Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/606fde17-63fb-3c77-ac2f-22a9d73547cb.roa
File:                     606fde17-63fb-3c77-ac2f-22a9d73547cb.roa (raw, json)
Hash identifier:          CeXC16oCFMeG/eoXHPOFFUYoEURn9gC2ZXblelB/nBA=
Subject key identifier:   DB:C6:E7:5E:57:1F:17:D8:8C:1D:B1:DA:82:35:74:5A:07:92:5A:8C
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F4328584AB220D9AEAB03F55534683500
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/606fde17-63fb-3c77-ac2f-22a9d73547cb.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     35874
IP address blocks:        69.58.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:d9:ae:ab:03:f5:55:34:68:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=1efdc389-239c-4a95-aaf8-27634dd5ea72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:61:71:a5:15:0d:f0:ed:f1:9a:4f:0b:7f:2c:
                    c3:32:05:1e:0b:b7:da:b0:b3:52:25:de:47:a0:c7:
                    47:e4:c9:d9:7b:59:e3:3b:99:32:a4:33:5a:75:cd:
                    be:1f:b4:6d:e5:b2:1d:47:72:10:bc:9c:87:65:a5:
                    61:aa:21:71:e6:3c:2c:1e:f4:ed:6c:e1:8c:8a:fb:
                    a8:b0:e5:ed:cc:cc:f3:0a:68:d8:8f:2a:6d:92:ee:
                    b2:2e:6e:f0:9b:30:92:c5:11:e6:91:07:9a:34:7d:
                    61:28:03:2e:7b:b9:a3:ba:62:e0:f4:64:f4:23:37:
                    b0:a7:e8:6d:51:bd:d0:41:14:a7:9d:fa:f2:3a:ea:
                    d6:f6:49:c3:ee:77:d2:4c:34:e9:bd:5b:fe:75:64:
                    84:3b:1e:88:8d:b5:95:51:e5:33:ca:1c:c5:d5:d6:
                    ef:a8:94:9f:70:ec:24:b2:0e:8a:57:4f:52:2a:5e:
                    62:24:30:30:2b:9f:2f:77:15:28:d3:02:d0:b1:6b:
                    0e:df:a9:27:e3:e2:e9:30:46:e3:7f:99:30:06:94:
                    9c:51:58:30:ed:ab:4b:30:33:80:79:d2:43:2c:82:
                    95:7a:c6:2f:dd:3b:e3:1b:e4:8a:bf:92:14:f2:b4:
                    54:ba:b8:4e:e6:3f:c8:c4:03:f7:29:14:5b:87:56:
                    99:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C6:E7:5E:57:1F:17:D8:8C:1D:B1:DA:82:35:74:5A:07:92:5A:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/606fde17-63fb-3c77-ac2f-22a9d73547cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:b5:80:f5:25:a4:b2:49:e1:8d:e8:cd:21:01:ef:94:98:14:
         e0:af:88:99:51:25:21:e7:fa:01:46:90:df:a7:0e:1c:b3:07:
         38:0a:9e:8a:5f:48:86:c8:6d:9a:60:9c:37:3f:10:f1:72:4d:
         bb:d6:04:57:91:e0:70:12:53:e9:69:ff:52:81:a9:e3:6c:9e:
         6c:2d:3a:6c:2b:b6:a1:77:9b:3a:49:27:d8:8d:34:e9:a8:f1:
         d3:4b:94:3d:73:68:c1:03:58:5f:d2:a5:8b:b7:1e:83:15:6e:
         9a:76:e8:1e:af:38:36:8e:21:a8:4b:99:8b:8b:32:9d:87:09:
         7f:06:66:8c:40:6a:3d:ca:40:66:3e:f3:ce:74:41:d5:f2:eb:
         83:2b:50:40:74:5f:cf:1d:21:84:67:75:ab:e9:f7:17:0d:32:
         73:a7:f0:34:32:bc:5b:dd:97:5d:54:c0:64:2f:66:31:98:60:
         a8:c5:0d:ce:11:03:f3:90:eb:4a:6b:e0:ab:51:ee:ea:37:e3:
         11:7e:75:ac:c8:2d:1c:a7:76:13:38:da:7c:4b:27:6d:47:2e:
         b3:cb:f0:89:3f:c3:7b:1f:e4:5d:65:a5:ae:ae:ad:25:be:c0:
         d1:7b:85:22:15:12:08:96:20:df:99:25:10:96:31:1c:8b:2c:
         b1:65:cd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:27:53 2025 by rpki-client