Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/e3495657-b4d4-3e49-bb58-6d864d40c65f.roa
File:                     e3495657-b4d4-3e49-bb58-6d864d40c65f.roa (raw, json)
Hash identifier:          4fZdjWEOBa2Q1GQMB4E5lC+dLBo+Iy/E/9JAl40Ew4E=
Subject key identifier:   BF:6E:E1:12:C6:50:88:7B:96:F0:B5:12:8C:79:21:66:AE:AC:2B:92
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F4328584A5CFB2ADBDE691D1C55249500
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/e3495657-b4d4-3e49-bb58-6d864d40c65f.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     401307
IP address blocks:        69.58.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:2a:db:de:69:1d:1c:55:24:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=d78c655a-c680-4df7-ad6c-529dbb6aea70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:37:7b:35:13:96:16:f4:0f:3d:57:10:4e:2f:
                    bf:a3:25:41:fe:c9:37:7d:39:18:a2:40:a5:74:06:
                    29:02:3b:03:f7:b6:76:03:a5:ee:ad:35:9e:3d:91:
                    b4:55:8e:fe:a4:b9:36:75:43:f9:67:11:a9:71:5a:
                    a8:82:90:c0:57:8f:06:19:97:b5:46:72:88:ef:05:
                    9d:5a:a4:c7:77:86:3f:cd:e5:a5:c3:52:12:d6:99:
                    0d:5d:d0:54:05:b1:5e:4c:74:d3:7d:c9:4e:45:d9:
                    f2:65:81:db:fd:ab:1e:ac:b8:f1:f0:b7:d5:84:8c:
                    33:f4:e6:43:06:fe:6b:af:f0:fe:85:61:a9:5a:f1:
                    75:5f:e8:0d:c2:ec:c9:43:0b:85:c2:9d:7a:eb:99:
                    4f:a2:01:ca:f4:42:e0:70:0e:b5:8d:05:52:2b:70:
                    ef:4d:19:37:fa:c7:bd:22:49:0f:40:be:b8:09:20:
                    b6:2a:4f:5d:3b:61:74:12:fe:e9:56:a3:0c:5d:27:
                    55:7f:14:f3:a5:57:1a:aa:73:f5:e0:c3:c6:90:d1:
                    51:1f:ba:e7:c6:bd:07:41:5a:49:bc:1f:51:09:29:
                    ba:21:83:19:2a:38:e9:99:ab:91:88:af:dc:bc:78:
                    b6:ec:d6:9d:e8:fe:32:65:a1:b4:fd:40:2d:77:f8:
                    d2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6E:E1:12:C6:50:88:7B:96:F0:B5:12:8C:79:21:66:AE:AC:2B:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/e3495657-b4d4-3e49-bb58-6d864d40c65f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:55:d2:ac:e8:de:49:f5:fe:13:a1:9d:a5:da:57:5e:f3:a6:
         d9:f9:94:fa:a2:a9:a9:80:20:32:c2:b4:51:e3:03:20:d7:2d:
         06:6a:9f:c5:90:1e:ca:cf:a8:fb:59:7f:3b:40:39:22:0f:b1:
         57:04:f6:ef:be:ea:60:ed:af:06:5b:38:97:25:85:5b:6d:4e:
         45:19:d3:81:7f:01:60:3e:1c:a8:f7:02:bd:e3:30:df:ce:03:
         18:3f:90:bd:47:ac:ad:1f:66:28:2b:d9:c7:c5:87:80:2c:33:
         25:47:48:6d:0b:53:88:56:13:9f:00:07:1e:3d:09:fc:5e:dd:
         ae:d3:47:48:bc:36:9d:77:41:5c:e3:62:81:e4:ae:b0:07:8c:
         98:82:36:c4:9b:96:e5:b0:f6:20:f4:bd:4d:4c:57:cd:f9:b2:
         4c:f8:18:c5:37:b9:ee:15:30:6a:7f:49:db:cc:64:2f:dc:19:
         0e:88:f4:2a:8f:c5:3f:32:49:4f:6c:33:2c:f7:5d:55:3a:4f:
         18:53:40:fc:e2:8d:78:74:3b:cc:7e:b9:7c:61:20:9e:2c:d1:
         45:8e:08:b7:86:d0:c3:83:b9:12:62:5f:c9:a5:c3:89:ce:73:
         13:67:e9:df:03:91:11:8f:89:13:53:83:92:79:dc:aa:8b:fe:
         d0:d9:f9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 05:24:35 2025 by rpki-client