Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/92ff32e1-72d4-371e-9077-b5fa51f186fb.roa
File:                     92ff32e1-72d4-371e-9077-b5fa51f186fb.roa (raw, json)
Hash identifier:          Zn9bn7jX8pxcGQPJT+/eP+22tD/DaeqbFA//bIBz1r4=
Subject key identifier:   51:39:93:5A:23:38:C6:C9:AF:C1:9C:55:B2:EE:14:0A:7D:45:2E:29
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F4328584AB220D99B25CBC9685D578B00
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/92ff32e1-72d4-371e-9077-b5fa51f186fb.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     35874
IP address blocks:        69.58.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:d9:9b:25:cb:c9:68:5d:57:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=f5af13a2-56b7-4667-b98a-d2e29b459e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:05:48:fb:5a:0a:6a:3c:58:78:71:1a:62:79:
                    73:9c:9b:eb:7c:47:a9:75:15:d7:0a:cf:be:61:21:
                    d0:64:6c:65:02:f8:59:09:e6:97:d7:b8:34:a7:89:
                    1d:17:a8:6f:3d:a8:b2:0d:b9:45:f4:5e:b2:31:91:
                    52:de:4a:7e:fd:f9:e0:2d:c7:3d:f0:ac:40:84:75:
                    e8:b5:33:86:b3:33:d0:bc:dd:ef:5b:4d:4a:7f:14:
                    78:c7:81:ba:f8:71:98:f4:30:51:7e:62:06:ea:72:
                    09:97:7e:a0:21:ef:da:c4:6a:c7:a6:91:92:34:b9:
                    15:0e:5b:4f:7c:40:63:cd:2c:1c:6c:11:44:96:91:
                    3f:b4:24:84:d8:f7:17:59:24:ca:d8:5a:75:76:14:
                    30:2e:20:00:88:95:44:f1:9f:1b:9e:61:ff:2b:2b:
                    c5:2b:00:60:7a:9d:9e:d6:38:4d:8c:d2:bb:f7:60:
                    1b:0f:3d:a1:1c:f3:1a:22:b5:38:12:ef:e6:9a:93:
                    f5:3a:03:93:1c:37:3b:b2:93:73:ac:a5:e5:b5:e8:
                    3a:22:9b:6d:12:45:12:1b:af:70:51:3c:f7:b8:f5:
                    28:91:d9:1d:79:0b:86:fa:7d:43:c0:f4:84:c2:13:
                    f8:5c:f4:41:f4:fe:8f:0e:8a:53:23:c5:1f:84:25:
                    a8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:39:93:5A:23:38:C6:C9:AF:C1:9C:55:B2:EE:14:0A:7D:45:2E:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/92ff32e1-72d4-371e-9077-b5fa51f186fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:58:e8:63:66:c9:3e:da:10:86:35:5c:6b:64:59:04:17:f8:
         90:27:d4:bf:9a:4d:39:4c:2b:6a:30:05:d3:25:1d:a4:8e:d3:
         64:be:eb:80:55:d1:b7:c6:85:c3:6f:e8:06:11:7e:18:58:39:
         ca:40:63:8e:ee:31:83:8d:7c:52:99:e4:2e:73:51:1c:4c:2c:
         9d:99:5b:c0:d7:ab:bb:f5:29:22:13:fc:f4:42:d1:e2:c5:e5:
         42:2f:fd:e7:7c:e5:6c:30:38:d5:b0:d6:47:ae:9d:66:ff:d0:
         4d:54:6f:5f:09:95:a0:34:55:de:05:2b:67:bb:2b:55:b6:26:
         04:73:d1:d5:3a:06:d4:93:06:52:7b:d7:31:19:51:06:61:0a:
         f6:9c:ef:43:1f:eb:49:85:ea:d9:60:2b:db:41:51:e2:56:ca:
         71:d5:27:5d:9c:cb:e3:a6:54:85:e0:3e:e7:92:19:9c:66:79:
         7c:80:4a:18:e7:25:91:0c:65:60:b1:08:17:33:d8:b3:b5:e7:
         8a:df:ce:9c:cb:ee:f3:66:bf:df:df:31:8b:68:45:a4:ad:82:
         f6:c9:ca:b0:01:f5:eb:3e:9c:f1:b4:91:9d:c1:37:0d:94:ef:
         9f:68:e2:c2:fe:ab:7e:28:86:b8:92:2c:ad:76:c5:61:14:2d:
         85:31:dd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:10:37 2025 by rpki-client