Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/e3495657-b4d4-3e49-bb58-6d864d40c65f.roa
File:                     e3495657-b4d4-3e49-bb58-6d864d40c65f.roa (raw, json)
Hash identifier:          HXwHUCIEqt71edvn9qz9q+tYcRVHRQLTgK4GSsY2Alk=
Subject key identifier:   16:C8:0F:51:B2:55:32:8A:C4:61:D7:E7:B7:41:EA:E5:57:6A:F4:18
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F432858497DA46C44A9A531045CE71800
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/e3495657-b4d4-3e49-bb58-6d864d40c65f.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     401307
IP address blocks:        69.58.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:6c:44:a9:a5:31:04:5c:e7:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=b5a1f81c-646e-4136-a0cc-51c32c476906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:23:ec:66:87:ee:37:38:f8:82:57:70:f1:02:
                    8f:8a:9a:1e:15:b1:9c:af:90:f3:fd:7e:ef:9e:bc:
                    ce:62:c4:b2:7e:0e:84:db:f4:b1:c7:ac:12:b2:a2:
                    b8:90:e9:a0:b4:ee:20:e8:16:cf:69:46:77:49:07:
                    3d:02:4a:74:b8:bf:50:f4:3a:c0:7d:5f:f2:21:9b:
                    87:d9:ca:00:02:53:ed:b1:5e:13:80:8e:83:64:7b:
                    58:7e:e3:14:b1:a8:94:77:d4:18:89:0f:20:1a:6e:
                    de:52:d4:6a:5d:fe:9e:07:fc:28:ce:67:61:87:94:
                    c9:46:b7:b9:81:99:0a:ef:7c:7f:4a:fa:34:b1:a5:
                    4e:c3:30:1b:f1:09:e4:8c:91:03:24:c9:13:dd:bb:
                    97:db:99:43:b4:8a:81:9d:99:38:e1:5d:cb:fe:79:
                    57:ba:31:76:9d:0e:1b:1e:5c:a5:14:94:df:93:b7:
                    5c:4c:62:68:4d:13:b1:25:3b:ae:6d:02:29:48:62:
                    e4:3e:7f:a0:92:9e:67:c0:32:6c:ef:76:2b:9b:1e:
                    da:37:a1:37:39:1a:9d:1d:74:9a:c2:5b:9f:b2:5c:
                    3b:7c:4c:a2:bd:57:22:fe:dd:7e:b0:64:6d:9b:51:
                    31:13:9c:42:64:f8:c5:8b:23:49:c9:74:5a:38:8b:
                    68:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C8:0F:51:B2:55:32:8A:C4:61:D7:E7:B7:41:EA:E5:57:6A:F4:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/e3495657-b4d4-3e49-bb58-6d864d40c65f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:de:79:56:d3:47:da:5a:74:11:30:2f:37:02:8e:3c:56:29:
         a6:14:2a:68:be:10:5d:3a:9b:86:da:f1:67:ee:bc:f2:28:94:
         bb:64:25:58:ca:8f:11:71:88:99:df:dc:6d:05:db:65:3f:62:
         f7:ca:00:49:a1:90:1c:2c:e4:ba:1e:3e:55:49:25:e5:eb:3a:
         f9:dd:cf:fd:13:81:2d:1d:08:33:ff:79:af:e2:8a:bf:54:46:
         ad:05:dd:b5:ca:6e:d0:66:8b:af:06:47:21:2c:02:69:2e:3d:
         46:c6:46:4b:0a:4e:ce:68:0c:b2:1e:d0:ae:97:fd:10:cf:07:
         82:13:ad:4b:02:5b:d6:98:e7:d6:84:e4:ef:21:00:ab:a8:9c:
         be:94:c8:47:a2:57:d2:a6:ad:1c:95:a5:80:82:12:30:f4:64:
         9c:99:c2:e5:4a:58:a8:dc:30:53:84:a3:c4:a0:15:a1:aa:a0:
         9c:97:c1:ea:a5:79:b8:15:19:4e:1c:c4:14:a2:d0:43:ef:0d:
         be:68:56:be:34:c8:b1:20:9a:00:9a:00:9c:61:73:f5:ac:50:
         04:83:37:d6:ad:08:e7:c5:49:d2:5f:18:55:a2:6e:56:72:03:
         5a:70:8f:0d:d0:96:1f:63:0d:48:52:40:50:be:74:e3:06:d0:
         dc:35:12:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:42:11 2025 by rpki-client