Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/56ca9606-b95e-30aa-9b64-4d914b0230fe.roa
File:                     56ca9606-b95e-30aa-9b64-4d914b0230fe.roa (raw, json)
Hash identifier:          JUJvqoJ1nxO2e0+hDGGWcutqOVrdwUSynwpuiBTyuq4=
Subject key identifier:   E4:F4:BD:59:E6:9F:49:BD:38:69:D1:B5:36:B8:BB:AE:7C:AD:FB:A7
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F4328584AB220D8CD253AEB52A1233280
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/56ca9606-b95e-30aa-9b64-4d914b0230fe.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     35874
IP address blocks:        69.58.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:d8:cd:25:3a:eb:52:a1:23:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=72cfdfdf-abca-48a1-bf70-c6c0fc3aac35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:41:1a:a7:42:f5:20:04:dd:6d:f5:8c:c8:7a:
                    ed:9d:e4:49:58:81:bd:90:39:96:c9:7c:5a:01:f8:
                    be:78:b9:28:30:9d:22:f4:d5:44:ab:6f:3b:0a:9c:
                    e2:dd:e6:57:d0:cf:cc:cd:17:12:eb:5e:8e:51:4f:
                    df:1f:47:8c:c0:e7:f5:81:b2:f2:c5:fb:3f:8f:a9:
                    8e:91:60:86:aa:da:4a:7c:79:50:8b:3b:f8:a5:bd:
                    d5:8f:b1:14:33:1c:cf:a5:c0:af:5c:4d:6a:75:2a:
                    73:dc:65:1a:32:ab:be:b3:65:8f:d9:90:60:b5:47:
                    35:cc:95:43:66:d0:65:ac:63:89:ec:0b:1b:d3:49:
                    2a:d3:53:f9:71:83:fb:49:02:d3:79:11:41:bd:84:
                    42:36:a5:9f:63:e6:f0:27:6d:1f:d0:1d:95:1a:79:
                    95:6f:30:0c:ca:0b:5c:d3:12:77:1e:33:7f:1e:59:
                    0d:82:0b:09:0a:a4:86:71:bb:bd:45:ae:7e:bb:d7:
                    c7:2c:3c:4d:83:a0:24:87:55:59:bd:03:67:43:62:
                    e5:ab:1b:a1:dc:a2:1b:75:51:11:11:cd:69:d1:ee:
                    4f:29:a0:54:f1:39:94:10:c9:72:71:a9:7e:17:83:
                    c5:cc:10:9e:55:cd:2b:c7:c2:45:e3:bb:b4:e4:d7:
                    a9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F4:BD:59:E6:9F:49:BD:38:69:D1:B5:36:B8:BB:AE:7C:AD:FB:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/56ca9606-b95e-30aa-9b64-4d914b0230fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:9f:d8:01:cd:b0:0d:d8:aa:2b:e1:6d:05:25:7d:07:d1:ca:
         47:a7:b7:2e:21:e1:18:62:44:09:5f:a1:43:6b:8b:6c:07:79:
         ef:13:f4:74:3d:5d:b9:dc:eb:16:82:3a:f3:4d:fa:6a:14:78:
         07:dc:fc:9a:d2:8c:58:f4:c2:68:7e:1d:8f:b6:78:e8:ed:01:
         38:3f:c7:01:43:9a:b0:8e:c9:e7:c6:b1:3b:a4:ec:40:da:ab:
         0a:3a:10:3e:6f:ac:4d:4e:6c:e3:2e:c0:d5:95:d8:00:76:66:
         d3:53:ae:89:03:2e:74:af:52:f8:36:db:7f:60:f4:6e:a2:aa:
         7d:fa:13:26:0b:7e:49:0d:60:fb:47:7f:82:74:19:ce:83:4c:
         a5:f3:1e:df:53:ca:cd:4d:ec:f1:c5:0f:db:21:c1:ec:ed:20:
         9d:ec:cf:69:3e:ac:bc:79:71:9b:85:35:b5:c3:05:02:2f:4c:
         43:25:b0:61:ac:b7:c3:8f:53:66:20:bd:9e:fc:37:45:67:98:
         db:fc:c4:4e:92:df:98:0d:92:f7:a4:fe:07:77:31:d5:90:95:
         f9:c9:bd:39:45:61:92:40:80:57:28:9a:71:b4:e0:6a:c6:7a:
         27:14:32:ac:eb:dd:30:1d:52:70:f0:c7:45:7c:e6:63:75:65:
         f3:da:ca:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:10:45 2025 by rpki-client