Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/74485cf8-ea3e-3a05-ba29-7b96d5640f8e.roa
File:                     74485cf8-ea3e-3a05-ba29-7b96d5640f8e.roa (raw, json)
Hash identifier:          PDjgFDEb2YoSF9JrvuXxoGD5G8Pn53CpoRV7VaUiKJs=
Subject key identifier:   99:1B:DC:E8:4B:17:1D:4B:1C:90:63:D6:51:BC:E4:33:05:9E:3F:F6
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F4328584F49891754848788A351FF32CC
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/74485cf8-ea3e-3a05-ba29-7b96d5640f8e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401307
IP address blocks:        69.58.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:17:54:84:87:88:a3:51:ff:32:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cfef5d67-b37b-4779-aa0d-b3777b40ca5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9d:cd:c6:45:10:3b:8c:95:7b:ac:f6:3f:17:
                    7b:18:7c:64:7c:22:ac:44:7a:7f:32:7a:30:cb:12:
                    21:be:61:15:01:3e:da:1a:1f:9f:fe:58:14:b6:e4:
                    f5:e1:65:5f:9f:55:c1:08:b3:11:5c:a0:a0:8d:12:
                    87:71:e0:ef:de:b0:4f:87:e7:f9:89:19:07:37:61:
                    92:87:21:41:eb:41:72:ca:65:62:ac:a7:29:69:99:
                    46:b0:d1:9a:2c:2f:47:b8:be:c5:97:a8:ae:bb:e3:
                    fb:aa:f7:94:cc:c7:ae:72:4f:c1:9e:ed:73:44:db:
                    bf:6a:8c:ab:2d:a3:af:da:0e:81:55:19:68:64:68:
                    a4:48:b0:73:16:7d:d9:3a:3d:1e:11:1b:e4:06:55:
                    5d:b8:f9:6a:cf:7d:56:8a:17:96:10:82:70:90:f7:
                    0d:fc:6d:6b:43:e9:1a:bf:3a:43:b4:a4:a6:e1:f5:
                    f1:0d:5b:dd:fa:a8:41:44:36:dd:d7:57:dd:ae:2a:
                    7b:f4:e8:10:80:c5:ca:24:64:49:f7:4e:c4:31:07:
                    76:7c:49:5a:f3:98:cf:41:8f:3b:df:c9:74:5d:64:
                    62:91:ba:ad:67:e9:dc:bf:c5:56:45:8d:84:62:23:
                    c0:01:4b:2f:e6:f5:7e:1a:11:da:bc:50:78:d2:b1:
                    c9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1B:DC:E8:4B:17:1D:4B:1C:90:63:D6:51:BC:E4:33:05:9E:3F:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/74485cf8-ea3e-3a05-ba29-7b96d5640f8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:f0:3b:a4:4d:bc:87:de:60:17:03:91:1d:3a:bd:34:0f:26:
         92:e7:26:a5:ae:d0:e8:fb:20:be:c8:5b:57:c1:14:e7:c5:b4:
         d7:df:6a:56:9a:81:20:1f:36:6f:c7:1d:b4:55:6d:4e:e8:2f:
         0f:2d:10:ee:77:a9:4b:e7:01:71:e7:51:8b:e0:9c:b9:e9:93:
         c7:08:49:f3:3a:15:85:03:7d:ce:97:b2:bf:49:c3:ec:e8:d1:
         e5:1a:c6:20:bf:52:ee:ae:ef:b2:27:ca:b5:1e:ca:7e:1f:65:
         15:b4:39:6a:a1:9b:4b:14:37:d0:07:c6:dd:eb:7b:a2:f2:a0:
         90:ad:3f:cb:c6:bc:43:af:00:be:73:ce:a2:9e:15:30:45:4c:
         d1:7d:01:9b:a8:8b:20:30:c9:f0:a2:97:c8:71:51:9a:f6:f3:
         d8:91:53:3d:63:24:fb:48:db:79:83:57:02:dc:d0:95:4c:ad:
         bc:da:54:35:64:c3:de:33:d4:c1:09:4b:f3:20:25:b9:8b:63:
         6c:d3:91:a3:05:da:05:fe:95:14:29:61:19:24:b9:19:82:45:
         9c:a8:43:00:85:4b:8e:34:90:12:ab:71:6a:63:ff:d9:96:05:
         ca:80:62:3d:2d:36:28:c5:80:13:2b:5d:a1:d5:e1:c7:d7:58:
         e2:39:25:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiRdUhIeIo1H/MswwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGZmOTUzOWUtYTY4Yy00ZWVkLWFkOTgtMjZmNjdmZjQ0
NmZmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Y2ZlZjVkNjctYjM3Yi00Nzc5LWFhMGQtYjM3NzdiNDBjYTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo53NxkUQO4yVe6z2Pxd7GHxkfCKsRHp/Mnow
yxIhvmEVAT7aGh+f/lgUtuT14WVfn1XBCLMRXKCgjRKHceDv3rBPh+f5iRkHN2GS
hyFB60FyymVirKcpaZlGsNGaLC9HuL7Fl6iuu+P7qveUzMeuck/Bnu1zRNu/aoyr
LaOv2g6BVRloZGikSLBzFn3ZOj0eERvkBlVduPlqz31WiheWEIJwkPcN/G1rQ+ka
vzpDtKSm4fXxDVvd+qhBRDbd11fdrip79OgQgMXKJGRJ907EMQd2fEla85jPQY87
38l0XWRikbqtZ+ncv8VWRY2EYiPAAUsv5vV+GhHavFB40rHJmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJkb3OhLFx1LHJBj1lG85DMFnj/2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZmY5
NTM5ZS1hNjhjLTRlZWQtYWQ5OC0yNmY2N2ZmNDQ2ZmYvNzQ0ODVjZjgtZWEzZS0z
YTA1LWJhMjktN2I5NmQ1NjQwZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGZmOTUzOWUtYTY4Yy00ZWVkLWFk
OTgtMjZmNjdmZjQ0NmZmL2RmZjk1MzllLWE2OGMtNGVlZC1hZDk4LTI2ZjY3ZmY0
NDZmZi5jcmwwHwYDVR0jBBgwFoAUHAFNTc9v/pfaLCJJg2pEXCR0ajYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kZmY5NTM5ZS1hNjhjLTRlZWQtYWQ5OC0yNmY2
N2ZmNDQ2ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTo/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGPwO6RNvIfeYBcDkR06vTQPJpLnJqWu0Oj7IL7IW1fBFOfFtNffalaa
gSAfNm/HHbRVbU7oLw8tEO53qUvnAXHnUYvgnLnpk8cISfM6FYUDfc6Xsr9Jw+zo
0eUaxiC/Uu6u77InyrUeyn4fZRW0OWqhm0sUN9AHxt3re6LyoJCtP8vGvEOvAL5z
zqKeFTBFTNF9AZuoiyAwyfCil8hxUZr289iRUz1jJPtI23mDVwLc0JVMrbzaVDVk
w94z1MEJS/MgJbmLY2zTkaMF2gX+lRQpYRkkuRmCRZyoQwCFS440kBKrcWpj/9mW
BcqAYj0tNijFgBMrXaHV4cfXWOI5JTs=
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:01:22 2026 by rpki-client