Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/56f12cf1-010e-3553-b8ee-f22066f6f57e.roa
File:                     56f12cf1-010e-3553-b8ee-f22066f6f57e.roa (raw, json)
Hash identifier:          QLGrChjXSOpp40bw9SY8jcNxHqi/c2SaVoeLMykkKNc=
Subject key identifier:   99:6E:09:74:2B:1B:3A:FE:45:38:26:41:18:8A:F8:E8:08:FC:48:E4
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584ED43258CE0E2E8D1A4991FB00
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/56f12cf1-010e-3553-b8ee-f22066f6f57e.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     30058
IP address blocks:        67.159.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:32:58:ce:0e:2e:8d:1a:49:91:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=bcc24404-d1b3-4407-a042-1b7a6d365319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d8:e7:2c:38:e1:1f:85:06:2c:9c:e6:52:25:
                    0e:f6:51:0c:15:95:56:40:33:03:7d:f5:38:81:89:
                    0d:9e:bd:55:7a:12:dd:f6:6d:09:29:7a:90:94:bf:
                    b5:63:82:80:ef:ad:bf:10:ee:15:15:35:44:98:d6:
                    9c:10:fd:76:d7:37:6f:79:7e:64:9b:f9:5d:7e:ae:
                    37:cf:6f:6c:84:ce:71:48:3c:05:95:90:94:e9:3a:
                    60:f2:55:8d:83:7c:b6:9d:b7:e5:04:98:a2:fb:90:
                    02:98:68:63:7f:9d:b0:54:60:a5:7a:9d:21:d4:d1:
                    75:62:73:9d:ff:c3:cf:37:d6:94:90:24:cb:10:69:
                    b9:50:7a:95:5d:58:19:66:7e:40:d9:f2:34:80:9e:
                    de:b4:3a:09:db:49:20:80:d1:8b:e1:e9:99:74:74:
                    2b:fa:f0:db:f3:98:0e:67:70:ee:91:c3:93:6a:b5:
                    06:1d:04:23:7b:c4:27:69:87:df:f8:da:8d:a8:49:
                    44:c2:e5:21:79:75:24:6d:55:0e:c7:54:3e:41:b0:
                    55:cb:47:50:40:77:6a:09:33:2c:35:bc:70:88:dd:
                    70:f9:cd:43:ab:3f:04:08:f7:f9:aa:f4:10:ec:6c:
                    76:f6:f1:5d:1c:7c:5a:81:67:59:2a:ae:08:26:8b:
                    3b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6E:09:74:2B:1B:3A:FE:45:38:26:41:18:8A:F8:E8:08:FC:48:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/56f12cf1-010e-3553-b8ee-f22066f6f57e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:49:ab:4e:7d:69:f4:43:f5:6d:f8:85:69:b2:6c:70:39:25:
         68:6c:fc:12:aa:11:f7:a1:08:98:ee:82:de:c9:e8:b4:a3:de:
         74:67:67:24:46:2f:7f:bc:01:29:41:ec:e4:79:d3:60:9b:f6:
         f2:83:b8:16:cb:c4:06:03:bb:d3:2c:a6:e0:9c:c5:62:0f:1f:
         1a:3d:dd:ee:2c:af:12:e1:ce:d8:0e:b9:bf:c4:37:1b:5d:fa:
         a0:ea:88:e5:6d:d7:7d:e5:d4:f8:39:c8:01:4f:47:a7:89:83:
         3c:3c:b3:03:80:2d:09:20:51:e2:e4:81:01:3b:f3:24:60:87:
         37:38:b2:1e:8d:9e:f3:8e:20:b5:41:ee:18:2a:5a:69:4d:f0:
         29:4b:23:ac:d6:dc:7b:03:a1:39:db:86:9b:83:3e:c8:00:a5:
         f3:69:4b:48:9a:64:5d:6e:f4:6d:1b:c1:28:f9:b4:c0:02:f4:
         df:1e:41:80:83:ab:ef:01:e2:9e:23:02:ef:45:90:55:d8:8e:
         4d:53:bd:12:be:3c:59:05:ed:12:ff:94:cd:7e:65:44:24:4e:
         6d:d4:e8:b3:cb:14:d5:78:b7:4e:5d:81:bd:95:12:d6:70:8e:
         81:0d:69:b7:9b:a8:5f:9e:d9:a6:04:df:1b:9e:83:3b:51:2c:
         ff:95:72:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:03:45 2026 by rpki-client