Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/2f36e6e7-6da4-3702-b527-81fda7f69f64.roa
File:                     2f36e6e7-6da4-3702-b527-81fda7f69f64.roa (raw, json)
Hash identifier:          Zzkg0oa6NwmUWY4tguy2hKVjUXDRtsKBwgHP+k0Ccig=
Subject key identifier:   C1:BA:DC:A1:54:79:08:DE:39:68:D4:FE:61:7F:F2:BB:39:FE:2C:22
Certificate issuer:       /CN=ae67d891-3b16-4302-bf8b-4adb69436dbe
Certificate serial:       010D0C9F4328584C8A0C2C5EFB4A821B015D3200
Authority key identifier: A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/2f36e6e7-6da4-3702-b527-81fda7f69f64.roa
Signing time:             Fri 16 Jan 2026 02:00:31 +0000
ROA not before:           Fri 16 Jan 2026 02:00:31 +0000
ROA not after:            Thu 16 Apr 2026 01:00:31 +0000
asID:                     6939
IP address blocks:        67.59.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:8a:0c:2c:5e:fb:4a:82:1b:01:5d:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae67d891-3b16-4302-bf8b-4adb69436dbe
        Validity
            Not Before: Jan 16 02:00:31 2026 GMT
            Not After : Apr 16 01:00:31 2026 GMT
        Subject: CN=49094a5c-9ef7-4938-8c8f-d128ea3acc14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:68:7a:ba:42:ba:e3:e9:d0:41:a0:d6:a2:21:
                    e9:f7:28:cd:d5:3c:93:8b:8f:a9:bd:d7:52:ca:a3:
                    20:d8:e6:e3:8a:e1:32:88:f1:2d:c4:1b:72:e0:e9:
                    69:79:2d:fc:7e:09:ae:a5:21:7d:c5:43:4b:fa:46:
                    d0:85:3e:89:a8:0d:75:92:5b:98:86:77:da:62:7c:
                    3e:95:11:a6:0b:2e:3b:7c:04:69:cc:87:19:a6:75:
                    b9:18:8e:e9:10:42:24:02:80:40:f8:22:83:6c:59:
                    e9:39:47:bf:87:bb:9a:f4:1e:45:0c:07:97:78:66:
                    64:35:15:38:98:08:21:30:2e:74:94:f2:4e:10:c6:
                    ed:6b:04:47:af:a2:4d:a7:28:bd:a3:50:8f:c5:49:
                    ba:e3:e7:09:78:c0:a4:70:ea:9a:c3:bb:00:04:f9:
                    d8:1a:42:f1:b9:45:59:32:7c:8b:9e:fe:59:0b:6c:
                    13:da:fe:19:d2:8c:44:21:e0:ac:a6:4c:6e:a5:fc:
                    99:3f:e0:28:58:91:b0:e9:e7:0d:8c:e8:56:e8:b3:
                    64:f5:01:0a:2b:ec:05:cd:47:13:03:ed:98:ca:18:
                    fd:98:0b:c4:2d:7f:1f:c7:1a:a0:0b:ab:af:de:26:
                    f8:5d:5f:34:ee:6f:ea:37:a2:6e:3f:7b:2e:02:98:
                    5c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BA:DC:A1:54:79:08:DE:39:68:D4:FE:61:7F:F2:BB:39:FE:2C:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/2f36e6e7-6da4-3702-b527-81fda7f69f64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl

            X509v3 Authority Key Identifier:
                keyid:A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.59.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:fd:29:2f:61:e3:3b:c4:64:fe:56:7d:5f:92:81:a5:6d:eb:
         63:a1:7e:a2:e7:e9:5d:a1:99:0f:69:48:fc:22:6c:1d:34:0e:
         f9:03:66:bb:99:1b:22:60:7b:42:42:1c:99:ab:77:07:51:35:
         15:74:f2:de:17:b3:fe:30:65:d4:fb:aa:3c:e0:74:62:b1:7b:
         90:11:20:de:3c:e2:6e:d2:30:18:94:af:dc:18:bd:59:ac:6f:
         7c:bd:b6:f6:34:7e:60:ac:cf:79:13:3c:e8:02:c7:b2:38:21:
         57:07:85:33:cf:3b:92:69:bc:09:c8:a3:77:0e:69:2e:22:fa:
         d8:cf:4f:a2:90:17:4e:db:77:21:07:c3:90:04:ad:c7:6c:8f:
         06:f3:37:58:8d:6e:8e:76:3b:f6:13:8e:83:70:14:7f:bd:2f:
         38:80:32:be:65:c2:6f:0c:3c:bd:1f:d4:b3:1a:54:ab:cb:7f:
         9a:5b:c3:d8:e7:85:cc:9c:61:a1:da:6f:2a:95:2d:fe:56:b6:
         44:45:b6:6a:bb:55:e8:95:be:fa:5d:c2:73:9a:31:01:9e:73:
         1e:94:34:97:0d:08:6a:eb:9f:7d:d1:ee:db:c8:5b:c6:36:1c:
         bb:7b:b2:3b:7e:7c:66:56:ea:0f:4b:2b:e1:bb:ff:6b:72:ec:
         82:d2:ec:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:14 2026 by rpki-client