Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/132e1496-c458-3b40-91b6-1f88b996a69a.roa
File:                     132e1496-c458-3b40-91b6-1f88b996a69a.roa (raw, json)
Hash identifier:          dmyGg4cvhp63w3URPIbHwCBk+sVly9FwzUb4Ks4n6dQ=
Subject key identifier:   83:73:B0:94:57:6E:60:8A:B8:F5:D7:D1:97:14:06:1D:33:9A:69:E8
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F4328584B92DCF4B90E9A1630B7580C40
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/132e1496-c458-3b40-91b6-1f88b996a69a.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     35874
IP address blocks:        69.58.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:f4:b9:0e:9a:16:30:b7:58:0c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=9f550a66-0c37-4bff-b36d-27f90dac0d4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f5:16:98:9a:6d:f0:2d:55:0c:7a:c1:b1:00:
                    ac:85:30:16:48:11:fa:8c:1f:67:40:c9:c9:ab:fc:
                    a5:71:6c:1c:f0:70:f1:c5:d0:47:5a:97:a7:ce:da:
                    86:b7:97:d6:71:35:31:d9:02:0e:ff:87:a1:17:51:
                    ca:b7:c4:b9:a9:65:b2:a2:73:1e:34:53:cb:b9:dd:
                    2c:b4:47:b4:1b:a3:74:b4:83:6e:15:e5:c9:64:a3:
                    8b:d1:18:91:45:24:60:23:24:e1:d7:d5:ec:2e:18:
                    be:08:2d:2d:f7:a6:b1:e4:6c:43:59:86:97:03:13:
                    e0:cc:6f:b6:4e:34:dd:0e:80:aa:b2:6f:26:44:5c:
                    d6:9b:6b:c5:f7:df:bf:cc:8c:f3:ae:1e:fc:3b:86:
                    11:ed:aa:ec:d4:bd:a6:54:60:76:6d:9a:23:dd:7d:
                    88:58:0b:ef:c2:2c:6c:52:e6:96:35:55:49:e1:ae:
                    90:c4:cd:27:3b:00:6e:ad:fd:fe:63:19:aa:67:9a:
                    2d:ab:7c:f0:82:5d:7a:77:9c:ab:d4:ca:2b:ec:46:
                    12:1b:9b:20:03:df:0d:ec:1e:7c:30:03:61:39:78:
                    1d:7e:70:62:06:b7:6b:ce:1f:e3:aa:3c:ac:d5:8f:
                    b4:62:9f:9c:1e:c8:b8:f4:56:48:53:ba:43:4e:26:
                    3e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:73:B0:94:57:6E:60:8A:B8:F5:D7:D1:97:14:06:1D:33:9A:69:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/132e1496-c458-3b40-91b6-1f88b996a69a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:bf:f4:74:3a:a4:b6:c8:43:a9:a2:1b:97:2d:57:7c:88:80:
         f9:b0:eb:44:65:39:14:2b:0b:99:51:1e:45:10:0f:8c:9e:46:
         82:3b:96:a4:b6:d2:79:bf:bd:27:f9:34:99:75:5a:d6:77:eb:
         f1:57:b9:8e:ec:d7:d4:fd:b3:69:dd:2a:4b:54:8c:93:0a:b2:
         b5:a5:f6:50:bf:a3:ae:28:7b:28:1f:f4:0a:ea:54:75:6b:5d:
         6f:66:60:3c:07:b4:e7:65:34:84:27:28:fe:bd:53:6d:f5:27:
         89:dd:10:87:60:3c:29:37:42:9f:2e:d8:3a:0e:ec:24:c9:2e:
         7a:30:e9:95:dc:1b:ba:37:94:9a:90:0f:7b:bd:11:65:7f:c0:
         d9:f2:6e:61:a2:99:93:7f:45:ec:6c:37:39:15:09:d3:ea:91:
         b9:07:b1:b5:41:c6:76:41:39:11:4b:41:51:c2:ff:c6:30:c0:
         f0:e8:95:9f:46:68:62:94:e9:13:7e:d9:cc:17:c3:a8:d6:9f:
         43:6f:a9:36:51:6c:5b:99:48:d9:94:de:2f:37:1d:22:e8:09:
         27:4c:51:80:23:80:ae:b0:98:b4:a1:84:70:41:7a:6a:05:bc:
         78:71:83:4a:0a:45:8d:28:75:30:c3:13:b1:4d:ef:f8:ad:0b:
         d2:79:aa:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:06:30 2025 by rpki-client