Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/05344d12-1225-3518-95cc-a0056e72dec9.roa
File:                     05344d12-1225-3518-95cc-a0056e72dec9.roa (raw, json)
Hash identifier:          rwpRg3YlKiqu6oMit1CzBxLGquJz3UXa2CKxtbFNjfI=
Subject key identifier:   53:83:E3:E2:D5:B8:1F:5A:59:A4:DE:E6:9D:82:79:FC:2F:F2:7B:03
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F4328584AB220D8AD2AAF9B7C52F70A00
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/05344d12-1225-3518-95cc-a0056e72dec9.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     35874
IP address blocks:        69.58.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:d8:ad:2a:af:9b:7c:52:f7:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=7490c0ee-76c7-4556-9aa8-e7aa5242c2bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:dc:ae:b7:e7:15:fb:fc:18:4c:88:64:d6:d8:
                    75:8b:76:24:db:56:a2:64:78:5a:e9:6e:88:e9:7b:
                    64:a5:3a:30:21:b4:20:c2:e6:c6:51:04:20:a6:f9:
                    6e:66:b5:d1:05:73:40:ae:47:b5:55:8d:cc:5d:a7:
                    2a:71:3e:0b:56:6b:3c:38:68:17:df:ac:12:cf:61:
                    cd:2f:5a:93:ef:98:e9:89:54:31:ac:dc:24:d7:01:
                    a8:c4:f4:75:7a:18:e4:c6:c7:85:07:9a:17:b7:22:
                    2a:e0:a6:31:48:03:74:f4:5f:d7:e4:37:90:b0:58:
                    45:b0:d1:1e:5c:8e:5c:30:dd:78:40:b7:96:6e:40:
                    83:c5:2f:98:64:f5:54:9a:29:d2:6b:89:f5:a7:08:
                    e3:73:98:f8:b8:1d:5f:17:81:5e:40:44:33:5b:f9:
                    96:ac:b6:d4:63:35:bb:b5:11:c2:97:5e:2c:60:48:
                    cb:73:35:54:e6:20:d8:11:7b:fb:b9:c1:af:94:50:
                    44:28:ee:52:73:5c:57:a5:d7:18:48:0e:8a:89:ab:
                    e5:5e:a3:11:d1:9e:1d:89:02:a9:5c:bb:7f:28:c1:
                    30:31:d9:97:09:8f:4e:c1:2d:fe:9d:03:82:eb:ca:
                    eb:3a:52:10:59:1d:f8:25:b3:2b:c7:43:0f:3c:15:
                    5f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:83:E3:E2:D5:B8:1F:5A:59:A4:DE:E6:9D:82:79:FC:2F:F2:7B:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/05344d12-1225-3518-95cc-a0056e72dec9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:16:d4:4b:5e:7f:09:58:c9:59:ce:a3:06:39:eb:57:f9:7e:
         ef:b5:34:83:8c:08:01:c9:cc:94:3c:d0:9a:3b:31:ef:61:2b:
         04:c6:cf:0e:a9:ac:e3:2e:ce:88:36:f1:e4:c9:d1:de:58:50:
         8d:f5:54:ef:fd:57:6c:25:a7:57:ed:d6:95:27:db:b6:d8:5c:
         f5:fa:9c:52:5e:47:cd:29:a0:9d:91:a6:5d:7d:15:70:94:8a:
         52:11:2b:b7:48:c6:80:46:89:ff:72:4e:7c:5f:60:ce:f8:62:
         bc:12:dc:b7:a9:b6:91:f7:c4:ec:0f:b8:de:4c:24:eb:82:8a:
         bb:b4:18:61:e5:7b:9a:58:5d:22:c0:b9:da:9f:bc:ec:24:e3:
         42:7e:af:88:29:bf:93:85:6c:fd:88:cc:b6:7f:ab:e6:c0:53:
         ef:ac:a9:b7:cd:9f:dd:7b:1f:a5:0f:d4:bc:d7:a1:49:49:ed:
         26:81:aa:ee:cc:d0:86:51:b5:65:19:c5:60:28:68:2d:85:32:
         7a:2d:7b:3b:9b:a0:3e:b1:f0:7b:ce:e1:4f:08:bd:d1:a2:46:
         80:83:8a:ca:bb:22:89:62:9f:c2:8a:af:29:15:0a:03:b9:25:
         07:37:50:1e:aa:0f:6d:cf:78:92:b9:fc:54:9a:85:b8:66:13:
         3d:dd:2b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:19:46 2025 by rpki-client