Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/f789410d-2589-3534-9ba9-d9a9d661914e.roa
File:                     f789410d-2589-3534-9ba9-d9a9d661914e.roa (raw, json)
Hash identifier:          NZCo13mHo0Mtf/ChdBfjbaEqkoS25mY2fgYPc7ZDNmw=
Subject key identifier:   80:A5:7F:6B:2B:19:9E:2D:9E:65:40:E1:DE:79:C5:F3:02:D7:BC:AD
Certificate issuer:       /CN=34a5694e-eed6-4612-aff2-ae9f369f1738
Certificate serial:       010D0C9F4328584F46A7E54280A1F7BD1F4A3040
Authority key identifier: D4:1C:AC:64:CE:AE:9E:BB:F2:06:D7:33:0E:3E:0B:48:4D:BA:1D:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/f789410d-2589-3534-9ba9-d9a9d661914e.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     397861
IP address blocks:        67.158.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/34a5694e-eed6-4612-aff2-ae9f369f1738.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/34a5694e-eed6-4612-aff2-ae9f369f1738.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:e5:42:80:a1:f7:bd:1f:4a:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34a5694e-eed6-4612-aff2-ae9f369f1738
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=6883b642-b06f-4c1c-8584-9845871c0af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fb:4f:f5:a4:c1:f3:83:70:1c:97:7c:a4:6c:
                    64:46:e6:f5:e7:02:16:51:15:8d:41:9f:af:48:e9:
                    c7:8c:72:e0:85:8f:b5:4f:98:6a:d5:5c:e1:89:34:
                    fe:79:8a:9e:f0:23:8e:a8:de:a2:06:a1:96:93:8f:
                    2c:aa:15:3f:b4:45:34:7d:b7:f2:d9:02:61:ee:97:
                    05:66:12:03:c8:0c:0a:0f:80:dc:b5:30:86:2f:fa:
                    39:1a:9b:13:97:7d:39:f9:68:97:a5:8f:36:97:ee:
                    78:d3:e6:25:cc:62:2f:e3:7c:b5:d7:ee:8a:1f:37:
                    14:95:49:9d:15:16:fc:06:11:e0:d5:a7:64:3c:a6:
                    6f:7a:ae:85:b7:91:4e:76:99:42:a2:74:e3:e1:5c:
                    b9:dd:ca:bc:95:88:ef:b4:1a:c1:0c:a3:ea:9c:96:
                    89:49:c5:c1:7c:bf:cd:ce:d4:18:86:6b:3d:da:3e:
                    78:7c:2f:50:94:ed:69:b3:96:5e:ed:45:c8:ca:c3:
                    d2:78:23:a7:95:64:cb:bb:53:ed:69:58:3a:95:0b:
                    36:d7:5e:35:cf:dc:84:1a:83:b8:9c:84:db:9e:84:
                    bf:a5:36:d6:ce:0a:77:7a:12:83:6a:0d:b6:6c:76:
                    ff:78:f4:0a:fc:f2:76:9f:b0:76:af:27:e9:ff:cd:
                    32:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A5:7F:6B:2B:19:9E:2D:9E:65:40:E1:DE:79:C5:F3:02:D7:BC:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/f789410d-2589-3534-9ba9-d9a9d661914e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/34a5694e-eed6-4612-aff2-ae9f369f1738.crl

            X509v3 Authority Key Identifier:
                keyid:D4:1C:AC:64:CE:AE:9E:BB:F2:06:D7:33:0E:3E:0B:48:4D:BA:1D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.158.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:7f:34:11:28:6c:75:4b:e4:3c:c5:5b:b3:13:a4:8d:ab:5e:
         90:ac:96:7b:9c:66:86:d6:2b:b5:7c:d0:84:86:dd:e6:a3:05:
         31:ac:90:22:d4:16:97:e6:4f:25:8a:eb:d9:32:2b:7f:35:56:
         88:0a:63:52:8c:75:67:58:10:19:5b:79:ed:04:14:e2:d6:98:
         32:67:77:11:8a:b6:61:13:4e:74:b9:10:7f:aa:8c:fe:a6:37:
         0c:ca:ea:09:2b:98:05:2a:c4:07:ba:f7:38:de:b1:c0:e1:49:
         84:e7:a7:12:64:6a:ea:c8:47:cc:67:99:cb:f5:c6:c7:0d:1f:
         c2:d4:87:76:21:b5:8e:2c:c3:5b:33:fd:14:71:cc:5e:71:c4:
         e1:f6:51:e1:aa:e5:6f:45:fd:04:27:34:15:9e:6f:30:5f:90:
         de:e9:a6:2a:68:72:c3:35:4b:d1:0e:df:2f:28:02:87:8a:40:
         06:e8:67:33:6c:79:d3:c1:b5:bc:a2:a6:79:4e:3c:bb:6c:d0:
         39:44:a8:8d:6b:32:b0:2b:1d:fb:ab:5a:31:66:e7:13:59:07:
         5b:15:1d:91:dc:d9:f7:31:8a:da:34:95:8d:c8:79:fd:94:ce:
         4f:31:66:a6:f6:1a:2e:a5:31:4c:dd:b4:19:29:0e:e6:cf:56:
         87:1d:91:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp+VCgKH3vR9KMEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzRhNTY5NGUtZWVkNi00NjEyLWFmZjItYWU5ZjM2OWYx
NzM4MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk
Njg4M2I2NDItYjA2Zi00YzFjLTg1ODQtOTg0NTg3MWMwYWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmftP9aTB84NwHJd8pGxkRub15wIWURWNQZ+v
SOnHjHLghY+1T5hq1VzhiTT+eYqe8COOqN6iBqGWk48sqhU/tEU0fbfy2QJh7pcF
ZhIDyAwKD4DctTCGL/o5GpsTl305+WiXpY82l+540+YlzGIv43y11+6KHzcUlUmd
FRb8BhHg1adkPKZveq6Ft5FOdplConTj4Vy53cq8lYjvtBrBDKPqnJaJScXBfL/N
ztQYhms92j54fC9QlO1ps5Ze7UXIysPSeCOnlWTLu1PtaVg6lQs21141z9yEGoO4
nITbnoS/pTbWzgp3ehKDag22bHb/ePQK/PJ2n7B2ryfp/80y9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIClf2srGZ4tnmVA4d55xfMC17ytMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zNGE1
Njk0ZS1lZWQ2LTQ2MTItYWZmMi1hZTlmMzY5ZjE3MzgvZjc4OTQxMGQtMjU4OS0z
NTM0LTliYTktZDlhOWQ2NjE5MTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzRhNTY5NGUtZWVkNi00NjEyLWFm
ZjItYWU5ZjM2OWYxNzM4LzM0YTU2OTRlLWVlZDYtNDYxMi1hZmYyLWFlOWYzNjlm
MTczOC5jcmwwHwYDVR0jBBgwFoAU1BysZM6unrvyBtczDj4LSE26HXIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zNGE1Njk0ZS1lZWQ2LTQ2MTItYWZmMi1hZTlm
MzY5ZjE3MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ547MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHt/NBEobHVL5DzFW7MTpI2rXpCslnucZobWK7V80ISG3eajBTGskCLU
FpfmTyWK69kyK381VogKY1KMdWdYEBlbee0EFOLWmDJndxGKtmETTnS5EH+qjP6m
NwzK6gkrmAUqxAe69zjescDhSYTnpxJkaurIR8xnmcv1xscNH8LUh3YhtY4sw1sz
/RRxzF5xxOH2UeGq5W9F/QQnNBWebzBfkN7ppipocsM1S9EO3y8oAoeKQAboZzNs
edPBtbyipnlOPLts0DlEqI1rMrArHfurWjFm5xNZB1sVHZHc2fcxito0lY3Ief2U
zk8xZqb2Gi6lMUzdtBkpDubPVocdkYM=
-----END CERTIFICATE-----
Generated at Sun Oct 4 22:36:48 2026 by rpki-client