Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/f789410d-2589-3534-9ba9-d9a9d661914e.roa
File:                     f789410d-2589-3534-9ba9-d9a9d661914e.roa (raw, json)
Hash identifier:          lsbQdwXOW40JGjL7qRRPBEr7EX4/cecMWU1Cl55d6A8=
Subject key identifier:   09:FA:EA:58:FE:B9:20:5D:5A:73:A1:D1:8C:37:DE:20:40:14:64:D1
Certificate issuer:       /CN=34a5694e-eed6-4612-aff2-ae9f369f1738
Certificate serial:       010D0C9F4328584EA445146EBE0D7DF317AFC640
Authority key identifier: D4:1C:AC:64:CE:AE:9E:BB:F2:06:D7:33:0E:3E:0B:48:4D:BA:1D:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/f789410d-2589-3534-9ba9-d9a9d661914e.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     397861
IP address blocks:        67.158.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/34a5694e-eed6-4612-aff2-ae9f369f1738.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/34a5694e-eed6-4612-aff2-ae9f369f1738.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:14:6e:be:0d:7d:f3:17:af:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34a5694e-eed6-4612-aff2-ae9f369f1738
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=d34e60f8-31dc-4e37-b0a6-37132b586332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:24:48:25:db:0d:6e:f1:58:62:53:6b:ae:ce:
                    14:28:f5:ac:68:52:1d:51:98:97:c6:93:e4:e3:ab:
                    91:ab:c8:4d:14:d8:d8:10:1f:1d:a2:fb:fa:ef:ab:
                    27:18:3d:f5:86:0a:6a:dd:ce:26:52:49:f4:8e:5d:
                    4c:72:f1:a8:ac:03:8f:11:77:3a:81:75:0d:8a:c5:
                    67:08:0e:41:3b:75:f3:c2:83:2d:56:3f:c5:ef:63:
                    cf:af:cd:a1:89:b5:5e:f2:d0:fe:5e:59:af:f7:1e:
                    5e:29:01:a1:c5:08:e9:8b:a2:0a:1a:ff:54:d3:e8:
                    2d:60:b9:1d:fb:f2:10:f2:1f:4b:8a:57:fd:b9:1f:
                    8f:59:62:b0:20:a6:12:ad:b1:8b:b4:36:06:c5:74:
                    63:13:1a:66:31:75:93:b6:6d:fa:42:a0:ce:7e:d6:
                    d8:d7:e3:69:4e:76:95:bc:6c:77:65:e9:dd:b1:a2:
                    97:47:5d:d4:10:7f:5b:58:21:02:e2:ce:98:a5:fe:
                    1c:e5:ec:2f:d2:0e:af:15:49:b2:ec:b9:9f:13:cc:
                    6e:e2:a5:b4:74:14:f5:77:8f:8e:b7:c1:34:4c:6e:
                    b5:70:32:dd:c8:45:13:01:e2:77:44:a8:49:19:af:
                    62:cd:5e:24:fb:35:64:32:ee:db:42:62:8e:61:89:
                    02:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FA:EA:58:FE:B9:20:5D:5A:73:A1:D1:8C:37:DE:20:40:14:64:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/f789410d-2589-3534-9ba9-d9a9d661914e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/34a5694e-eed6-4612-aff2-ae9f369f1738.crl

            X509v3 Authority Key Identifier:
                keyid:D4:1C:AC:64:CE:AE:9E:BB:F2:06:D7:33:0E:3E:0B:48:4D:BA:1D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.158.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:7d:c4:b6:c8:4f:6b:f9:70:0d:20:45:cf:9f:4e:5f:de:67:
         d3:72:73:72:f7:2a:72:96:02:5a:7b:d3:18:4b:e3:34:5b:e3:
         49:01:14:8c:78:06:77:d9:e3:f8:fa:89:7b:be:59:0c:8d:c5:
         11:3b:01:df:c5:64:1a:f7:4e:09:6c:60:d5:8b:f9:ce:5b:78:
         9d:53:d1:00:f3:bb:42:ef:57:e2:24:37:cc:53:79:8f:03:8f:
         a6:af:ff:c2:c1:8d:14:fa:31:71:5b:51:c2:8f:97:eb:3d:0e:
         ed:c3:13:22:20:53:41:43:93:a6:0e:e0:e1:47:de:9c:2b:b0:
         04:c8:a3:10:9a:b9:a7:b4:2e:31:ce:9a:ab:8e:a7:90:3f:ec:
         01:95:50:a0:97:e0:7c:2e:b1:89:22:7d:05:fc:bf:09:74:48:
         a7:31:9f:54:79:d2:db:f7:92:b7:1e:25:b2:0b:ba:c5:98:0a:
         e7:f0:82:ee:a7:7d:95:83:10:71:26:ec:6f:c1:e3:0e:e9:93:
         60:66:70:72:f9:db:52:ab:60:e0:dc:c6:b8:e6:4f:1f:71:14:
         fb:c2:8b:52:f5:b2:9c:03:86:1c:89:51:d7:9d:40:a6:62:86:
         af:47:f8:da:eb:74:95:46:cd:16:b2:8e:f0:fb:b9:4f:c1:a6:
         a2:0f:e5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:41:02 2026 by rpki-client