Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/f789410d-2589-3534-9ba9-d9a9d661914e.roa
File:                     f789410d-2589-3534-9ba9-d9a9d661914e.roa (raw, json)
Hash identifier:          9ktOU5h5/Pm4GtnDOIccV3Zp+DVU3Vdqb88Q/N/qFVU=
Subject key identifier:   10:47:62:A4:7C:02:70:26:22:4F:E7:85:E6:AA:2D:B6:DF:4D:53:8D
Certificate issuer:       /CN=34a5694e-eed6-4612-aff2-ae9f369f1738
Certificate serial:       010D0C9F4328584B2331823C1F31574A9016A700
Authority key identifier: D4:1C:AC:64:CE:AE:9E:BB:F2:06:D7:33:0E:3E:0B:48:4D:BA:1D:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/f789410d-2589-3534-9ba9-d9a9d661914e.roa
Signing time:             Tue 09 Sep 2025 13:00:41 +0000
ROA not before:           Tue 09 Sep 2025 13:00:41 +0000
ROA not after:            Mon 08 Dec 2025 14:00:41 +0000
asID:                     397861
IP address blocks:        67.158.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/34a5694e-eed6-4612-aff2-ae9f369f1738.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/34a5694e-eed6-4612-aff2-ae9f369f1738.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:31:82:3c:1f:31:57:4a:90:16:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34a5694e-eed6-4612-aff2-ae9f369f1738
        Validity
            Not Before: Sep  9 13:00:41 2025 GMT
            Not After : Dec  8 14:00:41 2025 GMT
        Subject: CN=654b200f-4bd4-43a1-9cd1-6caf4aaac76f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:77:25:88:7f:52:04:54:fd:0d:4c:27:cd:aa:
                    8d:ff:1d:ad:a6:f6:99:e5:e9:b7:0b:ce:13:95:25:
                    aa:23:33:15:f8:86:80:10:a1:33:d5:cb:dd:9d:92:
                    77:2a:dd:44:23:02:60:d4:8a:07:ec:35:75:56:ae:
                    c1:0d:44:10:0a:01:12:fd:0f:db:7c:2a:55:37:e5:
                    b9:4c:5a:be:68:3f:62:a1:53:f0:7d:bd:76:ea:8a:
                    08:47:a6:df:fa:21:79:54:18:6e:43:5d:b8:4d:c7:
                    e7:33:f2:19:0c:db:63:6b:66:0a:7e:59:98:be:49:
                    32:a4:c5:a7:3a:76:98:c1:2e:0d:fc:5f:f7:7d:04:
                    9d:0f:ed:a8:42:97:56:ea:c4:cd:34:ee:46:e9:1a:
                    93:bd:40:01:74:53:4c:f4:d0:50:63:13:ab:6d:a2:
                    53:a1:52:d1:2e:86:19:12:9e:f6:a1:50:3b:18:8e:
                    39:80:01:0a:65:10:e4:26:d3:6a:13:a2:2c:32:21:
                    57:3f:0e:69:70:04:7d:ad:9a:06:a7:5d:63:68:00:
                    b0:52:18:d1:55:46:d7:8b:41:8c:1d:c3:6a:66:c9:
                    0a:d9:e4:e2:e6:9b:6b:e4:2b:39:18:76:07:a9:ec:
                    45:2d:76:12:00:35:35:62:7e:34:6a:8b:a8:38:65:
                    90:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:47:62:A4:7C:02:70:26:22:4F:E7:85:E6:AA:2D:B6:DF:4D:53:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/f789410d-2589-3534-9ba9-d9a9d661914e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/34a5694e-eed6-4612-aff2-ae9f369f1738.crl

            X509v3 Authority Key Identifier:
                keyid:D4:1C:AC:64:CE:AE:9E:BB:F2:06:D7:33:0E:3E:0B:48:4D:BA:1D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.158.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:9a:dd:dc:cd:21:bd:30:f9:ce:c6:79:b4:08:14:06:8e:15:
         97:a7:1e:ea:8f:c6:2a:ed:5b:bf:df:8e:ab:88:8d:0c:64:a8:
         05:b2:fc:de:83:a8:21:fe:86:d9:f3:a4:43:d4:36:c9:68:2f:
         a5:67:72:55:64:8d:9a:2d:63:df:f7:d6:b8:5e:5e:5a:55:f4:
         51:7c:56:38:b0:fa:db:00:be:07:4b:f5:39:5f:8a:19:76:03:
         d3:e3:09:55:02:3c:bd:a2:ca:4b:1b:f5:bf:b2:ba:b2:c5:e3:
         30:21:6f:df:f4:45:f0:b5:2f:e0:59:ba:f8:88:43:02:a4:50:
         3e:2f:1d:ce:01:d5:ab:48:4d:46:a6:96:4c:a3:67:bc:81:f4:
         4e:af:30:57:aa:f6:30:37:e8:99:61:47:5e:db:ea:63:57:f6:
         fd:d9:84:e4:d2:c4:24:07:12:a8:53:8a:e2:0f:13:5e:7e:13:
         26:d1:ef:1a:92:8c:df:6d:ed:9f:6b:e9:61:3d:73:f3:f6:35:
         72:98:2c:d8:45:1e:b7:c3:75:34:b5:87:05:7a:27:49:3b:26:
         72:52:ec:54:18:b0:3b:95:a4:09:a8:13:71:3b:0e:97:92:a4:
         a4:f7:97:f8:65:4d:e9:c1:e1:cd:a7:28:8e:f0:59:fc:43:9a:
         a8:fa:65:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:41:42 2025 by rpki-client