Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/22221c58-239a-37d6-9183-9c90cfaa32b6.roa
File:                     22221c58-239a-37d6-9183-9c90cfaa32b6.roa (raw, json)
Hash identifier:          U9fy1fN6UHw62jBbNJ0Z0ZHT+eKYfWC1pg6DKV8RKNo=
Subject key identifier:   71:98:64:48:D0:30:7A:61:7F:33:DB:14:84:38:2E:B5:DC:80:00:93
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F43285849D16511ED0BC442F04035E800
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/22221c58-239a-37d6-9183-9c90cfaa32b6.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     35874
IP address blocks:        69.58.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:11:ed:0b:c4:42:f0:40:35:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=8cb97c00-041e-4ba5-844b-1ba504523443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e4:08:6d:e8:47:9a:31:87:82:c2:cd:07:47:
                    c2:a3:43:dc:4b:c6:07:00:22:c1:91:b5:39:9c:8b:
                    dd:c2:49:30:c0:d7:f6:eb:0d:33:5b:05:b2:24:69:
                    72:1a:01:d3:bf:37:dc:18:bf:fb:18:32:b0:58:69:
                    16:00:ae:69:44:fd:21:09:6b:82:28:59:38:13:d1:
                    33:5a:36:0c:e8:b2:20:61:f3:cf:e4:e2:6a:b8:87:
                    27:a8:9b:6d:fd:82:0f:0a:cb:94:4c:50:ef:e6:ee:
                    ea:79:4c:a5:90:86:78:e4:d2:55:15:59:2d:ae:f9:
                    05:08:46:78:6b:ae:7c:04:ec:6c:39:7a:a2:ba:70:
                    74:3c:f3:a5:17:eb:bd:9c:3e:8c:4c:19:c6:d6:cb:
                    af:fc:0d:08:6c:48:54:21:3b:32:1d:33:49:2f:94:
                    6d:a4:0c:c8:fa:f5:b1:e5:5b:98:c1:76:43:31:40:
                    86:52:3e:b3:1a:b0:fb:53:dc:5d:fe:2d:2e:35:93:
                    5e:75:d3:1a:05:9a:69:78:90:6a:ce:9f:98:a8:8a:
                    e4:26:36:c1:f0:91:3c:ef:ae:d2:a7:0b:d0:0b:0c:
                    ed:e1:68:bc:a4:17:9b:83:e3:5e:5d:a6:3b:1b:cc:
                    91:32:27:63:24:94:1f:41:f1:a8:60:0f:09:d1:cd:
                    c4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:98:64:48:D0:30:7A:61:7F:33:DB:14:84:38:2E:B5:DC:80:00:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/22221c58-239a-37d6-9183-9c90cfaa32b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:e8:23:d0:47:22:ae:00:83:bf:95:05:db:4b:e2:8e:0c:76:
         72:b4:d4:91:30:84:04:78:4f:f0:57:fa:58:ff:66:55:6a:86:
         bb:5b:21:25:2d:c0:f6:2a:42:81:48:b0:3b:17:0d:bd:ad:5f:
         89:54:4a:e9:9a:5b:03:9e:3b:ea:60:7b:d7:fe:25:28:40:97:
         7f:76:f4:b0:08:08:9c:63:56:a0:a7:39:83:1b:f4:15:e3:55:
         a1:ee:56:21:53:95:a9:75:f2:7d:7a:cb:30:a7:4f:cc:ac:86:
         76:52:0a:b4:aa:7d:4b:e0:69:da:58:6b:0d:a1:e4:af:1f:0c:
         c0:33:5c:a9:7c:2a:d3:37:4f:3a:31:f3:fe:7e:86:5b:75:cd:
         08:0a:2d:97:35:ec:5b:37:36:23:64:29:a3:bf:c6:48:d1:e4:
         1b:3b:3a:2b:c3:c3:e6:c1:6d:0e:e7:13:27:e1:c6:0c:b2:5f:
         87:cc:2b:9d:3a:2b:93:88:12:f6:e5:33:7f:67:9a:cc:bf:73:
         bc:0a:0e:b6:a9:af:a2:d3:a1:9d:2c:9b:dc:08:90:44:22:55:
         bc:71:c3:06:1d:93:13:c1:68:b6:d1:9b:12:4b:f8:bb:e9:f8:
         0d:e8:9b:a6:47:4d:bf:27:c9:43:c9:57:63:ee:e8:c9:c0:57:
         dc:89:89:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZRHtC8RC8EA16AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGZmOTUzOWUtYTY4Yy00ZWVkLWFkOTgtMjZmNjdmZjQ0
NmZmMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk
OGNiOTdjMDAtMDQxZS00YmE1LTg0NGItMWJhNTA0NTIzNDQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuQIbehHmjGHgsLNB0fCo0PcS8YHACLBkbU5
nIvdwkkwwNf26w0zWwWyJGlyGgHTvzfcGL/7GDKwWGkWAK5pRP0hCWuCKFk4E9Ez
WjYM6LIgYfPP5OJquIcnqJtt/YIPCsuUTFDv5u7qeUylkIZ45NJVFVktrvkFCEZ4
a658BOxsOXqiunB0PPOlF+u9nD6MTBnG1suv/A0IbEhUITsyHTNJL5RtpAzI+vWx
5VuYwXZDMUCGUj6zGrD7U9xd/i0uNZNeddMaBZppeJBqzp+YqIrkJjbB8JE8767S
pwvQCwzt4Wi8pBebg+NeXaY7G8yRMidjJJQfQfGoYA8J0c3ErQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHGYZEjQMHphfzPbFIQ4LrXcgACTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZmY5
NTM5ZS1hNjhjLTRlZWQtYWQ5OC0yNmY2N2ZmNDQ2ZmYvMjIyMjFjNTgtMjM5YS0z
N2Q2LTkxODMtOWM5MGNmYWEzMmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGZmOTUzOWUtYTY4Yy00ZWVkLWFk
OTgtMjZmNjdmZjQ0NmZmL2RmZjk1MzllLWE2OGMtNGVlZC1hZDk4LTI2ZjY3ZmY0
NDZmZi5jcmwwHwYDVR0jBBgwFoAUHAFNTc9v/pfaLCJJg2pEXCR0ajYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kZmY5NTM5ZS1hNjhjLTRlZWQtYWQ5OC0yNmY2
N2ZmNDQ2ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARToxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFvoI9BHIq4Ag7+VBdtL4o4MdnK01JEwhAR4T/BX+lj/ZlVqhrtbISUt
wPYqQoFIsDsXDb2tX4lUSumaWwOeO+pge9f+JShAl3929LAICJxjVqCnOYMb9BXj
VaHuViFTlal18n16yzCnT8yshnZSCrSqfUvgadpYaw2h5K8fDMAzXKl8KtM3Tzox
8/5+hlt1zQgKLZc17Fs3NiNkKaO/xkjR5Bs7OivDw+bBbQ7nEyfhxgyyX4fMK506
K5OIEvblM39nmsy/c7wKDrapr6LToZ0sm9wIkEQiVbxxwwYdkxPBaLbRmxJL+Lvp
+A3om6ZHTb8nyUPJV2Pu6MnAV9yJifU=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:30:27 2025 by rpki-client