Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/11cafeea-6c59-3da9-8f99-648b76bea997.roa
File:                     11cafeea-6c59-3da9-8f99-648b76bea997.roa (raw, json)
Hash identifier:          1WRi5+0ssE8CTwspit703oOsfWkCoif0sXOnR2E55HA=
Subject key identifier:   24:73:79:4E:4C:B4:57:5A:54:E6:FF:5B:D7:05:F5:B9:C5:09:9E:4B
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F4328584F497409CA7B9A0C46BF232600
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/11cafeea-6c59-3da9-8f99-648b76bea997.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     22714
IP address blocks:        69.58.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:09:ca:7b:9a:0c:46:bf:23:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=443c9305-d50e-4298-9748-3e6f8df20ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ce:89:0a:f4:72:b7:be:f1:56:bd:a4:4c:bd:
                    8c:05:77:fa:04:62:37:87:e3:d9:b5:c2:da:21:9d:
                    f0:be:4e:2a:89:e0:d4:9a:1c:15:96:fe:8d:a0:76:
                    b5:18:cb:8a:dc:eb:f5:e5:d6:57:f9:32:7f:05:5b:
                    c1:bb:55:cc:8c:3b:52:c7:82:a3:0a:13:ed:0a:26:
                    60:b5:0d:ab:97:35:36:a6:f1:fd:fe:fc:bc:6b:a6:
                    76:70:f3:fc:32:f6:0d:02:9d:d0:9b:aa:b1:82:d2:
                    d6:75:4d:df:ab:92:89:f5:a4:91:3c:79:24:e4:d2:
                    1b:f5:0a:1b:f4:18:2a:27:2e:70:00:b8:99:98:3b:
                    91:91:23:f2:72:e6:f2:42:c5:be:d9:00:e1:73:44:
                    14:f2:03:d0:5a:f6:60:dd:28:a0:22:40:db:9c:04:
                    ee:fb:55:31:ef:a6:c9:f3:a7:a0:62:89:73:a6:77:
                    38:f0:9f:57:1c:64:5c:3d:ed:9c:48:8d:41:ce:3e:
                    ee:1f:c1:f4:10:36:c5:bd:d8:d2:84:8d:9c:8a:2f:
                    98:e6:e1:81:a1:f0:5b:42:09:ba:05:84:59:4c:2f:
                    16:c8:d8:61:12:91:a1:74:7b:36:71:ff:f8:5c:d3:
                    2b:51:51:56:62:f2:58:9d:55:c6:2b:04:b1:d8:2f:
                    3f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:73:79:4E:4C:B4:57:5A:54:E6:FF:5B:D7:05:F5:B9:C5:09:9E:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/11cafeea-6c59-3da9-8f99-648b76bea997.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:eb:6c:fb:55:ee:d3:20:24:71:8e:1b:d9:60:9c:98:6a:c1:
         ab:b7:a8:97:ae:71:ad:0b:a7:26:48:af:17:57:24:77:c3:77:
         b5:da:08:1e:a9:06:a5:bd:5d:3d:0e:65:2d:d5:bb:4f:1d:90:
         1e:04:76:73:1c:49:8a:cc:2e:9c:26:ee:fc:c7:99:b5:51:77:
         71:24:cd:63:6e:a6:f6:25:c9:5d:a6:52:3e:1f:80:ba:aa:16:
         a5:58:17:d5:4b:84:ed:88:41:92:5a:03:a2:77:fd:32:ee:bb:
         25:95:29:35:a6:cd:bb:17:ee:7b:61:91:8c:44:45:9e:24:d2:
         7f:80:ed:72:5b:6e:11:33:c9:c5:54:84:61:9f:c3:f3:52:65:
         c4:cb:f4:d1:e7:2a:80:32:ae:53:28:9b:f4:b0:04:38:fd:4e:
         71:02:86:8f:d7:5b:dc:1d:7d:c0:f4:47:72:99:65:ff:c2:6d:
         2a:b4:aa:f8:25:e8:bc:46:00:6b:00:bb:2e:4f:dd:e8:14:38:
         e3:ac:68:60:0b:33:6a:20:d0:01:14:3a:4c:ce:07:21:0d:d7:
         9f:65:32:e7:73:d2:2f:93:c3:fc:6a:c9:89:5d:17:8a:92:b6:
         68:98:8d:f0:f8:d6:d4:46:bf:6a:d9:52:8b:54:1a:22:bc:3e:
         aa:eb:32:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:30:13 2026 by rpki-client