Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c56e15a6-0eab-3d6f-8c9c-5401b10d3100.roa
File:                     c56e15a6-0eab-3d6f-8c9c-5401b10d3100.roa (raw, json)
Hash identifier:          zxlf9UZxS5PLCqZTIw+mWEons7CnxDPQRU/gP2WCOx4=
Subject key identifier:   4D:73:9B:D6:47:7E:B4:85:CC:E5:F5:39:3F:96:C6:28:CD:71:E9:4A
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584E90BA48F20B0351924B38C1D0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c56e15a6-0eab-3d6f-8c9c-5401b10d3100.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     30058
IP address blocks:        67.159.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:48:f2:0b:03:51:92:4b:38:c1:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=ad6a3526-7dcb-4352-9cb0-15f0af67ad91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ac:83:85:7c:e8:12:fc:e1:42:11:84:77:6f:
                    37:b4:80:a6:dc:ef:73:8d:1a:df:97:a3:14:c0:2f:
                    e2:51:63:b9:7b:b9:bd:46:0f:84:f1:1a:0d:8f:29:
                    7f:86:da:4a:c9:61:ad:33:c9:04:85:4f:06:fa:b9:
                    1c:c2:e1:a3:34:66:9d:b8:20:25:e4:bf:ff:cf:2a:
                    d1:1a:f4:68:a2:10:e4:67:f0:ab:1d:b8:4d:2a:6d:
                    9d:4b:2b:33:a5:4a:ac:d5:f8:e9:1a:cb:46:7f:7c:
                    6c:68:15:58:ef:63:c4:a6:60:84:37:fd:8d:ff:8f:
                    57:e8:d7:29:37:16:63:d4:64:b1:6c:c7:cc:b5:8a:
                    03:da:11:02:59:7c:60:c5:0e:de:64:3f:ca:70:4d:
                    18:e4:40:5b:c3:0d:f8:9b:a9:7a:83:93:a8:f7:3b:
                    77:1e:00:07:8b:ba:5d:49:07:1c:4f:4b:a0:d8:35:
                    6b:c1:d7:e7:67:9c:ed:66:9c:50:b2:26:14:b1:00:
                    2e:98:26:22:f9:37:46:2a:47:b9:f5:58:56:78:2c:
                    7f:21:f3:c1:bf:bb:84:25:89:08:47:c3:af:27:6f:
                    3f:16:70:af:fa:c3:99:33:2f:de:06:2d:79:60:6b:
                    3d:0a:4e:54:ec:eb:74:8b:ae:31:af:de:f9:4f:c5:
                    29:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:73:9B:D6:47:7E:B4:85:CC:E5:F5:39:3F:96:C6:28:CD:71:E9:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c56e15a6-0eab-3d6f-8c9c-5401b10d3100.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:07:3f:f5:d8:b6:5f:c5:70:0b:e6:0f:f1:f8:83:55:fd:0e:
         ea:9a:57:cf:34:3c:f7:38:1c:5c:ab:7c:da:c3:ba:9d:fa:6e:
         68:f8:0a:bd:b2:20:5f:f0:b4:65:d6:03:5f:57:c7:a5:7c:40:
         a9:c7:cb:a2:bb:4c:12:35:51:50:52:14:96:eb:3a:bd:73:e5:
         19:fb:a9:07:99:1f:b8:d9:25:85:37:8a:a7:f4:92:11:74:f1:
         62:62:91:9a:52:ba:d6:c6:9c:3d:11:51:51:f0:1d:85:5d:46:
         f3:37:7d:d7:1b:7a:25:43:8b:ff:ab:a5:33:a6:5c:45:86:75:
         21:fa:e2:d6:d5:6b:70:ee:ac:64:d7:3d:f2:cd:85:46:d5:31:
         07:04:84:24:ac:5e:c0:6e:70:a3:95:5f:bf:f1:0e:54:62:e4:
         28:79:41:dc:63:99:6c:9a:54:40:6c:fe:ff:16:38:1e:04:f5:
         78:ab:85:a7:34:ab:8d:62:b8:f7:af:79:55:ad:21:2b:32:12:
         84:ee:a3:75:8f:70:28:24:67:f0:9d:ee:b5:dd:76:f4:e6:ce:
         9e:8a:a0:3f:41:75:79:5f:d9:d7:f7:38:4f:d9:43:5f:0f:6a:
         99:4b:ea:51:78:d7:be:ab:22:6b:c4:ba:49:2d:04:e7:00:60:
         a7:ab:84:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:55:43 2026 by rpki-client