Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/1a43a402-aadb-3eb9-a552-7dc2b1faff81.roa
File:                     1a43a402-aadb-3eb9-a552-7dc2b1faff81.roa (raw, json)
Hash identifier:          H5bxbRnl7AgApj2fIPhikU3H+3dRvFdJy15kUR+63Hg=
Subject key identifier:   BF:7C:EB:26:2C:4A:2A:FE:92:EE:8E:F2:AB:4B:1B:D1:C4:BC:29:07
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F4328584B92DCEB485DE542EB6D93F900
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/1a43a402-aadb-3eb9-a552-7dc2b1faff81.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     16509
IP address blocks:        69.58.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:eb:48:5d:e5:42:eb:6d:93:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=7fe03e74-fa0f-4eb9-bc68-765ed5aa0aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e1:d9:4f:24:2d:d0:80:d1:dd:61:d2:3d:30:
                    0d:c1:c4:28:cd:96:ac:f1:0a:f2:63:83:e3:96:b4:
                    93:62:89:fd:ba:42:d9:14:5d:82:f6:ab:0f:9d:2d:
                    7b:e5:c3:8b:ab:b8:48:da:ec:90:86:4c:88:c7:9a:
                    6d:84:08:04:70:c6:a7:5f:7d:ac:a3:c5:5f:4b:95:
                    dd:34:26:62:4e:27:83:12:94:24:90:92:e8:76:b3:
                    d5:7d:4e:57:0e:f2:5c:b1:bc:e8:d6:04:c7:60:e4:
                    20:2c:c0:e4:34:50:75:0f:09:63:7c:87:e2:ab:b2:
                    98:da:5e:71:a4:48:8c:ba:6a:1f:b0:49:a5:a0:ee:
                    05:22:e1:76:3e:8c:02:a9:3f:18:13:19:cb:03:31:
                    9e:c7:3c:d7:07:47:67:02:74:13:bd:03:41:67:37:
                    bd:f8:9f:1d:9a:8b:ad:49:41:50:79:ff:dc:17:74:
                    3a:60:86:03:36:46:d7:b4:57:8b:25:99:fc:f7:fc:
                    7e:59:d7:97:ab:4c:29:7a:36:49:a0:0a:0b:f5:9c:
                    ca:dd:f5:a0:ef:1d:a2:6e:70:1c:e4:f7:00:48:ce:
                    51:1c:48:ae:c2:88:31:13:5b:de:ee:30:1e:74:8f:
                    08:07:25:17:60:c3:29:d1:29:53:a9:a1:57:00:53:
                    96:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7C:EB:26:2C:4A:2A:FE:92:EE:8E:F2:AB:4B:1B:D1:C4:BC:29:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/1a43a402-aadb-3eb9-a552-7dc2b1faff81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:c6:59:0b:01:bd:16:c3:42:14:fa:f1:63:55:05:95:66:41:
         45:ab:e8:b5:e6:2c:e6:fe:c5:81:92:e9:5d:04:bc:b4:03:2d:
         eb:c6:1b:40:04:9e:c8:80:bb:44:7f:97:66:cb:81:18:b9:f5:
         07:75:f2:4f:17:4e:6a:80:45:08:79:4e:37:5f:04:a1:e0:2c:
         7e:7b:79:48:bb:18:d7:20:ba:b5:ce:40:ab:50:42:54:9d:30:
         4a:cf:2f:eb:60:0c:e0:a3:8c:ec:49:94:09:52:01:a9:ef:63:
         6a:ee:fe:92:e3:97:0a:8b:b5:9c:f6:37:ee:88:97:e6:73:41:
         9a:09:8f:16:38:15:e3:ae:b1:a1:ea:47:a2:c0:6f:cd:69:68:
         7c:9b:9f:50:98:9e:86:a0:03:b9:00:cc:dc:2d:26:1e:25:c0:
         4a:b5:a1:38:c5:39:1f:62:86:3e:29:1f:89:06:7e:3b:5d:ed:
         2c:ee:2f:ca:ed:49:59:bc:1d:ee:f2:78:4c:c1:05:a0:15:d1:
         9c:2c:46:82:09:be:57:7c:87:62:24:8a:ce:09:8e:40:d7:80:
         84:1e:99:fd:67:12:de:88:06:c1:80:45:ce:7c:e2:c0:7a:af:
         13:5d:00:02:06:8f:fa:57:63:76:60:4d:44:06:70:b3:8c:d1:
         9f:33:9f:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3OtIXeVC622T+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGZmOTUzOWUtYTY4Yy00ZWVkLWFkOTgtMjZmNjdmZjQ0
NmZmMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk
N2ZlMDNlNzQtZmEwZi00ZWI5LWJjNjgtNzY1ZWQ1YWEwYWVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uHZTyQt0IDR3WHSPTANwcQozZas8QryY4Pj
lrSTYon9ukLZFF2C9qsPnS175cOLq7hI2uyQhkyIx5pthAgEcManX32so8VfS5Xd
NCZiTieDEpQkkJLodrPVfU5XDvJcsbzo1gTHYOQgLMDkNFB1DwljfIfiq7KY2l5x
pEiMumofsEmloO4FIuF2PowCqT8YExnLAzGexzzXB0dnAnQTvQNBZze9+J8dmout
SUFQef/cF3Q6YIYDNkbXtFeLJZn89/x+WdeXq0wpejZJoAoL9ZzK3fWg7x2ibnAc
5PcASM5RHEiuwogxE1ve7jAedI8IByUXYMMp0SlTqaFXAFOWhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL986yYsSir+ku6O8qtLG9HEvCkHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZmY5
NTM5ZS1hNjhjLTRlZWQtYWQ5OC0yNmY2N2ZmNDQ2ZmYvMWE0M2E0MDItYWFkYi0z
ZWI5LWE1NTItN2RjMmIxZmFmZjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGZmOTUzOWUtYTY4Yy00ZWVkLWFk
OTgtMjZmNjdmZjQ0NmZmL2RmZjk1MzllLWE2OGMtNGVlZC1hZDk4LTI2ZjY3ZmY0
NDZmZi5jcmwwHwYDVR0jBBgwFoAUHAFNTc9v/pfaLCJJg2pEXCR0ajYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kZmY5NTM5ZS1hNjhjLTRlZWQtYWQ5OC0yNmY2
N2ZmNDQ2ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARToiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHTGWQsBvRbDQhT68WNVBZVmQUWr6LXmLOb+xYGS6V0EvLQDLevGG0AE
nsiAu0R/l2bLgRi59Qd18k8XTmqARQh5TjdfBKHgLH57eUi7GNcgurXOQKtQQlSd
MErPL+tgDOCjjOxJlAlSAanvY2ru/pLjlwqLtZz2N+6Il+ZzQZoJjxY4FeOusaHq
R6LAb81paHybn1CYnoagA7kAzNwtJh4lwEq1oTjFOR9ihj4pH4kGfjtd7SzuL8rt
SVm8He7yeEzBBaAV0ZwsRoIJvld8h2Ikis4JjkDXgIQemf1nEt6IBsGARc584sB6
rxNdAAIGj/pXY3ZgTUQGcLOM0Z8zn+M=
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:04:16 2025 by rpki-client