Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/56ca9606-b95e-30aa-9b64-4d914b0230fe.roa
File:                     56ca9606-b95e-30aa-9b64-4d914b0230fe.roa (raw, json)
Hash identifier:          YRx2zvGokSIU1Gl0SRP0nWDdfe/YdShZXR3iIo/medE=
Subject key identifier:   04:E8:02:53:86:7E:7B:15:29:B9:B4:C1:C1:0D:0E:58:F1:D1:BD:5F
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F43285849D16511590E3AC8F11A446A80
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/56ca9606-b95e-30aa-9b64-4d914b0230fe.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     35874
IP address blocks:        69.58.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:11:59:0e:3a:c8:f1:1a:44:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=452f38f8-697c-486d-858a-bb56199a3d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cd:1f:72:d0:25:29:74:f6:ee:b7:c1:dc:59:
                    ad:2b:1d:92:00:06:c5:2c:3a:50:00:da:61:7a:f4:
                    27:c9:cb:d1:79:97:1c:c5:c0:e1:5b:39:c7:54:b8:
                    7a:c9:53:48:78:52:b0:00:b7:30:61:82:f8:92:19:
                    cd:7c:da:ca:98:cc:29:b0:92:b1:84:51:3d:ea:b8:
                    ce:17:00:26:ee:e2:ea:67:57:76:19:74:73:2e:a0:
                    fa:ba:fe:74:88:74:cb:a0:50:cb:26:52:85:2e:f0:
                    e1:63:a4:36:c0:f5:64:e2:85:40:14:f5:67:c2:f6:
                    9d:9e:a3:35:60:7c:2a:bc:b2:8c:74:93:02:c4:75:
                    e9:bb:52:18:a7:ed:fa:09:0b:d7:bb:d5:ca:a3:f0:
                    64:9e:c9:b3:6d:95:fb:34:14:05:fd:5e:62:f9:26:
                    0a:79:e9:89:20:53:97:0b:33:06:ef:17:fb:75:b7:
                    e2:59:ff:3f:f8:87:05:a4:88:42:d7:cf:c0:8d:b7:
                    fd:02:1b:61:33:6a:6a:19:a3:b7:42:66:61:e6:27:
                    18:ec:35:09:85:3f:81:76:d0:8a:4e:ee:1d:46:31:
                    82:0a:51:f8:d1:65:99:86:b5:6c:6d:2e:92:61:69:
                    81:e8:16:76:a7:3e:25:9a:c4:8d:b9:a9:4f:24:cd:
                    8f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E8:02:53:86:7E:7B:15:29:B9:B4:C1:C1:0D:0E:58:F1:D1:BD:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/56ca9606-b95e-30aa-9b64-4d914b0230fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:5a:e0:ed:03:3c:cf:d1:75:0d:8e:48:a4:e7:94:c3:b9:ce:
         71:5d:5b:69:b2:35:36:e9:cf:61:48:b9:db:23:01:6e:1b:f6:
         1e:62:fe:84:b2:1d:d7:76:05:cc:a4:a8:71:7c:4e:69:b8:6d:
         ec:c5:55:e4:07:b2:6c:d5:1c:df:0e:2b:7c:ad:92:0c:b2:b3:
         45:38:60:ea:31:fd:b0:55:55:95:ce:e4:c4:d4:94:60:cf:23:
         e4:4f:cf:b4:79:67:f7:6a:6e:30:87:db:04:39:35:03:5e:1e:
         1b:5b:b3:1f:78:be:37:0c:f2:4a:2f:52:aa:5a:32:58:48:24:
         c0:f6:4c:59:d9:91:43:19:b9:46:f8:7d:7e:2d:fc:b5:27:4a:
         81:1c:ad:87:ad:4b:9e:10:d0:9b:2a:c6:59:ca:88:f8:f1:75:
         21:0b:f7:e7:78:1a:01:34:02:55:5b:23:2b:cc:76:ff:24:37:
         f5:93:f4:d6:82:73:bc:49:23:68:02:aa:ab:98:23:f1:c1:4e:
         73:80:80:7c:65:7c:9f:cb:be:44:69:f8:fc:a4:82:d4:01:5f:
         af:77:bd:4c:c6:aa:70:d0:f7:32:5a:e6:24:57:04:ee:85:c1:
         4d:2b:af:20:88:ca:2c:a0:17:72:06:82:72:be:74:7b:e1:da:
         8c:b2:97:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:27:02 2025 by rpki-client