Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/e3495657-b4d4-3e49-bb58-6d864d40c65f.roa
File:                     e3495657-b4d4-3e49-bb58-6d864d40c65f.roa (raw, json)
Hash identifier:          o+KLo1zIN2XHj8qVwSBI/wQu3yKZd3wb5Wy4CjxBqmI=
Subject key identifier:   DF:30:48:82:55:23:A3:92:0D:36:A5:6B:D8:67:6F:ED:21:6B:52:32
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F4328584B3DB6F5DA5412061BAC2EB880
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/e3495657-b4d4-3e49-bb58-6d864d40c65f.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     401307
IP address blocks:        69.58.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b6:f5:da:54:12:06:1b:ac:2e:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=6f3eb618-6081-4e3b-af63-e0303703dd50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:52:be:30:fc:23:b6:a1:f0:6d:b7:67:b2:55:
                    63:9e:b9:c4:97:76:6d:8f:3a:d9:71:d8:89:7e:49:
                    c3:c0:4e:c3:b4:b6:2e:cd:64:fd:27:d3:c8:2f:a8:
                    f8:b7:a0:98:51:31:39:23:b9:00:e2:c6:10:f7:18:
                    d9:d5:02:1d:ee:e2:ca:ad:7f:d6:85:85:1d:ef:8a:
                    1e:a7:03:2d:54:f5:76:f8:ed:78:f2:97:3d:57:74:
                    b4:57:53:46:16:92:b0:c5:46:c2:8c:4d:9a:57:b1:
                    3d:4b:66:10:d5:69:c5:c3:8b:59:2f:44:b1:18:fc:
                    3f:2f:9f:7d:e2:27:3b:ac:fc:a9:5c:63:c2:65:53:
                    6d:98:1a:fd:98:44:c8:8a:a2:be:02:cc:90:9c:6b:
                    0c:65:36:6f:18:8c:6e:a4:3e:83:9f:cb:e2:e0:7c:
                    d4:61:73:30:c1:84:2a:da:07:76:9d:dd:ae:31:e5:
                    ca:46:fa:28:76:52:38:23:13:42:53:81:39:d4:f0:
                    13:ad:21:a7:15:63:f0:5e:b0:aa:8d:a9:4f:a8:d2:
                    5e:32:4b:ab:a3:d0:0a:1c:ee:56:cb:a3:b4:21:e9:
                    27:2e:ba:d8:45:d0:93:ed:c5:92:d6:58:31:7b:57:
                    76:55:8d:e3:96:9e:62:b9:c3:dc:15:af:35:82:07:
                    02:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:30:48:82:55:23:A3:92:0D:36:A5:6B:D8:67:6F:ED:21:6B:52:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/e3495657-b4d4-3e49-bb58-6d864d40c65f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:80:7f:20:df:53:b9:93:80:d8:06:b2:58:9f:44:22:f1:9e:
         cd:03:7a:97:6a:25:b8:c0:8c:04:95:64:68:33:c9:66:57:63:
         53:c0:4e:ff:5e:83:ce:e9:36:b8:47:94:11:cc:0c:55:71:9f:
         02:d8:64:72:cb:50:bd:d9:7a:b3:38:90:c1:d2:02:4f:94:0f:
         3f:5b:cc:f7:58:57:13:43:8b:46:ea:48:20:49:35:7b:5d:3e:
         ec:cb:eb:4b:db:9a:fb:52:a3:22:5e:76:bb:ff:52:a5:6c:6d:
         40:13:19:0d:0c:12:e3:74:9d:cc:dd:68:bf:94:b2:6a:2e:76:
         5f:5d:fc:03:1e:6c:af:59:72:d1:b5:d6:71:c6:83:0e:46:85:
         53:05:76:18:fe:80:ed:be:05:78:74:08:d1:8b:1d:a8:b2:a8:
         58:f0:47:41:73:06:17:86:76:bd:e0:cc:98:cd:b6:ec:71:3c:
         06:7b:55:12:43:0d:ab:8c:12:a2:c4:f4:84:aa:2d:df:3a:90:
         51:aa:c6:61:94:95:d5:22:0e:43:9c:59:01:99:50:fd:ac:85:
         98:74:f9:16:13:77:71:b9:d4:40:6c:bc:ad:89:02:89:74:93:
         b2:57:c3:d5:5a:8a:de:44:71:e7:99:4c:ea:8c:c1:b2:79:c2:
         62:87:c6:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9tvXaVBIGG6wuuIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGZmOTUzOWUtYTY4Yy00ZWVkLWFkOTgtMjZmNjdmZjQ0
NmZmMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
NmYzZWI2MTgtNjA4MS00ZTNiLWFmNjMtZTAzMDM3MDNkZDUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVK+MPwjtqHwbbdnslVjnrnEl3ZtjzrZcdiJ
fknDwE7DtLYuzWT9J9PIL6j4t6CYUTE5I7kA4sYQ9xjZ1QId7uLKrX/WhYUd74oe
pwMtVPV2+O148pc9V3S0V1NGFpKwxUbCjE2aV7E9S2YQ1WnFw4tZL0SxGPw/L599
4ic7rPypXGPCZVNtmBr9mETIiqK+AsyQnGsMZTZvGIxupD6Dn8vi4HzUYXMwwYQq
2gd2nd2uMeXKRvoodlI4IxNCU4E51PATrSGnFWPwXrCqjalPqNJeMkuro9AKHO5W
y6O0IeknLrrYRdCT7cWS1lgxe1d2VY3jlp5iucPcFa81ggcCMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN8wSIJVI6OSDTala9hnb+0ha1IyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZmY5
NTM5ZS1hNjhjLTRlZWQtYWQ5OC0yNmY2N2ZmNDQ2ZmYvZTM0OTU2NTctYjRkNC0z
ZTQ5LWJiNTgtNmQ4NjRkNDBjNjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGZmOTUzOWUtYTY4Yy00ZWVkLWFk
OTgtMjZmNjdmZjQ0NmZmL2RmZjk1MzllLWE2OGMtNGVlZC1hZDk4LTI2ZjY3ZmY0
NDZmZi5jcmwwHwYDVR0jBBgwFoAUHAFNTc9v/pfaLCJJg2pEXCR0ajYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kZmY5NTM5ZS1hNjhjLTRlZWQtYWQ5OC0yNmY2
N2ZmNDQ2ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTo+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB6AfyDfU7mTgNgGslifRCLxns0DepdqJbjAjASVZGgzyWZXY1PATv9e
g87pNrhHlBHMDFVxnwLYZHLLUL3ZerM4kMHSAk+UDz9bzPdYVxNDi0bqSCBJNXtd
PuzL60vbmvtSoyJedrv/UqVsbUATGQ0MEuN0nczdaL+Usmoudl9d/AMebK9ZctG1
1nHGgw5GhVMFdhj+gO2+BXh0CNGLHaiyqFjwR0FzBheGdr3gzJjNtuxxPAZ7VRJD
DauMEqLE9ISqLd86kFGqxmGUldUiDkOcWQGZUP2shZh0+RYTd3G51EBsvK2JAol0
k7JXw9Vait5EceeZTOqMwbJ5wmKHxqU=
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:19:37 2025 by rpki-client