Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/e3495657-b4d4-3e49-bb58-6d864d40c65f.roa
File:                     e3495657-b4d4-3e49-bb58-6d864d40c65f.roa (raw, json)
Hash identifier:          I2823RTNpAQqFuM6kpz9VrzfoWA2yT0DWFzI+o2qCXo=
Subject key identifier:   F4:DA:62:1B:5C:AB:39:15:5C:A4:66:08:7A:2A:1B:B2:F4:8A:8C:45
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F4328584CFDE7A0E3D87DBB9D8F71FD60
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/e3495657-b4d4-3e49-bb58-6d864d40c65f.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     401307
IP address blocks:        69.58.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e7:a0:e3:d8:7d:bb:9d:8f:71:fd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=b898918b-b7bb-46c1-822c-136742852b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:38:65:db:51:ef:2b:fa:a7:16:64:87:d1:50:
                    c8:cd:8e:75:8c:1e:d4:05:cc:5c:b9:2d:57:e8:13:
                    e8:2b:64:88:47:f2:f9:74:8b:00:07:71:2f:11:8f:
                    71:48:e1:d1:d4:78:08:a2:6b:a8:65:0a:48:cc:56:
                    26:03:11:30:89:4c:8e:2e:01:bf:1b:9f:1b:ae:f8:
                    0a:b1:2a:37:2a:b8:3f:9c:72:7e:14:65:38:48:bd:
                    6b:0c:ea:02:7e:df:b7:32:55:51:d3:37:f1:50:37:
                    19:fe:63:11:32:b8:18:8f:33:d6:76:dc:14:6c:d5:
                    cf:cf:af:20:2f:5b:dc:65:f9:7d:ed:db:8e:ad:a5:
                    2d:a8:0a:3e:09:b4:6b:96:68:80:72:c0:7e:16:65:
                    80:19:a5:9d:cb:fc:b8:71:48:78:c3:f4:ee:05:04:
                    c4:d9:29:4b:dd:1d:9c:d6:96:48:ac:b0:4c:f6:9c:
                    3b:9a:f2:df:0f:40:2c:65:fd:52:44:0e:3a:fc:c2:
                    98:94:39:66:58:f7:4f:08:11:e6:56:0a:fb:6b:a1:
                    ff:b1:e4:e1:3e:de:34:64:16:94:4c:df:47:af:1f:
                    07:51:9b:e1:b4:63:fa:bc:6e:c5:d4:d9:64:43:f6:
                    30:dc:38:00:f8:a1:a4:9f:76:54:1e:3e:af:e4:e2:
                    83:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DA:62:1B:5C:AB:39:15:5C:A4:66:08:7A:2A:1B:B2:F4:8A:8C:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/e3495657-b4d4-3e49-bb58-6d864d40c65f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:9a:10:10:54:29:a6:bb:61:c0:f7:2e:03:23:cc:a9:27:41:
         14:c2:d8:c3:da:b3:74:28:36:6b:fa:3c:bb:fa:e6:a1:fa:04:
         91:48:6d:5b:1b:bf:c4:51:07:b9:cb:e3:bc:e8:a3:f9:72:e3:
         d4:56:e0:f9:e8:9a:89:3f:9d:d9:b9:40:41:b6:92:9e:d3:a8:
         6f:15:1d:40:50:0c:77:38:c6:44:c2:d4:4f:d0:c9:45:e7:66:
         fc:a4:b6:a9:a1:70:a6:e6:c7:8c:34:12:05:d7:fa:9e:ac:3e:
         ba:f5:f2:f2:49:11:88:90:e9:96:c4:40:64:c4:58:ec:2a:3d:
         c0:57:14:be:e2:66:f5:91:e0:24:8d:fc:0d:75:af:27:3a:2f:
         d1:42:12:bf:e5:37:6d:4b:ce:7d:89:2b:e8:ed:bf:54:22:77:
         7d:1e:e5:3e:6c:2c:ec:11:1b:9b:62:1f:b9:a3:13:0c:fd:f9:
         11:0e:c7:05:b3:4b:73:96:00:45:cb:1d:38:f7:6f:ea:b1:f6:
         32:f1:1e:a9:e9:87:0d:a8:f2:21:28:70:57:2b:76:5a:80:6e:
         43:dd:22:23:8e:fe:42:af:52:1b:49:ae:cd:af:29:3f:fd:97:
         f4:f5:4d:ce:a7:c4:1e:6d:69:de:ab:df:78:06:3b:d7:09:ef:
         ec:1b:f7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:55:55 2026 by rpki-client