Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/94c2624e-44d2-3cbc-b242-94286db631a8.roa
File:                     94c2624e-44d2-3cbc-b242-94286db631a8.roa (raw, json)
Hash identifier:          BdoEc+EXjXG0bKGlLk19NTqDGHzFwe1/v+T4fDPmtxo=
Subject key identifier:   B3:A5:A1:08:E7:B1:71:A3:D9:22:8F:E0:71:B3:C4:23:D8:21:8A:A0
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F4328584EB6E1A8D013AEFAB45F966780
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/94c2624e-44d2-3cbc-b242-94286db631a8.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     397422
IP address blocks:        67.59.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:a8:d0:13:ae:fa:b4:5f:96:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=1b71f895-6ea8-4e94-b78a-1d2d44374d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d4:d4:f8:35:fa:34:0a:1a:7e:a2:ab:9e:1b:
                    44:d6:f1:be:ce:6e:16:75:c8:28:8f:ae:e1:7a:b7:
                    fd:1a:32:6e:90:79:7a:4b:05:d9:d6:65:28:8f:d9:
                    fa:b1:43:ca:43:37:83:e0:b2:d8:c4:ac:f2:2f:6c:
                    42:0d:94:c4:34:45:00:f4:f7:4e:3d:6c:8d:fd:ed:
                    a2:83:15:b0:14:98:95:7d:c7:25:ce:f2:ed:45:68:
                    5e:6a:8f:90:24:2f:93:95:8a:07:2d:7e:33:39:e4:
                    f0:1a:d6:b0:c7:60:b8:80:94:df:7f:71:eb:67:cf:
                    fe:99:4e:48:43:97:e9:74:de:22:ac:db:cb:4f:de:
                    d1:23:20:ca:8e:df:36:86:b2:f5:0b:1d:81:87:fa:
                    61:87:1e:2e:a9:e4:b3:05:73:10:91:bf:02:59:2d:
                    74:40:9f:de:1a:9c:76:82:6a:d9:11:73:18:72:d4:
                    cf:21:55:2b:5d:eb:4a:52:e6:16:c1:5a:21:5f:6c:
                    ae:60:94:5b:0c:9f:2e:01:a2:98:f2:9a:8e:e2:a0:
                    ea:da:fd:43:b6:ff:d5:cd:7e:c4:93:5c:00:2f:9c:
                    e0:76:59:ab:10:73:a3:f3:bc:f2:af:89:56:74:b6:
                    cf:9e:31:6f:d5:4f:41:87:b2:4f:04:42:df:52:35:
                    bc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A5:A1:08:E7:B1:71:A3:D9:22:8F:E0:71:B3:C4:23:D8:21:8A:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/94c2624e-44d2-3cbc-b242-94286db631a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.59.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:9b:f5:2b:05:b3:b5:65:a8:06:c1:1e:f7:5d:f1:d8:51:b9:
         f2:22:8e:ca:9a:b5:6d:03:5f:a5:87:e3:74:94:3c:0b:b7:2d:
         e0:24:02:23:5b:ef:66:b7:6a:54:bd:e7:91:12:c4:4c:9f:5d:
         6e:f0:74:e5:29:c7:e0:78:ea:cb:fe:81:23:79:f0:25:64:a5:
         9d:8a:38:a5:75:5a:92:01:b9:f0:89:8c:bb:2f:e9:da:a4:09:
         46:06:43:d9:7f:bb:00:01:de:e4:9e:2f:54:06:62:0f:90:b1:
         f1:56:c7:3e:d0:2b:44:92:0d:08:12:9a:c6:c8:ab:0a:f4:56:
         14:28:eb:13:c7:f1:13:31:c1:25:8e:03:0c:1d:8a:af:32:5a:
         56:f4:3c:f7:02:22:e8:9b:a3:86:36:8f:f4:e4:7d:a3:a1:0a:
         e1:38:82:6d:2f:7c:28:41:8e:a4:db:38:c5:d1:2d:5a:f7:e3:
         38:b0:8a:1c:7b:08:06:8d:52:0a:ac:a8:da:c1:d1:01:ba:ed:
         4a:f0:7a:e0:f1:28:a1:1c:69:54:f3:43:16:fb:40:b0:27:44:
         48:19:1b:9c:d8:b9:a7:39:9d:73:a0:03:39:fa:f6:b2:bc:b2:
         b2:7e:97:05:8d:51:28:6f:da:4f:d6:6d:56:c6:bc:24:58:92:
         a3:ed:8c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:54:23 2026 by rpki-client