Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/75f7936c-3860-325f-a473-8bed9b592d6a.roa
File:                     75f7936c-3860-325f-a473-8bed9b592d6a.roa (raw, json)
Hash identifier:          xIrIhKaXE+lqNO+3xktiqNtUpEdzj426jGV8RgrJT5M=
Subject key identifier:   34:3C:F8:41:81:DD:6A:3C:30:2B:F8:D7:26:2C:34:E2:C2:7A:F8:45
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584E97B507C8092CB8A6CA269F80
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/75f7936c-3860-325f-a473-8bed9b592d6a.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     30058
IP address blocks:        67.159.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b5:07:c8:09:2c:b8:a6:ca:26:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=dc23dc23-4d06-4976-83ce-75a15e65638c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d5:57:03:87:67:be:30:c5:4c:1d:c5:b2:fb:
                    39:00:dd:82:9f:88:ba:23:f2:76:10:5f:73:12:7b:
                    e2:0f:c9:94:70:9d:d3:62:ca:6a:e0:d8:6d:38:c4:
                    35:f8:dd:57:7a:82:9b:45:3d:3a:da:56:01:97:c6:
                    22:f7:8c:1e:b9:7f:22:04:44:71:d4:05:c0:54:5b:
                    47:8d:b9:c0:7e:6d:e0:ef:f5:d5:cc:3d:5f:b0:c2:
                    0e:cf:23:db:1d:af:c5:c5:3b:06:0f:5b:1c:d5:32:
                    7f:93:31:a9:49:76:65:99:1e:7d:cb:37:53:a0:bf:
                    e0:60:63:57:e8:d6:37:36:a5:45:81:ab:ec:e8:36:
                    01:21:9c:a4:41:d2:b2:61:cc:90:42:eb:93:dc:a7:
                    57:4a:58:88:34:bc:ab:60:38:5d:65:e3:7b:3a:97:
                    91:93:92:bd:a0:48:97:e1:8f:74:1c:6f:ee:0e:bd:
                    17:03:30:d7:05:5c:ac:60:b3:e7:83:af:e0:fc:0e:
                    68:98:35:8d:e6:fb:d0:16:7e:9b:57:22:28:fa:0f:
                    aa:96:b4:92:5b:1c:3d:b2:c1:a6:62:1c:4c:c3:d2:
                    87:4a:21:19:61:0d:80:72:92:4c:29:ad:73:02:45:
                    07:87:12:0b:4b:c9:4e:ff:02:c9:03:e0:0b:6c:38:
                    86:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3C:F8:41:81:DD:6A:3C:30:2B:F8:D7:26:2C:34:E2:C2:7A:F8:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/75f7936c-3860-325f-a473-8bed9b592d6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:23:fa:57:9a:0c:d8:a1:df:2e:6a:4c:85:57:c1:c3:32:e0:
         62:68:b5:77:4c:3f:dd:62:1a:5c:af:e5:06:3f:87:4f:c2:1a:
         9a:25:54:6a:f7:39:42:d3:b7:56:87:d4:a9:dc:7e:ca:65:de:
         25:3e:f1:8b:12:a8:47:e4:31:c6:9e:a3:a1:4b:1d:57:f2:c0:
         ea:86:0a:9d:f9:ed:d3:b4:3e:50:39:1d:a3:47:15:24:99:ee:
         40:76:02:82:dd:89:26:fb:11:44:54:5c:64:e3:49:24:ff:d5:
         0a:bc:68:a5:cf:d3:78:05:5b:20:97:e2:64:40:99:0d:03:7f:
         28:00:30:59:2d:9a:12:e2:c4:e3:fd:f0:c3:48:89:79:b3:ff:
         8a:dd:ec:a9:7b:2d:05:af:07:81:c5:43:6f:35:1f:21:6d:fa:
         2e:44:23:a6:7d:c4:1f:bc:6a:6f:fe:ac:bb:d9:01:c0:42:be:
         d4:7a:6f:05:f5:d0:50:46:1c:2e:f5:e9:6a:1c:57:d2:c9:c2:
         55:98:4a:c9:d6:c2:c3:39:02:0d:05:d7:53:de:6b:c4:43:89:
         da:dc:1d:8c:5b:4c:2e:a0:cc:59:25:ca:3b:c7:07:7f:7c:a3:
         ca:87:ce:37:cb:ed:94:b2:8e:bb:ce:f8:be:d3:cf:4a:16:73:
         6a:22:34:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:08:46 2026 by rpki-client