Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/a2c0ab8f-f1ed-34c6-9063-bcc6e94fb911.roa
File:                     a2c0ab8f-f1ed-34c6-9063-bcc6e94fb911.roa (raw, json)
Hash identifier:          LNkn9yVAqHcy5TaBO4UdXIM6nwyEQkvvCt2RVL0iCCM=
Subject key identifier:   37:F4:30:79:25:55:6C:23:3F:DD:32:BE:E3:0A:96:3F:CE:B8:05:C5
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F4328584AB220D8DF8FB6F600BDAEBA40
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/a2c0ab8f-f1ed-34c6-9063-bcc6e94fb911.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     35874
IP address blocks:        69.58.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:d8:df:8f:b6:f6:00:bd:ae:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=4a22edf8-f454-400b-a4fc-84c940fd9d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c6:ec:62:6b:72:51:a0:63:da:a7:33:89:9a:
                    b4:22:1b:14:9c:50:47:4f:ff:d2:fc:0f:bf:8a:5f:
                    ee:c4:11:dd:e6:a1:42:b4:46:d2:be:22:f6:c6:cb:
                    af:ec:ae:63:2d:90:43:30:71:cf:16:ab:ae:c4:f1:
                    6d:08:2a:56:d7:d2:5f:b2:d1:78:27:bb:90:b0:de:
                    30:26:0d:c0:52:b8:7e:3d:cf:63:cd:51:e9:f8:cd:
                    c5:65:24:5b:fa:32:58:a0:39:7a:20:9d:8e:64:b2:
                    cd:32:b8:93:ed:d7:4e:df:db:f7:54:c3:c3:94:46:
                    5b:d6:46:d7:5c:a7:67:4e:57:90:74:4d:0d:6e:10:
                    63:fd:c6:7c:22:0d:b2:73:0c:71:ea:44:9a:d5:96:
                    cf:94:5d:df:51:6d:c0:8f:73:a1:14:70:b6:b0:85:
                    6b:8c:73:0c:a9:0e:99:e2:d1:3b:fc:52:37:43:4c:
                    fd:eb:79:5b:51:88:78:8f:2c:c8:82:c5:e1:c5:df:
                    42:06:2b:7a:3f:0c:06:78:71:0f:a2:d5:8a:ae:4b:
                    b8:d4:54:2d:bf:ae:65:52:33:53:e3:34:97:a8:2d:
                    04:1d:35:06:bf:53:8e:9b:99:64:c6:2e:20:a9:32:
                    fa:3a:99:73:f8:d4:86:63:75:bd:69:5b:18:df:ea:
                    d7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F4:30:79:25:55:6C:23:3F:DD:32:BE:E3:0A:96:3F:CE:B8:05:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/a2c0ab8f-f1ed-34c6-9063-bcc6e94fb911.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:d7:03:2a:71:02:32:66:b6:4d:5d:83:0c:c6:a7:42:30:0e:
         f9:5e:03:f1:d9:46:06:48:4a:72:9f:8c:a6:4c:21:d8:9c:fb:
         51:26:e2:dc:3b:1a:73:df:03:9d:d0:2e:61:c4:a8:99:af:4b:
         37:c6:03:20:c9:d4:e1:30:da:c0:2e:54:14:42:a7:a5:ac:38:
         1a:05:a6:e9:f0:e5:db:3f:8e:25:a9:fa:71:d9:e8:e5:1c:5e:
         04:d8:2d:3e:46:eb:06:72:97:df:8a:16:22:79:49:26:85:60:
         12:ee:16:3c:de:1e:16:66:e3:2b:96:97:68:54:78:56:c5:fc:
         cc:fa:11:8e:77:b6:15:f8:a9:ef:9a:a5:be:32:29:a9:ff:79:
         be:ca:48:71:7f:82:f0:0c:53:58:8f:92:aa:65:e0:b5:b8:c5:
         9c:9d:d6:ca:39:02:3e:4b:09:d3:00:df:b4:44:19:3d:d4:c9:
         54:1e:89:06:d5:e9:3e:6b:6f:92:dc:7f:b6:03:b2:13:ae:a1:
         3f:fe:f3:a1:20:b2:d1:39:de:cb:cd:8e:42:82:98:cf:f4:ac:
         ba:10:b6:76:3d:e4:e2:ca:13:e0:f9:6b:c5:1b:93:cd:b1:7b:
         27:32:ec:d1:12:d6:a8:34:e1:4c:68:52:87:d0:fb:dc:66:32:
         3b:22:45:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:16:02 2025 by rpki-client