Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/da1a1053-1677-3532-b9dc-a48437ce6ed7.roa
File:                     da1a1053-1677-3532-b9dc-a48437ce6ed7.roa (raw, json)
Hash identifier:          SsjDPKUIvqWw7bhr43xJ2XuUFqRaLdpTga/bUutz11c=
Subject key identifier:   3E:1E:49:36:B3:19:CD:BD:6E:A6:A2:A1:3B:4F:98:DF:57:7A:01:CB
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A8410F3CA7355B5C9ED593460
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/da1a1053-1677-3532-b9dc-a48437ce6ed7.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     397630
IP address blocks:        69.58.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:f3:ca:73:55:b5:c9:ed:59:34:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=29cbcf9b-9ec7-4151-84d4-18768d3ed27a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:17:d0:eb:5d:b2:2e:6e:84:79:4c:bc:aa:17:
                    9a:3a:21:10:69:e4:23:08:55:55:16:a4:3a:75:2e:
                    80:f5:0b:09:eb:19:00:38:d4:0c:ff:da:d3:a2:9f:
                    47:b8:0a:f4:ad:fc:f7:67:b7:00:58:ff:64:4b:21:
                    de:c2:eb:20:79:1d:b9:67:24:bd:53:63:38:82:6a:
                    38:6d:22:1e:69:ec:d1:3a:24:dc:d0:30:e4:2d:0a:
                    f1:ef:4e:9b:ba:2e:31:00:8b:b8:56:31:6f:b4:d0:
                    98:02:ab:31:3b:f7:50:7f:41:42:2e:9d:40:55:83:
                    d8:ff:f7:54:43:1c:e1:1b:c6:42:c0:f2:6f:a7:48:
                    59:64:65:5e:ae:81:3b:05:1f:b3:c8:3a:37:1c:3d:
                    da:44:87:b4:60:2b:e7:67:03:13:19:03:9f:46:51:
                    dc:ae:ac:6a:2c:7c:92:1d:df:0f:9e:f7:ee:0e:78:
                    07:a0:42:a2:0a:79:3e:bb:93:97:b5:51:83:7f:e4:
                    70:63:a9:3a:26:8e:60:43:0f:e5:cc:0b:78:ed:b3:
                    f4:6c:81:5d:20:7b:7d:33:33:20:3e:61:69:af:bb:
                    e8:e9:5a:e4:41:1b:a6:6b:6c:a1:e0:a1:7e:98:64:
                    ef:19:3f:5e:5c:fa:fe:d8:82:d1:90:55:09:c8:64:
                    5d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:1E:49:36:B3:19:CD:BD:6E:A6:A2:A1:3B:4F:98:DF:57:7A:01:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/da1a1053-1677-3532-b9dc-a48437ce6ed7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:2e:b1:7a:df:1a:58:3d:44:bc:21:4f:07:94:58:5a:84:b5:
         3f:a3:e1:21:e6:99:e5:51:bd:b5:0e:f2:c0:a4:e5:5a:cd:20:
         53:93:a2:72:eb:80:e6:53:29:f9:09:4e:83:96:bf:80:e8:af:
         09:dc:4f:bf:70:ea:ce:87:3c:dd:97:4d:ce:44:45:30:c2:10:
         5a:c5:c1:b2:32:69:08:55:44:fd:3e:bc:02:f4:82:92:14:66:
         72:ec:42:1f:0e:fb:ac:c3:e2:d0:2b:9e:da:79:ac:df:18:96:
         35:b1:e0:14:03:06:1f:dd:b9:34:42:6b:58:ec:61:4b:60:93:
         ec:bb:0c:a9:d3:37:32:54:a5:c5:30:0e:fa:14:24:d0:b6:33:
         c9:db:ff:7b:25:95:87:4a:1e:46:0b:e0:0d:9b:dc:02:69:53:
         72:30:6b:65:10:8d:fd:bd:89:7e:b6:82:ea:e2:20:a1:02:5c:
         e0:ec:b2:16:cf:28:87:3b:ab:05:0a:9b:35:a0:72:d8:3e:6f:
         9b:66:43:ae:31:c1:78:a4:58:c5:df:db:6e:f3:92:63:a4:c5:
         93:b9:30:c2:b1:52:9b:aa:e9:ad:fc:e3:0b:45:57:09:f7:0a:
         03:ee:dc:5a:f1:5b:ed:7a:c2:76:2a:dd:54:a3:4e:a2:93:c2:
         49:30:3c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:40:58 2025 by rpki-client