Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/69d00425-cf12-3785-aecf-3a474d2c9aaf.roa
File:                     69d00425-cf12-3785-aecf-3a474d2c9aaf.roa (raw, json)
Hash identifier:          6LoyfXz3u8Nk6hV07qh1nOWSQHDnY/gVU8NPG6Bkzto=
Subject key identifier:   44:ED:3D:90:B1:4C:A7:91:B9:B5:93:AC:05:9A:04:AD:76:21:C3:BC
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F43285849F23B7371658EAB0A2AA34500
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/69d00425-cf12-3785-aecf-3a474d2c9aaf.roa
Signing time:             Fri 23 May 2025 07:19:14 +0000
ROA not before:           Fri 23 May 2025 07:19:14 +0000
ROA not after:            Thu 21 Aug 2025 07:19:14 +0000
asID:                     9009
IP address blocks:        204.11.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:3b:73:71:65:8e:ab:0a:2a:a3:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: May 23 07:19:14 2025 GMT
            Not After : Aug 21 07:19:14 2025 GMT
        Subject: CN=2487cd06-0f5d-4af3-b8ac-f23caeee3b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e3:9a:e0:9d:19:29:e2:4e:da:d1:d0:c7:91:
                    ad:40:a7:34:12:7a:52:cf:07:32:ac:78:1e:a9:59:
                    ed:77:b4:27:1d:ba:1c:34:07:89:cc:25:98:86:f9:
                    b4:57:aa:26:e1:78:d4:7a:e7:d7:90:d8:38:bd:d7:
                    ec:01:5a:f6:0e:78:8b:7c:eb:57:2b:80:7c:5f:82:
                    24:55:c8:9c:87:f1:4f:d6:2e:73:db:79:4e:b7:95:
                    c1:99:42:02:24:c5:22:4b:06:e6:25:7e:28:e6:b7:
                    fc:3e:48:4c:ec:3b:1f:cb:df:19:bd:7b:9c:a4:90:
                    20:e6:a8:2d:d8:c3:8f:12:40:2b:d8:10:9f:36:01:
                    87:66:a1:6b:f4:4b:81:b4:ef:b7:47:d4:c8:41:9d:
                    46:0c:2f:2b:55:b1:8d:86:3b:08:47:11:4a:c3:19:
                    f0:16:d0:1b:d9:26:90:a9:26:58:a6:bf:31:83:e7:
                    9a:ec:ef:88:f9:3f:d7:6e:22:d8:98:bb:3b:32:83:
                    35:fa:5c:87:19:12:91:99:4f:86:58:fd:c0:4e:cd:
                    09:9b:3d:ce:77:ea:7b:f0:2a:ed:d4:6b:97:7f:ba:
                    2b:16:92:92:5e:81:d7:52:65:d3:8d:1f:fd:9f:89:
                    04:a1:7e:d2:24:95:63:fd:aa:03:d5:52:77:2c:7d:
                    ca:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:ED:3D:90:B1:4C:A7:91:B9:B5:93:AC:05:9A:04:AD:76:21:C3:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/69d00425-cf12-3785-aecf-3a474d2c9aaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.11.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:d2:65:81:c6:66:6f:59:25:5d:12:bd:9c:cd:5e:df:32:0b:
         82:88:3c:58:fe:6a:49:95:fe:79:7c:7b:ee:d2:11:b8:42:d5:
         55:db:8a:ba:b2:31:f5:3c:90:bb:bf:57:8d:6f:dc:b2:48:ce:
         59:91:67:ce:b4:4f:48:50:73:5b:3e:32:a0:ae:e6:cf:e6:d8:
         f0:19:47:6d:29:b3:00:6b:f5:b9:ac:ed:73:a6:8d:c2:9d:1d:
         f0:1d:59:a8:87:f5:7f:c8:e4:a7:2f:4d:dd:6d:1a:6a:de:3a:
         bc:48:e4:f8:ef:f0:cf:a4:f0:30:a0:c8:f2:db:35:d4:8d:a6:
         a4:ee:e6:47:03:ed:40:32:96:42:36:17:44:27:27:79:8f:88:
         7b:93:e8:0b:a6:e9:0c:5d:57:56:df:92:e4:c4:e5:c8:e3:97:
         f8:8f:c2:9d:d8:9a:f0:d6:25:dc:56:64:5b:3a:88:dc:98:52:
         72:09:b7:6c:c3:f5:7a:14:46:72:57:0c:36:d5:b7:82:9f:4c:
         02:5a:15:65:49:5f:bd:da:47:85:ce:72:dd:0d:6a:50:33:d1:
         28:6c:ac:43:02:fe:20:8f:a9:ba:0a:9e:42:e0:15:7c:6b:a4:
         4f:8e:cc:ae:be:4e:ca:cb:57:fb:b0:8e:14:68:97:75:5b:c2:
         50:20:24:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnyO3NxZY6rCiqjRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3
N2ExMB4XDTI1MDUyMzA3MTkxNFoXDTI1MDgyMTA3MTkxNFowLzEtMCsGA1UEAxMk
MjQ4N2NkMDYtMGY1ZC00YWYzLWI4YWMtZjIzY2FlZWUzYjRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuOa4J0ZKeJO2tHQx5GtQKc0EnpSzwcyrHge
qVntd7QnHbocNAeJzCWYhvm0V6om4XjUeufXkNg4vdfsAVr2DniLfOtXK4B8X4Ik
Vcich/FP1i5z23lOt5XBmUICJMUiSwbmJX4o5rf8PkhM7Dsfy98ZvXucpJAg5qgt
2MOPEkAr2BCfNgGHZqFr9EuBtO+3R9TIQZ1GDC8rVbGNhjsIRxFKwxnwFtAb2SaQ
qSZYpr8xg+ea7O+I+T/XbiLYmLs7MoM1+lyHGRKRmU+GWP3ATs0Jmz3Od+p78Crt
1GuXf7orFpKSXoHXUmXTjR/9n4kEoX7SJJVj/aoD1VJ3LH3KkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFETtPZCxTKeRubWTrAWaBK12IcO8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5
NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvNjlkMDA0MjUtY2YxMi0z
Nzg1LWFlY2YtM2E0NzRkMmM5YWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl
NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi
NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx
ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAvcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF3SZYHGZm9ZJV0SvZzNXt8yC4KIPFj+akmV/nl8e+7SEbhC1VXbirqy
MfU8kLu/V41v3LJIzlmRZ860T0hQc1s+MqCu5s/m2PAZR20pswBr9bms7XOmjcKd
HfAdWaiH9X/I5KcvTd1tGmreOrxI5Pjv8M+k8DCgyPLbNdSNpqTu5kcD7UAylkI2
F0QnJ3mPiHuT6Aum6QxdV1bfkuTE5cjjl/iPwp3YmvDWJdxWZFs6iNyYUnIJt2zD
9XoURnJXDDbVt4KfTAJaFWVJX73aR4XOct0NalAz0ShsrEMC/iCPqboKnkLgFXxr
pE+OzK6+TsrLV/uwjhRol3VbwlAgJPI=
-----END CERTIFICATE-----
Generated at Sun Jun 29 00:34:27 2025 by rpki-client