Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS30860.roa
File:                     AS30860.roa (raw, json)
Hash identifier:          JX1um3rPBUmDU1qvPxYN9OxecXCnz5QEOauKQV90jn4=
Subject key identifier:   98:C3:75:D7:05:E0:6D:4E:F0:E9:0D:0C:69:ED:AB:D6:EB:56:50:3F
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       34A50862310CCB0527C7C77BFCFC3BDC12CA2DD5
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS30860.roa
Signing time:             Wed 01 Jul 2026 17:08:08 +0000
ROA not before:           Wed 01 Jul 2026 17:03:08 +0000
ROA not after:            Wed 30 Jun 2027 17:08:08 +0000
asID:                     30860
IP address blocks:        66.63.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Jul 2026 10:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a5:08:62:31:0c:cb:05:27:c7:c7:7b:fc:fc:3b:dc:12:ca:2d:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul  1 17:03:08 2026 GMT
            Not After : Jun 30 17:08:08 2027 GMT
        Subject: CN=98C375D705E06D4EF0E90D0C69EDABD6EB56503F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:14:bc:70:88:9c:fc:a9:2e:2f:f6:d5:43:12:
                    bb:c1:5e:e5:28:74:10:27:7c:69:91:cc:1f:69:31:
                    6a:6e:c0:33:d3:8d:e6:66:3f:97:0c:27:7d:04:77:
                    ab:b4:33:ff:51:d2:b9:e9:32:6e:91:3b:e7:86:96:
                    9f:23:94:51:1f:55:ff:91:14:55:5b:6c:b2:07:8b:
                    35:d5:97:6a:93:94:ad:ad:9d:3d:9a:fc:54:2d:db:
                    b5:c6:63:d5:33:5c:8d:bf:fc:5d:a3:ee:64:22:af:
                    ee:7a:54:2d:71:27:69:50:d0:7b:4d:5a:43:f9:ba:
                    c7:64:5d:a9:29:a6:8f:51:c5:69:67:0c:17:e0:29:
                    68:eb:b0:15:67:6d:2c:58:fe:30:1e:c6:47:82:44:
                    e5:2d:8d:af:25:42:5a:c2:0e:c2:b6:66:3d:6e:aa:
                    d9:62:33:08:79:c0:c8:8b:16:75:34:3f:ac:62:a9:
                    f8:f5:45:f2:01:67:97:95:d1:a8:08:e9:9b:e7:0c:
                    9c:e6:72:4d:ef:7a:fd:81:75:1f:33:95:9a:1a:66:
                    88:e5:ab:cc:dd:fa:56:c7:ae:0c:16:bd:56:c8:31:
                    d7:e0:a7:78:ff:4a:77:49:40:62:1e:f4:93:f3:e6:
                    20:14:49:5c:3b:c9:af:7a:9a:eb:f7:89:22:65:61:
                    9a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C3:75:D7:05:E0:6D:4E:F0:E9:0D:0C:69:ED:AB:D6:EB:56:50:3F
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS30860.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.63.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:25:d5:db:83:b4:9d:d5:a5:2a:6e:b7:a7:b8:73:38:66:be:
         0f:79:c4:34:cb:34:0c:f6:21:11:fb:ad:fe:a7:a4:e1:e1:06:
         a8:0a:b8:58:6a:f5:b8:51:89:18:20:49:ae:c5:0f:c5:93:01:
         a9:8d:0c:40:7a:21:82:47:c9:04:55:f8:fc:f0:ec:4f:b5:22:
         7d:c3:66:cc:ef:66:d9:d9:4a:d9:29:ab:2d:20:a5:83:94:a1:
         2d:87:10:ab:f6:b7:0c:2a:ad:43:79:72:73:5d:88:ea:8e:d0:
         90:1a:02:c9:5f:3e:36:e2:54:f4:0c:40:d1:db:82:ff:3e:b4:
         1e:c2:46:81:9e:2c:28:8e:48:bc:d3:c3:8f:0e:75:21:b1:96:
         55:2a:9f:81:6f:8c:3c:2a:8c:5d:5e:7c:77:76:83:31:fe:e3:
         95:4e:55:37:0d:cb:20:07:5a:07:6c:65:62:fe:99:d2:96:7b:
         49:e3:27:26:ef:e6:c8:57:88:91:d8:73:2b:1a:c2:ac:5b:56:
         29:f0:7d:90:7a:fa:e8:81:76:a3:97:ef:d5:a7:36:5e:84:6c:
         0f:ac:fb:6b:95:18:c0:da:e5:fa:4c:65:12:4a:2a:f5:f3:c9:
         c4:94:44:ce:54:d6:4b:0e:75:0c:3f:f4:2e:dc:5c:f5:d4:d0:
         89:bb:b1:0d
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUNKUIYjEMywUnx8d7/Pw73BLKLdUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwNzAxMTcwMzA4WhcNMjcwNjMwMTcwODA4
WjAzMTEwLwYDVQQDEyg5OEMzNzVENzA1RTA2RDRFRjBFOTBEMEM2OUVEQUJENkVC
NTY1MDNGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhS8cIic/Kku
L/bVQxK7wV7lKHQQJ3xpkcwfaTFqbsAz043mZj+XDCd9BHertDP/UdK56TJukTvn
hpafI5RRH1X/kRRVW2yyB4s11Zdqk5StrZ09mvxULdu1xmPVM1yNv/xdo+5kIq/u
elQtcSdpUNB7TVpD+brHZF2pKaaPUcVpZwwX4Clo67AVZ20sWP4wHsZHgkTlLY2v
JUJawg7CtmY9bqrZYjMIecDIixZ1ND+sYqn49UXyAWeXldGoCOmb5wyc5nJN73r9
gXUfM5WaGmaI5avM3fpWx64MFr1WyDHX4Kd4/0p3SUBiHvST8+YgFElcO8mveprr
94kiZWGaLwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFJjDddcF4G1O8OkNDGntq9br
VlA/MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzMwODYwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQj+0MA0GCSqGSIb3DQEBCwUAA4IB
AQA2JdXbg7Sd1aUqbrenuHM4Zr4PecQ0yzQM9iER+63+p6Th4QaoCrhYavW4UYkY
IEmuxQ/FkwGpjQxAeiGCR8kEVfj88OxPtSJ9w2bM72bZ2UrZKastIKWDlKEthxCr
9rcMKq1DeXJzXYjqjtCQGgLJXz424lT0DEDR24L/PrQewkaBniwojki808OPDnUh
sZZVKp+Bb4w8KoxdXnx3doMx/uOVTlU3DcsgB1oHbGVi/pnSlntJ4ycm7+bIV4iR
2HMrGsKsW1Yp8H2QevrogXajl+/VpzZehGwPrPtrlRjA2uX6TGUSSir188nElETO
VNZLDnUMP/Qu3Fz11NCJu7EN
-----END CERTIFICATE-----
Generated at Sat Jul 11 12:25:35 2026 by rpki-client