Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/e6917225-642d-3273-a2a6-a6004b20848b.roa
File:                     e6917225-642d-3273-a2a6-a6004b20848b.roa (raw, json)
Hash identifier:          M1jPb5WXzADVrgafpAkDo3Z502gk1mceNl/ASR9T2Jg=
Subject key identifier:   D7:92:99:5E:9A:4F:6E:7D:5B:02:84:FA:31:AD:BE:9C:43:7E:0A:44
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F4328584B3556E6F13557CEC179613F08
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/e6917225-642d-3273-a2a6-a6004b20848b.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     401307
IP address blocks:        69.58.54.0/23 maxlen: 24
                          69.58.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:56:e6:f1:35:57:ce:c1:79:61:3f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=26270074-a479-4c61-8d87-132467b3c82b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ea:1d:c2:8e:ca:67:fa:53:5b:82:10:55:2f:
                    30:65:bf:d3:c4:61:20:90:03:dd:c7:1c:8b:98:18:
                    6c:40:4f:8c:66:97:6e:4d:30:fc:e1:2b:bc:56:64:
                    25:60:40:36:d2:bf:6f:d0:1d:72:59:1f:af:5f:6f:
                    7d:44:45:bd:3d:82:15:78:f7:fd:d7:d8:a5:f7:64:
                    9c:b9:7b:c9:50:e3:8a:ad:20:28:6a:d8:cd:60:56:
                    92:8a:07:f4:44:ec:6e:2b:1a:20:d8:e0:be:3c:29:
                    f4:32:30:cd:b5:af:98:f7:5c:b4:2c:dc:b9:f0:3b:
                    41:bf:1c:7b:d2:b9:a3:32:21:68:bb:79:3a:67:bc:
                    3a:a2:f1:f3:11:11:e1:22:b5:34:8e:7d:32:4d:0b:
                    db:d7:f6:e6:92:df:f0:37:01:65:bd:80:33:e9:fb:
                    2e:03:3f:a2:5f:66:28:f5:83:c9:8b:33:e5:ee:b5:
                    88:e9:1f:70:10:d5:db:f3:78:c3:af:38:98:de:2e:
                    92:c5:9c:73:67:48:52:71:a6:b4:cf:e1:c1:aa:b4:
                    76:3a:0d:f1:f5:db:6e:e8:c0:85:53:31:8c:2f:f3:
                    d0:f5:8d:24:67:80:90:19:4e:13:36:1b:62:fa:2c:
                    c4:cd:71:0b:52:37:1e:65:46:eb:f5:1c:55:fa:1a:
                    47:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:92:99:5E:9A:4F:6E:7D:5B:02:84:FA:31:AD:BE:9C:43:7E:0A:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/e6917225-642d-3273-a2a6-a6004b20848b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.54.0-69.58.57.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:c6:63:5c:ff:0a:e2:82:f5:18:b0:0b:6d:3d:74:28:35:ef:
         62:03:7f:ea:90:2a:36:18:9b:24:aa:f3:0d:eb:e8:47:9b:eb:
         3a:89:44:2c:51:17:c7:59:c1:68:cb:bb:86:ba:19:53:c9:9e:
         0e:35:95:f6:e5:9a:dc:49:6d:45:a1:11:cb:fa:3e:10:9c:d5:
         d3:15:eb:00:64:93:d3:59:29:d6:a3:50:15:d5:51:cb:ae:0b:
         b7:7c:26:52:37:32:66:39:2e:d0:17:9c:d3:c3:71:b2:b9:2a:
         78:ae:b5:ff:7e:5f:8e:56:08:a7:38:65:d9:4e:2f:83:f4:a3:
         28:2b:e7:f0:6a:e7:fb:2a:5f:ef:6a:23:c5:cd:18:7b:f1:c5:
         a7:db:0e:d7:a3:39:8d:2c:d8:e0:ef:89:02:a4:0b:46:44:f8:
         ec:e7:fa:22:4e:0b:e7:3c:9d:a4:f2:64:93:9c:bf:e8:e9:f0:
         42:5b:e4:4d:98:34:5d:fd:5a:46:c7:c4:c8:2f:2e:d1:7a:fa:
         dc:3f:71:9f:f9:e2:58:1e:17:a7:8e:44:a9:ed:b7:05:3f:00:
         92:57:e3:26:2e:96:e6:20:98:cf:16:4f:70:d6:c0:1f:31:10:
         d9:e4:f1:61:da:5e:97:a7:7b:8a:78:d1:5d:44:8a:cc:c0:39:
         c9:51:26:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:19:37 2025 by rpki-client