Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa
File:                     fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa (raw, json)
Hash identifier:          xMv6lFRjPROAKhajDBkWfaHHmSIuGY62U6hABT52lvU=
Subject key identifier:   65:3E:47:47:11:AC:41:A6:0A:F8:1C:78:4E:E9:82:D6:6C:3C:FD:AA
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584B6A61EA7452E7583082430580
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     55293
IP address blocks:        200.69.20.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:ea:74:52:e7:58:30:82:43:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=c00f799c-70cb-4208-9635-1d05b9bed9c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:83:d9:50:08:25:9d:bf:aa:d9:64:c7:76:70:
                    95:c2:1f:ca:a6:c5:ff:c5:f3:dd:9d:83:8e:c1:6c:
                    76:2f:44:33:5d:49:cf:f4:cb:19:de:e2:07:cc:04:
                    94:34:ea:b9:a0:41:04:66:89:4f:07:ee:da:5e:3a:
                    4f:65:51:f3:2c:3e:e1:9b:d6:79:31:8a:b7:0e:75:
                    0f:55:6a:5a:12:99:5f:9e:31:52:60:a6:d6:45:14:
                    5e:ff:24:8f:79:f7:e2:b3:0f:f3:c1:e8:e2:38:d8:
                    f8:73:3c:e4:ab:6f:ed:8b:2c:c9:71:3f:99:54:07:
                    f7:76:ba:ae:4f:cf:0d:10:4c:6c:00:19:85:05:53:
                    0a:35:a0:f1:5c:b5:f9:e0:87:e9:4d:3f:dc:e8:7b:
                    0c:82:ef:99:7f:d3:8f:cd:52:e3:8e:15:cf:6f:0e:
                    7f:60:48:49:5d:fa:e2:3f:92:ff:bf:97:0b:60:a6:
                    91:fb:38:06:b9:4b:0c:a2:af:1c:b0:dc:34:81:d2:
                    66:12:85:c4:69:4b:29:ba:cc:33:b0:7b:f0:7c:5a:
                    bd:bc:3a:7e:23:9f:9b:41:11:63:f9:b6:a5:03:95:
                    64:cf:fc:a2:0f:fc:de:b7:34:e8:8e:61:93:3e:85:
                    52:92:9a:74:95:bc:7c:a9:49:f5:b9:10:a2:ac:8e:
                    ab:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:3E:47:47:11:AC:41:A6:0A:F8:1C:78:4E:E9:82:D6:6C:3C:FD:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/fc9aa5a6-02cd-3750-898e-f221ae818ce1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.69.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:33:9c:06:a7:e4:68:dd:17:08:e2:83:2a:c0:89:91:a6:a0:
         88:09:fd:be:13:55:90:4f:a5:0c:0c:e1:cf:b3:9e:a0:0f:fa:
         fb:0f:5c:14:c0:66:08:ce:98:5c:5f:cc:b7:35:a9:57:82:f6:
         f3:ec:c6:41:02:d0:1f:86:f0:9d:d6:95:76:aa:f4:90:b0:0c:
         2b:b4:e0:31:66:b8:35:20:72:6c:67:76:92:91:0e:2a:30:2e:
         99:a5:bf:a6:73:f4:8c:83:ce:a7:15:0a:f3:11:6a:78:ea:39:
         a8:b3:93:b4:9b:8c:64:7a:2b:18:62:ed:83:08:26:07:81:10:
         72:a9:43:54:5d:bd:27:2f:f1:b4:18:dc:1d:a2:09:d9:5e:36:
         08:44:dd:1f:0f:63:f4:66:a7:4e:4a:1f:e3:07:ba:a6:f5:51:
         70:7e:4e:49:5a:08:3d:ce:62:d6:90:6e:91:1b:27:bc:d9:cc:
         fd:01:86:d8:87:1f:de:17:ae:b7:41:f6:2d:6c:2e:93:a3:a5:
         f7:7d:fe:22:67:c1:56:6e:2b:8b:1d:f1:44:43:4a:62:35:24:
         3b:15:a9:9a:d9:1d:2a:58:4f:a9:0c:dc:ab:53:fb:3b:18:6f:
         df:22:6d:92:5d:76:e6:71:65:08:34:e9:fd:57:6b:9f:f2:06:
         0c:4a:ff:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYep0UudYMIJDBYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1
YjU4MB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk
YzAwZjc5OWMtNzBjYi00MjA4LTk2MzUtMWQwNWI5YmVkOWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4PZUAglnb+q2WTHdnCVwh/KpsX/xfPdnYOO
wWx2L0QzXUnP9MsZ3uIHzASUNOq5oEEEZolPB+7aXjpPZVHzLD7hm9Z5MYq3DnUP
VWpaEplfnjFSYKbWRRRe/ySPeffisw/zwejiONj4czzkq2/tiyzJcT+ZVAf3drqu
T88NEExsABmFBVMKNaDxXLX54IfpTT/c6HsMgu+Zf9OPzVLjjhXPbw5/YEhJXfri
P5L/v5cLYKaR+zgGuUsMoq8csNw0gdJmEoXEaUspuswzsHvwfFq9vDp+I5+bQRFj
+balA5Vkz/yiD/zetzTojmGTPoVSkpp0lbx8qUn1uRCirI6rtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGU+R0cRrEGmCvgceE7pgtZsPP2qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz
ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvZmM5YWE1YTYtMDJjZC0z
NzUwLTg5OGUtZjIyMWFlODE4Y2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm
ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj
NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5
ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyEUUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI8znAan5GjdFwjigyrAiZGmoIgJ/b4TVZBPpQwM4c+znqAP+vsPXBTA
ZgjOmFxfzLc1qVeC9vPsxkEC0B+G8J3WlXaq9JCwDCu04DFmuDUgcmxndpKRDiow
Lpmlv6Zz9IyDzqcVCvMRanjqOaizk7SbjGR6Kxhi7YMIJgeBEHKpQ1RdvScv8bQY
3B2iCdleNghE3R8PY/Rmp05KH+MHuqb1UXB+TklaCD3OYtaQbpEbJ7zZzP0BhtiH
H94XrrdB9i1sLpOjpfd9/iJnwVZuK4sd8URDSmI1JDsVqZrZHSpYT6kM3KtT+zsY
b98ibZJdduZxZQg06f1Xa5/yBgxK/90=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:10 2025 by rpki-client