Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/1207e297-6287-3c15-aa04-5ab8a8a94507.roa
File:                     1207e297-6287-3c15-aa04-5ab8a8a94507.roa (raw, json)
Hash identifier:          KYLUS8TkhZ/yhSGjoOtgENQ9u5u2IPj1Bq8Bbq80+0c=
Subject key identifier:   4E:0E:B1:F3:57:95:54:AE:A2:2D:98:BC:F8:FD:24:EE:55:3F:2C:F1
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F4328584D5243568DF08C5B7A4EBE1180
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/1207e297-6287-3c15-aa04-5ab8a8a94507.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     35874
IP address blocks:        69.58.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:56:8d:f0:8c:5b:7a:4e:be:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=03aeb1d1-4687-45a8-b2f4-4eee46db8af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a7:19:eb:35:21:6d:07:40:d4:da:6f:4d:c8:
                    5f:bb:7f:74:b8:3f:24:7d:6f:66:23:b8:89:a3:fb:
                    08:eb:8e:b2:48:fd:a2:88:e8:8d:fa:d2:35:6e:59:
                    50:c6:2f:7d:98:d1:34:88:4a:56:cb:b5:10:90:79:
                    67:b8:f1:20:d6:77:7d:a6:8a:5b:de:be:93:d2:83:
                    25:20:a5:3e:23:a4:82:68:a0:8b:fb:0e:0e:d5:76:
                    db:04:50:9f:ae:cf:4f:87:33:a4:be:e1:2b:d1:66:
                    8a:e1:1b:6e:62:21:c4:14:49:a7:1c:7b:12:4e:67:
                    93:e0:44:6c:ae:a1:61:67:7d:3c:95:17:63:c2:b8:
                    71:24:fa:d2:65:aa:4a:6a:6d:13:8d:93:a4:d4:be:
                    89:f4:9f:33:6c:ea:ee:82:f6:15:99:77:db:70:ce:
                    e6:e7:7d:c0:e7:42:4e:05:ff:f5:9f:9c:73:e4:5c:
                    5a:df:86:6d:00:c7:f8:dd:0a:f9:42:f4:99:79:63:
                    30:e3:0d:10:d0:5a:99:3e:ee:79:33:85:c4:b5:b6:
                    40:a2:43:6b:d9:a1:9d:cd:7c:4a:34:c6:71:04:d0:
                    1c:ea:00:d6:dd:62:cd:a1:40:03:10:fe:70:d5:c1:
                    6f:57:f4:21:78:47:e7:d5:31:1b:bc:f5:a8:f7:dd:
                    9c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0E:B1:F3:57:95:54:AE:A2:2D:98:BC:F8:FD:24:EE:55:3F:2C:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/1207e297-6287-3c15-aa04-5ab8a8a94507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:94:65:2d:b5:33:05:13:4a:e3:4a:57:c8:5b:e8:5b:48:66:
         52:5d:b5:37:6b:20:88:b6:5c:a8:47:76:bb:81:bb:37:5b:ed:
         2c:ef:65:f3:e5:31:e1:9e:32:7a:00:f5:eb:07:83:a2:2d:a9:
         73:53:5b:1d:ae:06:20:88:b3:07:8e:84:76:90:9f:ad:18:8f:
         49:44:cf:96:b0:c7:ac:b1:be:96:a4:37:34:33:b7:e1:43:0a:
         bc:53:71:73:38:92:3c:89:76:97:23:e5:50:c4:e3:33:f0:3c:
         5e:69:fd:97:20:82:b0:3a:23:7e:79:ce:cf:f5:ef:c3:98:9f:
         81:62:82:0e:83:9b:b1:a5:02:5e:50:fa:d6:6d:89:3f:2b:04:
         6f:4e:7e:30:73:3f:aa:2e:41:d5:58:ab:3a:d7:e9:87:21:ca:
         74:90:3b:0d:3e:d0:8c:dc:b6:40:9e:44:30:ce:73:d2:7c:a1:
         f6:47:43:dd:e7:f4:6d:23:5c:63:31:77:6f:fb:ab:b9:a2:5f:
         6c:af:8a:a6:22:c9:a7:e9:00:39:39:69:23:b9:c4:ba:cc:1c:
         e9:51:b3:13:9d:5e:ab:36:42:d8:4f:98:26:d3:d1:68:24:b1:
         87:04:65:78:d8:b0:6c:fb:9d:fb:40:72:5c:08:51:d3:08:54:
         5f:0a:ea:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:37:59 2026 by rpki-client