Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/860f6f79-fac8-315e-beb5-5809ef42de80.roa
File:                     860f6f79-fac8-315e-beb5-5809ef42de80.roa (raw, json)
Hash identifier:          xh25pnqN8LmAwB1BU8QGr/27Uk6FhjFFwLqsvmKlRWY=
Subject key identifier:   03:A8:7A:7F:E0:63:08:70:3B:24:7A:56:DA:3E:DB:41:B7:5B:55:7C
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584EA79B2256334623487A3C5C80
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/860f6f79-fac8-315e-beb5-5809ef42de80.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30058
IP address blocks:        66.90.106.0/24 maxlen: 24
                          67.159.11.0/24 maxlen: 24
                          2001:49f0:d0e8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:22:56:33:46:23:48:7a:3c:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=11fe2add-61a5-4285-9e22-31c14f019ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ca:9b:a2:d6:6f:37:87:8e:60:18:24:fd:68:
                    6e:b7:c8:d5:e2:60:ae:2b:7f:8b:a4:50:b3:13:8a:
                    52:e2:2f:b2:f8:0e:d0:74:be:9c:0a:3b:b4:a5:39:
                    f9:66:f7:94:75:ce:48:ca:e5:c5:50:d8:81:c0:2c:
                    4f:a7:c3:2f:af:41:e6:e5:44:ed:e1:01:e2:b0:98:
                    2a:de:7f:28:e4:34:7a:6c:38:9e:f6:22:93:34:f3:
                    0b:ab:68:38:3b:64:1c:08:d7:74:92:2c:18:0b:54:
                    99:62:20:ab:7a:99:3b:f5:5f:7a:64:aa:2c:4b:27:
                    0b:7d:9c:4e:14:1e:29:4e:a1:a5:87:37:b7:8d:92:
                    53:59:89:3c:91:97:7a:77:24:ea:03:48:dc:8d:35:
                    e8:f8:79:75:17:6d:ca:bd:78:e9:d8:f7:cb:2a:8f:
                    9a:af:f0:b7:2f:f0:05:16:b5:29:4b:4d:1a:2a:c2:
                    8c:88:22:b0:7d:5f:9c:e9:3c:30:bf:a9:25:54:f3:
                    57:dd:4f:fb:42:d0:8f:aa:82:aa:09:7c:07:7d:98:
                    3a:4f:97:a3:ce:e0:42:c3:91:46:aa:89:82:73:af:
                    8f:a6:26:1a:38:cb:cd:f9:e1:21:20:01:59:0d:f7:
                    57:ad:29:a6:49:ca:6a:68:89:a5:e9:7d:ed:b9:ae:
                    2f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A8:7A:7F:E0:63:08:70:3B:24:7A:56:DA:3E:DB:41:B7:5B:55:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/860f6f79-fac8-315e-beb5-5809ef42de80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.90.106.0/24
                  67.159.11.0/24
                IPv6:
                  2001:49f0:d0e8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:21:4a:f5:a2:2b:2f:62:35:4c:59:42:23:c1:cb:29:d9:ef:
         49:75:fc:7f:78:7c:4f:38:54:73:d1:96:4e:b6:d6:72:b1:52:
         8d:e5:62:22:4c:ee:37:87:93:fa:93:43:4a:36:24:a3:27:ba:
         b3:a1:54:24:82:74:f8:8d:76:29:87:d7:6a:d1:57:95:87:d9:
         59:fe:de:ee:61:da:41:91:5e:8c:1f:04:e9:8b:a7:f3:ad:95:
         17:11:52:cb:2a:bc:63:d4:90:96:d1:cd:be:20:f9:1c:30:7e:
         b6:27:d0:7e:38:36:85:ba:b5:0a:d1:34:c9:51:c0:d2:c9:d9:
         5c:bf:58:1f:69:56:e0:f5:cd:68:fb:0f:d9:07:9d:26:f9:6e:
         eb:6f:77:6e:da:82:79:3d:9c:ef:8c:a4:7e:c3:95:20:e5:5d:
         d0:59:eb:b4:f2:6e:69:bc:6e:aa:a3:0a:05:1b:8f:da:f5:d2:
         36:33:ca:49:64:54:89:cb:24:0d:99:3c:ba:86:80:4f:df:6a:
         a0:cd:d9:67:4f:09:61:e7:a8:e3:00:98:67:18:35:33:a4:6d:
         4e:13:12:c4:b6:97:c9:a7:e1:a4:21:47:f8:6e:b8:dd:40:4a:
         26:ab:90:8a:4e:ea:6c:bd:2d:3d:d5:0c:d2:2f:87:cf:16:19:
         8d:64:94:3b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:59:56 2026 by rpki-client