Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/e3495657-b4d4-3e49-bb58-6d864d40c65f.roa
File:                     e3495657-b4d4-3e49-bb58-6d864d40c65f.roa (raw, json)
Hash identifier:          WntxNalLx9JdxrtC8mhdCIIR+RYaYw043xYGc4O+R+w=
Subject key identifier:   D0:DB:FD:96:9D:DB:8D:01:60:A4:7F:4A:7A:24:07:AB:44:87:46:EE
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F4328584EA788CF58F66C589EB4588040
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/e3495657-b4d4-3e49-bb58-6d864d40c65f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     401307
IP address blocks:        69.58.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:cf:58:f6:6c:58:9e:b4:58:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=67881e35-9c81-45d7-becb-46006287267c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f1:07:40:a4:6f:d1:62:9f:c9:ee:2b:a0:23:
                    63:92:cc:17:b9:5b:b9:21:f7:57:08:8d:a1:b9:33:
                    5e:fc:d7:2d:23:3c:a9:0c:30:9d:f8:10:61:93:66:
                    9e:79:6d:06:72:2d:3c:1b:59:6e:bc:51:72:5d:c9:
                    f3:89:f3:f8:6c:af:38:3e:1d:47:50:df:a4:10:12:
                    c6:1d:35:b2:7b:75:c6:5a:48:bc:71:c2:dc:e7:b9:
                    97:00:a7:8a:09:11:bc:9a:1f:83:c2:55:a8:83:35:
                    92:0a:7d:5c:ab:3d:63:6f:e8:7e:c8:4b:13:3f:f3:
                    31:45:33:f9:57:89:49:81:0d:ff:11:7e:aa:df:ea:
                    d1:94:99:2c:7b:8c:51:f2:e3:f7:fe:d8:05:78:e2:
                    18:dc:18:09:01:f7:21:6b:a3:39:e7:aa:58:ac:a5:
                    8a:6a:4b:45:f8:9e:e8:af:0a:34:1b:32:25:f5:78:
                    3d:59:64:8d:7e:c1:c2:b4:4c:3b:6a:67:c2:33:f9:
                    86:0e:dc:b4:c2:69:04:2c:cf:fb:09:8b:9e:06:86:
                    6f:71:0c:ee:64:16:ab:6a:4d:a6:26:b7:44:dd:ba:
                    06:1d:52:a9:8f:94:22:33:7a:4d:78:93:13:d9:af:
                    62:d2:05:77:c4:17:83:be:c6:5f:da:91:e6:aa:8d:
                    9a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DB:FD:96:9D:DB:8D:01:60:A4:7F:4A:7A:24:07:AB:44:87:46:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/e3495657-b4d4-3e49-bb58-6d864d40c65f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:4e:0e:c8:81:06:88:e4:e0:f0:45:91:14:00:c5:a2:6b:27:
         59:8e:b7:84:36:ff:4c:83:fd:6b:10:f7:f5:d8:18:68:0b:e2:
         9f:53:68:51:79:ca:09:cd:ef:d3:a2:73:04:10:95:b8:56:df:
         48:5d:9d:c3:fe:c6:e2:c4:b5:44:d6:40:8f:59:91:7e:3f:24:
         d3:7c:3b:c4:a7:c8:a0:0e:a9:66:ac:60:f6:14:02:40:ba:42:
         ef:a6:dd:a0:22:59:f7:f8:c7:d8:81:77:19:2b:2a:ec:fe:65:
         61:d0:38:e9:03:2b:f9:fd:c4:c4:65:43:88:b9:2c:3f:28:e6:
         64:86:db:d4:d9:65:f5:86:94:5c:e0:0b:ca:9c:8a:dd:bd:82:
         b5:b4:b3:fb:0a:b2:3f:7e:fe:d9:c9:02:9e:04:58:8f:43:ce:
         e9:28:e3:27:0d:0b:60:e6:39:78:77:51:cf:b1:2e:cd:e8:8d:
         30:c5:b8:0c:06:e6:e2:aa:a2:8c:e3:b2:f7:f7:a1:42:10:63:
         8d:09:cf:57:dd:e8:81:ca:cc:57:4a:67:c6:17:3e:b7:13:ea:
         0e:e5:58:50:86:4f:b6:70:c9:99:d9:1e:ad:e4:4c:78:f7:54:
         31:78:81:52:b4:74:12:be:f5:02:70:52:ae:97:f2:18:29:a7:
         59:27:2a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:27:36 2026 by rpki-client