Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/05344d12-1225-3518-95cc-a0056e72dec9.roa
File:                     05344d12-1225-3518-95cc-a0056e72dec9.roa (raw, json)
Hash identifier:          1drTvqjNhyLQUnsbWxSU06V8VSjD5AIeS657BlGcafM=
Subject key identifier:   67:B0:38:77:C4:4E:FD:22:99:D2:D6:93:6E:7A:B8:55:08:5D:18:AC
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F4328584E31CF181C2834AF4166B34F10
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/05344d12-1225-3518-95cc-a0056e72dec9.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     35874
IP address blocks:        69.58.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:18:1c:28:34:af:41:66:b3:4f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=02c8c4a1-8724-491f-bb76-03aab8272384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b8:27:72:d5:7a:51:02:58:0e:9e:df:0c:85:
                    fc:09:af:dd:07:b7:c6:72:75:e3:df:95:7c:c1:a9:
                    81:83:37:93:1e:66:d5:ab:bf:f6:69:a6:3d:a2:fd:
                    66:36:ac:70:0b:b4:08:59:cd:c5:16:db:42:7a:96:
                    8f:6d:3a:e2:e5:82:77:53:7c:51:bc:31:6a:00:d7:
                    6a:03:fc:93:41:fb:ff:1b:0a:d9:45:4f:0b:1e:ae:
                    78:b0:03:21:64:1d:99:ec:00:d3:82:15:91:86:e9:
                    53:18:d7:4d:1b:40:58:81:9f:cc:30:32:03:b0:d9:
                    c6:6f:1c:2e:ed:fd:d8:8d:23:41:d2:f1:58:ac:a8:
                    7f:42:5f:73:b3:d1:d9:b3:3b:ac:b0:68:cf:02:21:
                    f7:5c:67:df:53:be:35:96:3f:9b:13:31:a4:71:91:
                    5a:3a:60:ac:6c:cc:38:d8:a3:c2:a2:8f:6b:46:2f:
                    2a:3c:3e:67:7a:f2:38:70:62:4d:77:38:cc:c3:b6:
                    f8:ba:c5:0a:fd:f9:7c:90:40:c3:09:ca:75:aa:c3:
                    71:0e:02:f8:4f:cb:02:17:36:08:5e:f3:af:9e:32:
                    3e:3e:ec:13:da:d9:f0:d7:8d:9b:b7:10:2e:d7:42:
                    da:e7:dc:05:76:c5:61:66:de:6f:fd:00:57:0d:6c:
                    67:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B0:38:77:C4:4E:FD:22:99:D2:D6:93:6E:7A:B8:55:08:5D:18:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/05344d12-1225-3518-95cc-a0056e72dec9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:ea:ed:49:c5:13:c7:68:22:c9:08:25:17:38:16:47:20:5e:
         b4:87:3e:a3:c6:c0:51:94:2b:5e:01:d3:d2:e7:73:a8:bf:9a:
         e5:77:e9:08:dd:fd:e1:e3:c6:e9:9e:fd:77:7c:b9:55:44:97:
         9e:94:67:3b:67:dc:fb:f7:6d:ef:bc:c3:18:42:84:ed:f4:b4:
         f5:d1:dc:12:d6:8a:d1:61:f8:9f:a7:ae:87:41:90:fc:40:dc:
         b3:7d:42:69:99:3f:5b:88:60:85:51:11:8a:71:dc:57:af:4d:
         3a:90:2e:f3:e6:d7:27:29:69:05:f3:0a:9e:08:ab:0a:5b:be:
         a8:8c:b5:f5:76:e0:c9:8a:fe:ff:86:f9:6c:6b:e8:dc:d3:66:
         0c:3f:50:eb:53:d0:aa:e1:cc:de:70:8f:22:b4:d7:43:39:2a:
         de:21:29:17:a1:35:8f:19:c9:4a:75:b0:69:e0:b6:02:7b:ba:
         68:6d:6b:58:90:15:86:65:55:39:22:71:b4:52:87:f8:63:3c:
         94:0c:51:b6:27:8f:dd:ee:be:74:4f:5c:f1:60:67:15:65:59:
         40:db:1d:a5:74:fb:72:04:79:d6:b2:71:eb:6d:78:fa:31:96:
         29:d7:b2:3d:70:d2:37:9a:ed:5b:7a:0d:3e:5b:73:f2:ab:19:
         6b:bf:18:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 21:21:32 2026 by rpki-client