Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/24563349-a664-362b-a317-02cb1d641489.roa
File:                     24563349-a664-362b-a317-02cb1d641489.roa (raw, json)
Hash identifier:          fFZ+5JjjCBRLGrVVzczEV5nse8iqiQj9odbiXCiLIRc=
Subject key identifier:   DC:8A:81:77:4B:73:DD:E4:E8:3D:1C:D0:02:D6:99:52:C4:D0:C5:81
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F4328584F7782E969CFE0EEBEDEE5D080
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/24563349-a664-362b-a317-02cb1d641489.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     35874
IP address blocks:        69.58.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:82:e9:69:cf:e0:ee:be:de:e5:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=1c1cddf4-b232-40be-aec1-bb1cee72b3bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:07:2a:63:44:3e:94:a7:89:6e:74:92:28:65:
                    81:0f:fe:a7:84:e3:f8:80:54:a0:bd:c3:0c:c3:55:
                    37:e1:99:85:08:0e:fc:ef:a6:b0:82:42:60:3d:be:
                    c4:f2:03:02:fa:6e:9c:2b:fd:15:8f:94:95:a9:97:
                    42:ba:7c:b9:16:23:f3:aa:5d:d2:d7:b5:38:f8:48:
                    78:ba:1b:0f:7e:ea:a1:04:b2:9c:33:4d:63:1a:ee:
                    2e:a4:ff:36:18:94:e8:41:ff:e2:b4:cb:2a:c7:08:
                    7c:83:ce:30:8e:e8:f8:db:0d:e1:38:06:0f:be:64:
                    0c:3a:4d:20:3a:ef:e9:ad:f7:90:58:0f:8c:5e:1f:
                    8c:6c:75:56:f0:30:d9:b1:87:68:62:c0:18:65:17:
                    69:ba:49:59:b2:21:c9:c1:99:f6:07:c3:4d:05:77:
                    cf:f0:87:e5:b6:1f:8e:27:36:a1:96:7b:04:1e:bf:
                    b1:7d:7d:09:38:e7:65:41:a7:f6:5e:8b:99:12:a8:
                    97:ce:bb:b9:cd:91:ca:68:a3:98:72:2b:97:22:a4:
                    74:4f:89:fe:e8:7e:ad:f1:aa:cf:0d:3c:6b:66:98:
                    d7:75:78:d5:d2:eb:4d:95:60:12:49:0b:18:ac:bc:
                    3a:10:af:9a:6c:b3:18:db:3e:53:33:42:d5:84:9c:
                    12:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8A:81:77:4B:73:DD:E4:E8:3D:1C:D0:02:D6:99:52:C4:D0:C5:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/24563349-a664-362b-a317-02cb1d641489.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:de:aa:18:b4:de:1c:41:8a:4f:48:28:f7:6c:6d:8b:54:c1:
         21:b9:5f:29:d7:c4:b0:17:c1:ef:90:2d:1d:dc:c1:ce:ec:ac:
         59:8d:06:15:c8:85:98:20:a4:94:1e:ed:ba:36:24:a4:85:a4:
         fa:35:38:56:65:71:24:c7:05:81:04:43:49:37:7e:be:13:12:
         43:89:e6:0f:2d:50:dc:a1:31:8c:cc:44:e7:b6:c2:ec:17:05:
         b5:19:de:da:c1:62:41:d7:3a:10:b2:ea:1b:5b:1b:eb:ad:e5:
         79:2b:d6:59:f9:94:f2:e3:b5:4a:3a:4a:98:cf:5b:7e:0d:6d:
         b8:38:50:66:26:31:09:c9:7c:09:83:c9:99:44:49:c7:03:6e:
         df:2b:07:7f:ec:53:8a:96:f4:1b:72:02:d5:2e:ae:77:c0:b0:
         a9:a2:0d:08:5e:33:37:53:d1:73:3f:1b:2e:29:4e:8b:fe:fd:
         a8:77:ba:d4:68:fd:32:fb:9d:9f:6a:8f:bd:c5:13:c6:03:e2:
         55:20:96:ee:3b:a3:a3:1e:52:bb:42:43:73:5e:10:ad:32:cc:
         6e:6d:d2:99:36:06:6c:95:03:6f:94:8a:10:5d:43:b1:6e:92:
         15:73:e1:d8:58:2c:ec:8f:50:52:7e:54:21:b8:6c:75:66:11:
         ad:07:53:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:27:11 2026 by rpki-client