Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/1a43a402-aadb-3eb9-a552-7dc2b1faff81.roa
File:                     1a43a402-aadb-3eb9-a552-7dc2b1faff81.roa (raw, json)
Hash identifier:          OuBeJd1b+jgFv3OUVrOsRPts5OIeJuyJUaWQs4Sl+O0=
Subject key identifier:   27:88:CB:A5:8C:46:23:86:BA:F4:C8:4A:D0:6C:BE:33:4E:B5:8B:32
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F43285849D165095F7FED4CBD3B0CEC90
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/1a43a402-aadb-3eb9-a552-7dc2b1faff81.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     16509
IP address blocks:        69.58.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:09:5f:7f:ed:4c:bd:3b:0c:ec:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=3c2757ef-7d1e-45d2-9901-c1cfa3aa2710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7a:0d:8c:2a:7f:95:cc:7f:8e:c1:c2:52:d9:
                    02:86:4a:86:a4:79:d2:b2:20:f1:bc:76:8b:1a:b4:
                    66:bc:bf:3f:22:dc:66:74:cf:63:b7:b8:43:8c:a4:
                    10:cc:a3:8c:a9:ca:a2:9a:5c:1a:89:88:36:fd:34:
                    f0:58:54:ad:87:45:a0:35:5e:09:b9:a9:d6:9c:02:
                    f0:d5:63:32:c7:73:64:74:15:1c:c2:af:89:fe:e8:
                    4d:f9:17:46:db:9b:27:c5:9b:35:8a:c3:c2:e7:19:
                    ff:e7:0d:32:11:cc:c0:a2:27:92:a0:37:54:7b:d0:
                    c5:d3:b6:04:de:eb:80:8c:a3:42:d7:ed:ba:36:e7:
                    7c:47:62:ed:8c:c3:48:64:14:23:69:12:82:0f:65:
                    dc:65:26:cb:50:30:fb:a7:6e:6f:20:55:b5:84:e0:
                    b1:97:cf:d3:c8:ee:dc:34:9b:d7:4f:fc:04:52:f8:
                    be:50:09:9a:23:d3:af:46:4d:d6:6c:71:04:c3:fe:
                    53:9b:28:c5:33:39:6e:e0:8b:04:d0:58:8b:5c:bd:
                    39:7e:b2:b8:a7:5a:9b:ef:ef:5c:c7:b0:51:12:04:
                    3d:50:29:00:3d:13:80:c6:5b:d8:ac:18:76:38:40:
                    e3:92:a1:7f:6b:05:6d:a8:69:f5:6a:72:89:8a:92:
                    07:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:88:CB:A5:8C:46:23:86:BA:F4:C8:4A:D0:6C:BE:33:4E:B5:8B:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/1a43a402-aadb-3eb9-a552-7dc2b1faff81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:55:ec:77:08:1d:54:b3:33:a2:af:f5:15:e9:4a:fb:3e:62:
         98:3b:43:e8:7d:2c:73:bf:95:9b:66:a3:d0:f0:ce:ef:d2:c3:
         da:50:f9:3a:b4:49:58:41:d2:48:01:b9:26:15:25:c6:66:72:
         0f:38:fb:43:87:07:7c:95:2e:8a:7c:cc:63:78:7c:4c:35:de:
         f5:29:40:81:a0:03:94:8e:fa:1b:eb:0b:e1:d7:f3:69:9c:f1:
         ed:9d:89:84:76:6d:8e:a0:11:77:d6:45:7d:6f:35:ce:d7:1e:
         52:9e:bc:04:69:62:62:9c:e1:fe:4a:2c:ef:56:af:a9:a1:21:
         87:71:94:8d:65:fe:4b:aa:6f:f7:9a:04:42:72:27:df:9b:15:
         46:ef:0b:c0:34:66:99:3d:4b:05:52:c5:89:7d:14:b7:ca:15:
         ea:01:6d:0c:57:cc:de:88:e1:5d:e7:05:8e:97:c5:87:fc:94:
         79:dc:79:62:cb:6f:d8:36:ba:b4:ff:40:ca:64:d8:35:39:88:
         f6:07:c3:6a:80:ca:ce:5e:9a:72:15:3c:01:62:d2:c0:14:c5:
         89:84:3c:03:71:2d:20:bc:63:49:89:32:8e:fd:2e:ea:31:8a:
         c2:c8:3d:5a:ab:03:35:b4:f2:48:bd:5a:50:c1:05:88:f1:96:
         88:35:8d:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZQlff+1MvTsM7JAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGZmOTUzOWUtYTY4Yy00ZWVkLWFkOTgtMjZmNjdmZjQ0
NmZmMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk
M2MyNzU3ZWYtN2QxZS00NWQyLTk5MDEtYzFjZmEzYWEyNzEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnoNjCp/lcx/jsHCUtkChkqGpHnSsiDxvHaL
GrRmvL8/ItxmdM9jt7hDjKQQzKOMqcqimlwaiYg2/TTwWFSth0WgNV4JuanWnALw
1WMyx3NkdBUcwq+J/uhN+RdG25snxZs1isPC5xn/5w0yEczAoieSoDdUe9DF07YE
3uuAjKNC1+26Nud8R2LtjMNIZBQjaRKCD2XcZSbLUDD7p25vIFW1hOCxl8/TyO7c
NJvXT/wEUvi+UAmaI9OvRk3WbHEEw/5TmyjFMzlu4IsE0FiLXL05frK4p1qb7+9c
x7BREgQ9UCkAPROAxlvYrBh2OEDjkqF/awVtqGn1anKJipIH4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCeIy6WMRiOGuvTIStBsvjNOtYsyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZmY5
NTM5ZS1hNjhjLTRlZWQtYWQ5OC0yNmY2N2ZmNDQ2ZmYvMWE0M2E0MDItYWFkYi0z
ZWI5LWE1NTItN2RjMmIxZmFmZjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGZmOTUzOWUtYTY4Yy00ZWVkLWFk
OTgtMjZmNjdmZjQ0NmZmL2RmZjk1MzllLWE2OGMtNGVlZC1hZDk4LTI2ZjY3ZmY0
NDZmZi5jcmwwHwYDVR0jBBgwFoAUHAFNTc9v/pfaLCJJg2pEXCR0ajYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kZmY5NTM5ZS1hNjhjLTRlZWQtYWQ5OC0yNmY2
N2ZmNDQ2ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARToiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFZV7HcIHVSzM6Kv9RXpSvs+Ypg7Q+h9LHO/lZtmo9Dwzu/Sw9pQ+Tq0
SVhB0kgBuSYVJcZmcg84+0OHB3yVLop8zGN4fEw13vUpQIGgA5SO+hvrC+HX82mc
8e2diYR2bY6gEXfWRX1vNc7XHlKevARpYmKc4f5KLO9Wr6mhIYdxlI1l/kuqb/ea
BEJyJ9+bFUbvC8A0Zpk9SwVSxYl9FLfKFeoBbQxXzN6I4V3nBY6XxYf8lHnceWLL
b9g2urT/QMpk2DU5iPYHw2qAys5emnIVPAFi0sAUxYmEPANxLSC8Y0mJMo79Luox
isLIPVqrAzW08ki9WlDBBYjxlog1jXo=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:07:22 2025 by rpki-client