Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/132e1496-c458-3b40-91b6-1f88b996a69a.roa
File:                     132e1496-c458-3b40-91b6-1f88b996a69a.roa (raw, json)
Hash identifier:          YgW1D/R9WE3eGSRx0F2Vg4oE7nkXs/xH7iQ2KspdNDE=
Subject key identifier:   76:84:14:D1:A0:45:A3:5B:EA:3B:F2:17:19:8F:E7:B3:C9:C1:B5:F0
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F4328584D524356C3127DC0C81F1F2C80
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/132e1496-c458-3b40-91b6-1f88b996a69a.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     35874
IP address blocks:        69.58.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:56:c3:12:7d:c0:c8:1f:1f:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=95378c3d-d6f5-492c-939c-b8c7f0a367a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a6:e7:3b:94:83:f8:9d:b8:cb:e6:ad:69:17:
                    de:54:a2:2d:c8:5e:30:12:2a:08:16:dd:eb:85:4f:
                    ec:7d:cb:af:a0:a4:8e:f4:90:af:20:93:34:ee:6a:
                    1b:ec:f0:4b:ae:6d:e3:1d:83:7b:c7:3c:3e:1c:9c:
                    ec:1e:e6:c3:56:34:05:20:9a:b1:c3:02:cf:26:c5:
                    a9:eb:1c:7c:73:ea:5c:38:0a:9b:50:34:f3:4a:21:
                    2b:de:57:a6:a6:71:4c:55:c7:32:d2:2e:76:53:a9:
                    42:92:ca:4e:fb:29:5c:d8:30:5d:94:7a:23:3b:ff:
                    21:47:6c:19:74:6e:80:0a:ce:32:b1:80:32:96:03:
                    30:8f:f8:01:54:48:d1:9c:8c:57:62:85:02:14:2b:
                    42:7a:53:b6:19:50:4a:49:be:6e:80:e6:7a:19:b5:
                    9c:83:13:31:cc:e2:16:1e:07:85:f6:e5:54:02:15:
                    56:f1:55:32:13:0b:15:81:83:7c:c7:ca:21:22:48:
                    c7:78:f4:3c:60:71:c4:a5:78:be:a5:dc:32:7c:fd:
                    8c:57:05:ee:d2:02:45:e2:c4:ee:f7:24:90:1b:f3:
                    55:cc:54:31:3e:f4:28:8e:40:e4:a3:5d:e1:e0:57:
                    ec:56:49:08:83:5f:88:5e:0c:63:77:cc:70:dc:e7:
                    cd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:84:14:D1:A0:45:A3:5B:EA:3B:F2:17:19:8F:E7:B3:C9:C1:B5:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/132e1496-c458-3b40-91b6-1f88b996a69a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:72:a5:43:47:39:54:59:24:02:f9:20:f0:69:a1:71:16:9a:
         08:e6:79:cb:c7:ce:d5:84:47:7f:1a:7d:c9:e8:43:4b:f3:be:
         d1:15:63:96:71:bd:0f:df:d1:47:36:e0:d4:8a:a2:dc:f1:da:
         4d:53:58:7e:d3:bb:88:20:17:26:1d:d1:1d:bc:b5:aa:cd:d5:
         dd:c1:c8:de:07:33:7c:7b:44:99:fc:44:45:2d:d0:38:56:a8:
         67:42:3a:7c:85:cf:1c:3a:b3:3b:53:6c:9f:70:ef:31:3f:48:
         4d:dc:68:a1:e5:2d:b2:9d:46:5b:83:bd:c8:41:c8:5f:06:6d:
         c5:60:91:73:55:44:cc:4b:be:fc:87:e5:01:55:fe:8a:a8:92:
         74:53:a5:be:08:d5:d0:50:a7:00:e0:b6:56:6a:d9:01:de:a5:
         41:54:dd:7c:3b:c3:33:01:79:58:36:4a:33:1e:9f:94:3f:ea:
         0a:61:40:ca:e0:25:3c:bc:93:60:80:84:e5:3f:32:68:21:3b:
         19:ab:49:23:cc:e9:5c:dc:9f:20:54:ac:fe:64:3d:4c:95:fa:
         7b:8b:1e:15:94:71:3a:a0:60:9d:39:43:7b:7d:87:65:b6:92:
         a5:d5:af:bc:fb:29:fd:15:8a:9c:7f:88:ed:82:54:28:92:d3:
         0e:04:88:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:41:32 2026 by rpki-client