:f2:2f:4b:f1:ff:78:60:82:d9:4f:69:
                    82:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9A:09:03:B8:4D:08:65:07:D7:52:CE:23:2F:00:3F:8B:BB:66:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/c727e6f4-ca9a-3b1b-88d6-63500df77a16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl

            X509v3 Authority Key Identifier:
                keyid:69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.7.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:27:1d:8f:9c:1e:41:77:80:c9:ce:09:1a:b8:a7:64:0b:34:
         8b:bf:f5:9a:ef:1e:90:49:d9:d1:0e:d1:cc:e3:f2:34:1d:53:
         b0:90:2a:57:0c:06:0d:2c:fd:15:fa:92:d7:e4:94:9e:ad:67:
         f0:3f:19:cf:8e:32:3d:bb:f0:14:fd:b5:96:0f:56:7c:8e:71:
         64:f7:cc:59:db:51:7c:d3:88:89:ec:13:e8:fa:38:91:6c:81:
         fe:1b:6b:70:dc:79:6b:77:30:9f:13:3d:2b:a4:57:a5:00:82:
         fe:d2:b6:e3:05:0f:05:32:55:7b:f3:97:59:64:89:11:a6:4d:
         6a:5b:a3:5b:e4:8f:a1:9d:2f:6c:77:48:ac:22:38:d2:80:75:
         09:27:eb:e4:45:aa:b5:17:ba:2e:55:1a:e4:db:a6:a9:12:d3:
         0f:ac:06:96:4b:18:a3:ab:65:ca:3e:a7:27:63:ca:1d:f1:7f:
         16:54:d2:6c:d9:a3:f0:07:b1:71:ae:99:f1:a5:d4:b9:90:ed:
         ec:1f:73:a1:55:4f:be:1d:76:57:54:1a:db:24:c7:37:75:7a:
         72:08:56:b3:07:ae:d4:dd:2b:c4:be:2d:70:05:76:29:83:ce:
         e5:5e:03:0f:42:29:6e:1a:c2:78:f6:03:4d:a7:21:c0:1d:01:
         dd:ca:e2:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEFG8eZEwQbm95IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTExYWZjYzQtZGIyMi00MjgyLWFjY2EtZTFlNjc2YTVh
ZTIwMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk
Zjc0NzMwMTMtYWU2ZC00N2JlLTgzODMtZjA1OGUwZjNjZjVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNel2zyxAZ2TYauGbP1Yy9uliYzaNxRVyH6+
yb9uQvLNzRKlcWwEKvVTeQ5eVBtooY3P1Hhqp5+xex3Hg4/mlhoLCkJPKb9FNsD7
7OvG/CcdpA91ZiNQlzjVru8fdpFlyOLDRiyMNg9rhvS7xuucIHJRCj4DzhRSzbRB
+jvS/OIyddnNhCeKaMKmscv6HwmvtJdZtaGtw4/lMH6d7qmEOSV6k16b4bEbPvnc
7l7D93raCXk9CgjT0wCR34nq0kA6NX4iJheyJvFRuJljBF1uE9HrbQJjNt13lqV+
vNgazGlk42nZlKcmyoqDFhOIEoO1oxYP8i9L8f94YILZT2mCLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI+aCQO4TQhlB9dSziMvAD+Lu2YPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85MTFh
ZmNjNC1kYjIyLTQyODItYWNjYS1lMWU2NzZhNWFlMjAvYzcyN2U2ZjQtY2E5YS0z
YjFiLTg4ZDYtNjM1MDBkZjc3YTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTExYWZjYzQtZGIyMi00MjgyLWFj
Y2EtZTFlNjc2YTVhZTIwLzkxMWFmY2M0LWRiMjItNDI4Mi1hY2NhLWUxZTY3NmE1
YWUyMC5jcmwwHwYDVR0jBBgwFoAUaRq26D5nlEY54u/RTNXkdWk2kOswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MTFhZmNjNC1kYjIyLTQyODItYWNjYS1lMWU2
NzZhNWFlMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARQeMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK4nHY+cHkF3gMnOCRq4p2QLNIu/9ZrvHpBJ2dEO0czj8jQdU7CQKlcM
Bg0s/RX6ktfklJ6tZ/A/Gc+OMj278BT9tZYPVnyOcWT3zFnbUXzTiInsE+j6OJFs
gf4ba3DceWt3MJ8TPSukV6UAgv7StuMFDwUyVXvzl1lkiRGmTWpbo1vkj6GdL2x3
SKwiONKAdQkn6+RFqrUXui5VGuTbpqkS0w+sBpZLGKOrZco+pydjyh3xfxZU0mzZ
o/AHsXGumfGl1LmQ7ewfc6FVT74ddldUGtskxzd1enIIVrMHrtTdK8S+LXAFdimD
zuVeAw9CKW4awnj2A02nIcAdAd3K4q4=
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:18:57 2025 by rpki-client