Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/74485cf8-ea3e-3a05-ba29-7b96d5640f8e.roa
File:                     74485cf8-ea3e-3a05-ba29-7b96d5640f8e.roa (raw, json)
Hash identifier:          lflRbCuTEzni+9IFLx8+fcQYE/wp2y7LIo5g8YK13P0=
Subject key identifier:   4D:2B:12:5F:AA:F6:7C:CE:5A:CE:AF:35:52:2A:D7:3C:7F:64:57:C6
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F4328584EA78747D24866549E6CA80C80
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/74485cf8-ea3e-3a05-ba29-7b96d5640f8e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     401307
IP address blocks:        69.58.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:47:d2:48:66:54:9e:6c:a8:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=180b49a7-9147-4602-b15c-f7011c7d4710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f5:a2:08:f0:fc:fe:46:39:85:55:5c:e2:70:
                    b7:21:07:b2:fd:d9:28:40:9b:00:0c:ee:12:ba:4d:
                    d7:0d:76:8f:54:df:67:94:ea:cd:88:46:db:58:8c:
                    50:98:5a:05:a1:01:f4:ff:2d:3c:f7:43:22:59:f7:
                    e6:b0:04:48:8a:15:a2:96:2a:8b:94:52:63:6b:2e:
                    84:b2:3c:17:de:12:94:b5:f9:55:46:6e:37:8e:a9:
                    95:af:41:9d:88:2c:fc:d2:0a:b2:73:95:c9:82:c4:
                    a5:ff:29:2d:e4:43:10:e9:9b:7c:ec:8d:5d:b9:75:
                    96:f4:a1:3d:4f:39:37:a8:7a:f1:de:e8:33:8a:cd:
                    23:e7:2a:e9:1c:20:99:3e:9b:5a:f0:47:17:d4:5d:
                    e6:ae:c1:09:eb:73:8b:08:47:95:88:c3:26:76:be:
                    63:b1:3d:ca:4d:9c:70:e1:72:17:da:8a:72:25:d4:
                    54:11:7b:1b:48:6d:13:ec:be:73:30:b8:ff:b9:a9:
                    15:fd:25:01:dd:aa:86:28:b7:1a:41:8c:bf:92:71:
                    95:74:73:ad:65:9a:b3:80:db:cc:6b:06:5a:e7:5c:
                    cf:e3:82:61:b8:e8:52:e2:c8:83:b3:fc:31:15:0b:
                    80:35:4b:35:17:51:5c:fc:0d:cf:64:af:db:f2:cb:
                    2b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2B:12:5F:AA:F6:7C:CE:5A:CE:AF:35:52:2A:D7:3C:7F:64:57:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/74485cf8-ea3e-3a05-ba29-7b96d5640f8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:4a:b4:62:7c:ec:e2:21:10:0a:25:bf:03:6e:13:54:c5:3b:
         ae:33:e1:55:f2:40:b9:c1:af:86:b8:b7:d1:8c:64:71:f7:9a:
         29:cf:fc:3b:49:1f:98:90:ea:bb:1b:37:af:64:4e:7c:63:ee:
         43:26:1b:72:4e:19:66:4d:d4:8b:d0:7d:2c:fa:6c:2e:e9:8e:
         2d:5a:87:1b:52:49:95:cf:9b:20:4f:14:0d:95:c6:35:c9:fa:
         57:ff:5d:73:f2:18:e6:5a:44:22:23:58:66:fb:3a:f0:b9:11:
         61:19:5c:c2:e6:69:f0:c3:37:d6:7b:cf:f6:9f:8f:a1:99:0c:
         b5:bf:fe:97:95:3a:7f:9f:da:36:59:a4:c5:7c:72:65:86:64:
         28:7d:60:03:8e:4d:91:71:34:27:fd:7a:16:7c:2d:d7:22:d0:
         49:2c:4f:c0:ed:d6:c8:25:cd:19:b3:72:53:69:71:5a:0a:c2:
         1c:99:62:75:1f:a5:9d:eb:8d:94:f7:0c:54:54:21:70:9a:cc:
         f1:de:dd:8c:e7:2b:c2:43:6a:41:d7:67:72:2a:c5:69:6c:cc:
         dd:1c:09:42:cc:f1:ed:06:21:65:78:64:91:06:42:4c:26:3e:
         31:7a:4f:5b:0e:74:e6:be:70:c9:b4:38:3b:b7:36:15:80:1b:
         46:b0:68:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:05:49 2026 by rpki-client