Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/0d23d361-24ed-3696-810d-4939900a135f.roa
File:                     0d23d361-24ed-3696-810d-4939900a135f.roa (raw, json)
Hash identifier:          +3M8Lo0tDlzj13QsRtpsrt6lzntPMrDPUehURxja1Rg=
Subject key identifier:   13:CC:BD:20:65:27:9A:FD:2B:12:2A:AD:E5:A6:8F:59:16:3B:E7:F6
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F4328584B92DCF3F7843D5DA56136D200
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/0d23d361-24ed-3696-810d-4939900a135f.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     35874
IP address blocks:        69.58.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:f3:f7:84:3d:5d:a5:61:36:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=06c33ab4-6b97-4440-bbbe-1891074a4921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3c:b7:d8:cd:37:4e:d5:24:a7:9c:80:1a:ad:
                    dd:95:d1:26:c8:01:03:2e:f0:b1:a7:43:83:91:ca:
                    a9:40:c4:ea:36:d8:33:03:93:f7:35:af:b6:5d:ac:
                    72:08:49:ce:66:da:1f:89:4d:2c:c7:4d:f5:f4:66:
                    1d:ad:4b:e6:7c:a2:ec:0d:ac:fd:45:89:34:86:c6:
                    82:c9:cc:de:e3:27:64:d5:81:f1:2e:4f:6d:0b:c9:
                    45:84:74:d7:d3:7b:8f:38:0b:ec:c6:74:de:3b:e9:
                    63:8d:84:a9:63:49:b4:bd:e6:0c:b5:c2:98:fb:03:
                    0a:6b:3a:86:05:e9:ee:18:ec:da:cb:08:73:e9:f5:
                    d8:85:33:dd:e8:97:36:52:dd:c1:41:a6:af:69:e1:
                    86:99:6e:23:a8:0a:0f:94:bb:a2:f3:b2:52:e8:e8:
                    1c:51:2c:92:74:87:3d:58:04:0b:1d:97:10:1b:d8:
                    c3:bb:86:27:51:cd:22:b6:b1:57:e8:e5:f0:6e:f0:
                    35:e2:e0:77:e3:9c:d9:e3:ae:26:04:1d:b4:9a:1a:
                    b9:e5:0d:08:5b:84:5b:07:22:bb:c4:9c:bc:07:7f:
                    e5:d3:82:55:91:62:ad:31:22:92:b0:27:17:65:c0:
                    f5:76:ec:7e:34:22:a9:aa:00:5f:43:53:c0:e8:89:
                    69:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CC:BD:20:65:27:9A:FD:2B:12:2A:AD:E5:A6:8F:59:16:3B:E7:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/0d23d361-24ed-3696-810d-4939900a135f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:73:63:46:39:7e:73:07:f9:c5:66:33:f6:2c:bd:98:45:26:
         95:6f:47:88:7a:d3:bc:4f:c1:74:7f:ae:a6:55:68:bb:4a:55:
         09:80:a3:7a:85:a9:d7:0e:07:6c:66:e2:07:3d:ad:30:8b:2a:
         b5:4f:61:8f:d8:10:45:b4:30:81:4c:0c:88:77:4b:61:c8:b7:
         02:24:da:09:49:e0:a8:15:6e:a5:a1:7f:a6:5b:e4:a6:5a:b6:
         d4:6b:23:92:70:17:f7:65:0c:47:53:a7:5e:9b:0e:c1:6f:1c:
         f9:f9:69:70:1e:78:28:d4:70:a0:26:4e:04:aa:66:b9:89:00:
         3a:27:54:f0:56:d8:98:d8:fd:ee:20:3e:8d:c6:d4:65:a6:b8:
         71:f7:0e:7e:b4:27:b1:c1:0b:76:3e:6f:ed:c8:7c:e8:d7:1c:
         34:db:93:af:87:29:d1:8e:94:5a:9b:b7:b5:4c:88:32:01:01:
         04:c9:78:2c:de:36:9f:80:b2:31:fc:41:c8:7e:30:dc:06:be:
         86:c1:19:27:df:24:d4:1f:69:7e:d0:f8:e2:f5:e6:60:8b:09:
         7f:c0:43:fb:9b:53:51:cb:b2:d5:28:40:50:e1:cd:37:e8:c0:
         03:4c:8e:4e:28:4a:ba:40:55:e8:5d:23:f0:27:ce:20:4f:33:
         65:b5:fc:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3PP3hD1dpWE20gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGZmOTUzOWUtYTY4Yy00ZWVkLWFkOTgtMjZmNjdmZjQ0
NmZmMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk
MDZjMzNhYjQtNmI5Ny00NDQwLWJiYmUtMTg5MTA3NGE0OTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljy32M03TtUkp5yAGq3dldEmyAEDLvCxp0OD
kcqpQMTqNtgzA5P3Na+2XaxyCEnOZtofiU0sx0319GYdrUvmfKLsDaz9RYk0hsaC
ycze4ydk1YHxLk9tC8lFhHTX03uPOAvsxnTeO+ljjYSpY0m0veYMtcKY+wMKazqG
BenuGOzaywhz6fXYhTPd6Jc2Ut3BQaavaeGGmW4jqAoPlLui87JS6OgcUSySdIc9
WAQLHZcQG9jDu4YnUc0itrFX6OXwbvA14uB345zZ464mBB20mhq55Q0IW4RbByK7
xJy8B3/l04JVkWKtMSKSsCcXZcD1dux+NCKpqgBfQ1PA6Ilp7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBPMvSBlJ5r9KxIqreWmj1kWO+f2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZmY5
NTM5ZS1hNjhjLTRlZWQtYWQ5OC0yNmY2N2ZmNDQ2ZmYvMGQyM2QzNjEtMjRlZC0z
Njk2LTgxMGQtNDkzOTkwMGExMzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGZmOTUzOWUtYTY4Yy00ZWVkLWFk
OTgtMjZmNjdmZjQ0NmZmL2RmZjk1MzllLWE2OGMtNGVlZC1hZDk4LTI2ZjY3ZmY0
NDZmZi5jcmwwHwYDVR0jBBgwFoAUHAFNTc9v/pfaLCJJg2pEXCR0ajYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kZmY5NTM5ZS1hNjhjLTRlZWQtYWQ5OC0yNmY2
N2ZmNDQ2ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTohMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFlzY0Y5fnMH+cVmM/YsvZhFJpVvR4h607xPwXR/rqZVaLtKVQmAo3qF
qdcOB2xm4gc9rTCLKrVPYY/YEEW0MIFMDIh3S2HItwIk2glJ4KgVbqWhf6Zb5KZa
ttRrI5JwF/dlDEdTp16bDsFvHPn5aXAeeCjUcKAmTgSqZrmJADonVPBW2JjY/e4g
Po3G1GWmuHH3Dn60J7HBC3Y+b+3IfOjXHDTbk6+HKdGOlFqbt7VMiDIBAQTJeCze
Np+AsjH8Qch+MNwGvobBGSffJNQfaX7Q+OL15mCLCX/AQ/ubU1HLstUoQFDhzTfo
wANMjk4oSrpAVehdI/AnziBPM2W1/Dg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:24:41 2025 by rpki-client