Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9f4cf0f6-e037-3585-9df7-ba8afbca4650.roa
File:                     9f4cf0f6-e037-3585-9df7-ba8afbca4650.roa (raw, json)
Hash identifier:          jkrvd/Ps8n5tXfjuepP5ghQWn0wYqH2oceHJHbCYrVs=
Subject key identifier:   6E:7F:C3:5A:A2:78:8B:71:6A:F3:7D:E1:DB:EE:CB:12:79:1C:0B:24
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B196C0E2B49C68AFAE2D00480
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9f4cf0f6-e037-3585-9df7-ba8afbca4650.roa
Signing time:             Sat 06 Sep 2025 01:00:33 +0000
ROA not before:           Sat 06 Sep 2025 01:00:33 +0000
ROA not after:            Fri 05 Dec 2025 02:00:33 +0000
asID:                     7029
IP address blocks:        69.58.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:19:6c:0e:2b:49:c6:8a:fa:e2:d0:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep  6 01:00:33 2025 GMT
            Not After : Dec  5 02:00:33 2025 GMT
        Subject: CN=85285e4e-906d-4c0b-bede-e07b20369362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:63:45:66:f4:6c:bf:22:c5:ac:33:26:0a:03:
                    c6:a3:30:6b:b6:fc:fb:53:c3:3d:e0:c2:03:51:e2:
                    d8:89:3b:4f:bf:62:9f:6c:ed:4d:60:6a:4d:d0:84:
                    80:5e:48:65:d4:f3:94:53:59:26:e4:93:6e:9c:05:
                    1b:a9:5a:ff:c5:66:2e:f7:2b:0c:5d:20:03:1f:63:
                    e0:e9:e5:a6:bd:eb:90:f3:80:3f:d8:64:4e:2a:a6:
                    8b:71:2b:68:04:c8:9c:95:05:65:3f:cf:98:23:40:
                    ee:18:9c:14:cf:ae:7c:97:38:56:d1:c6:5a:88:44:
                    e8:90:42:8c:66:67:b5:ce:b2:15:ab:42:04:71:70:
                    26:cd:75:39:f9:7a:a5:c6:c2:ae:3b:f2:ed:25:dd:
                    12:23:35:0e:be:5d:b3:ba:90:f6:fc:f3:12:0a:c7:
                    de:94:11:a6:bc:e7:2b:5c:9d:6c:01:99:8d:f4:05:
                    d9:67:6a:47:ea:c5:50:43:ae:68:5b:e5:c9:9b:19:
                    89:08:75:a7:7e:61:58:17:92:52:89:ec:e1:4f:57:
                    9f:00:1d:3b:28:d2:f7:4f:80:01:1c:e1:b6:a0:25:
                    7b:3f:15:4e:96:1f:b1:46:cc:70:33:08:03:77:81:
                    17:c8:11:39:ce:34:72:ce:5a:4a:ba:d0:f6:c1:c1:
                    c5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7F:C3:5A:A2:78:8B:71:6A:F3:7D:E1:DB:EE:CB:12:79:1C:0B:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9f4cf0f6-e037-3585-9df7-ba8afbca4650.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:c1:f5:82:bd:ba:ed:26:7d:8c:70:6d:60:d8:ff:98:70:b0:
         2e:b3:e7:ea:71:bd:ef:a0:2f:ce:18:1f:f4:16:0c:52:e6:4d:
         6a:54:15:7b:00:b6:36:2b:46:61:2a:7b:3f:9b:01:1f:09:69:
         86:1d:fb:db:e6:b9:ae:8e:ce:82:b0:d8:c0:05:5f:d6:3e:ca:
         4c:be:e5:c9:ca:29:af:82:8a:7a:74:7c:86:0c:b4:6e:83:08:
         08:f1:71:a4:4c:a1:d7:6f:3c:d9:ad:14:84:36:be:4d:c3:c7:
         62:67:d3:7b:34:ee:a5:26:44:bf:f5:61:31:f5:d6:66:fc:ef:
         0c:f9:a1:09:bf:f6:01:c9:56:e7:62:f5:92:3c:fe:cf:7c:fb:
         7d:dc:31:af:04:15:92:aa:3e:fa:cb:c1:96:44:3f:f7:79:a2:
         7b:d9:77:34:6e:e3:29:de:0a:5f:f0:a0:76:b8:f6:f7:af:cd:
         50:85:d5:c6:99:01:40:73:5f:1f:d2:f6:83:cf:40:f4:44:73:
         02:a5:7a:54:a4:42:2c:19:c8:34:48:3c:05:c5:bd:5f:61:1b:
         0f:a4:fc:f2:2b:49:97:e8:e7:71:92:c6:22:e9:3f:89:99:5e:
         b0:6f:21:2d:b5:e8:9a:9b:5e:3c:97:41:e3:0f:0c:61:ba:23:
         36:50:4b:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbA4rScaK+uLQBIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk
ODUyODVlNGUtOTA2ZC00YzBiLWJlZGUtZTA3YjIwMzY5MzYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWNFZvRsvyLFrDMmCgPGozBrtvz7U8M94MID
UeLYiTtPv2KfbO1NYGpN0ISAXkhl1POUU1km5JNunAUbqVr/xWYu9ysMXSADH2Pg
6eWmveuQ84A/2GROKqaLcStoBMiclQVlP8+YI0DuGJwUz658lzhW0cZaiETokEKM
Zme1zrIVq0IEcXAmzXU5+XqlxsKuO/LtJd0SIzUOvl2zupD2/PMSCsfelBGmvOcr
XJ1sAZmN9AXZZ2pH6sVQQ65oW+XJmxmJCHWnfmFYF5JSiezhT1efAB07KNL3T4AB
HOG2oCV7PxVOlh+xRsxwMwgDd4EXyBE5zjRyzlpKutD2wcHFgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG5/w1qieItxavN94dvuyxJ5HAskMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvOWY0Y2YwZjYtZTAzNy0z
NTg1LTlkZjctYmE4YWZiY2E0NjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTpCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABXB9YK9uu0mfYxwbWDY/5hwsC6z5+pxve+gL84YH/QWDFLmTWpUFXsA
tjYrRmEqez+bAR8JaYYd+9vmua6OzoKw2MAFX9Y+yky+5cnKKa+Cinp0fIYMtG6D
CAjxcaRModdvPNmtFIQ2vk3Dx2Jn03s07qUmRL/1YTH11mb87wz5oQm/9gHJVudi
9ZI8/s98+33cMa8EFZKqPvrLwZZEP/d5onvZdzRu4yneCl/woHa49vevzVCF1caZ
AUBzXx/S9oPPQPREcwKlelSkQiwZyDRIPAXFvV9hGw+k/PIrSZfo53GSxiLpP4mZ
XrBvIS216JqbXjyXQeMPDGG6IzZQS0E=
-----END CERTIFICATE-----
Generated at Tue Oct 21 17:01:21 2025 by rpki-client