Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/860f6f79-fac8-315e-beb5-5809ef42de80.roa
File:                     860f6f79-fac8-315e-beb5-5809ef42de80.roa (raw, json)
Hash identifier:          8RzUXm8mk0h4WSA+2cM2zXQ3levEMCKxRzlhcE3M59I=
Subject key identifier:   11:74:B1:1F:8D:A7:08:90:F1:CA:E2:BC:98:AE:81:86:6E:F4:5A:95
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584A7D15F0CE19B00910E1989200
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/860f6f79-fac8-315e-beb5-5809ef42de80.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     30058
IP address blocks:        66.90.106.0/24 maxlen: 24
                          67.159.11.0/24 maxlen: 24
                          2001:49f0:d0e8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:f0:ce:19:b0:09:10:e1:98:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=76b6f1f5-83f4-45f0-bd26-d7fd3ee29e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:10:97:21:4e:42:9e:21:51:4f:74:87:bc:ca:
                    6f:80:99:b4:d3:50:a0:3d:65:ac:2e:fc:85:e3:6e:
                    cf:d1:5b:35:1c:79:10:57:54:f1:0f:88:7a:3f:9f:
                    20:81:51:41:62:aa:09:88:77:42:3a:33:58:fb:b8:
                    6b:a5:29:22:92:a0:4d:d5:83:10:a6:07:07:3e:ce:
                    f1:2b:e1:6f:a6:df:52:ad:a7:e2:17:02:e9:01:60:
                    fc:77:3e:c6:08:b0:4d:03:de:db:3f:9c:20:93:00:
                    42:69:7f:a6:b9:a8:a6:e8:47:8a:47:86:93:1e:07:
                    ca:95:90:3e:28:02:e8:22:bb:91:c5:2f:cf:57:36:
                    5f:87:31:48:eb:50:f6:a5:37:0e:6f:aa:57:7a:d9:
                    52:c0:b9:91:ef:6a:c1:f5:d0:b7:0a:ea:fd:30:ff:
                    fd:d9:78:a1:da:14:a3:70:7b:be:50:36:b6:43:fc:
                    9d:4e:66:dd:26:85:d8:f7:a6:e5:94:12:45:d2:44:
                    01:5b:51:5c:dd:72:09:89:14:a7:5d:3b:f0:5f:25:
                    51:f8:99:ca:e9:c9:bd:43:34:eb:1d:b7:90:07:ed:
                    ca:72:18:12:86:02:21:00:6a:e3:45:f2:da:e0:ff:
                    d0:82:ee:f0:e7:f5:ec:47:9e:0f:3a:1e:60:38:ee:
                    9c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:74:B1:1F:8D:A7:08:90:F1:CA:E2:BC:98:AE:81:86:6E:F4:5A:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/860f6f79-fac8-315e-beb5-5809ef42de80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.90.106.0/24
                  67.159.11.0/24
                IPv6:
                  2001:49f0:d0e8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:5d:0d:8e:92:63:19:61:a7:56:db:ad:98:bb:ac:04:8a:7d:
         dd:f3:2d:dc:f0:e5:aa:11:20:d5:de:64:80:34:ce:64:a5:6b:
         de:e4:f5:47:b0:a7:bc:7d:87:b9:be:70:d2:90:52:3c:c5:5d:
         6c:1a:6c:b8:0c:d3:a1:15:a4:95:4f:13:98:64:9f:24:5c:c5:
         80:e7:02:4f:c8:86:55:ce:a5:8b:39:91:d7:60:31:79:48:17:
         d3:4c:dd:02:ad:bf:1f:2e:0c:86:80:4c:d6:2b:e2:97:a7:14:
         ed:58:07:9c:24:a5:32:7b:8f:d0:5f:e3:e7:0f:2a:3a:98:ae:
         47:1e:e5:65:d8:7c:93:e5:c4:f0:d7:1c:3b:5b:6f:76:f7:78:
         a5:84:c7:b3:1c:9c:d9:f2:e1:4b:36:6d:76:ab:cb:dc:3e:b6:
         4f:01:8f:77:9c:f6:a8:d3:d6:91:de:d4:58:bd:90:0f:e0:57:
         b2:db:1e:4d:ab:3b:43:2d:09:17:01:4d:79:fd:1b:79:9a:50:
         ab:ed:5e:c1:ad:12:33:33:8a:19:96:ba:ff:af:33:89:5e:b3:
         c4:1e:1e:59:16:34:c8:da:ca:0b:89:e9:f8:a1:bf:46:ba:dc:
         43:09:44:0f:3d:e9:a9:84:37:06:26:e7:fa:51:c5:58:c6:a6:
         de:e5:46:20
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEp9FfDOGbAJEOGYkgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk
NzZiNmYxZjUtODNmNC00NWYwLWJkMjYtZDdmZDNlZTI5ZTAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xCXIU5CniFRT3SHvMpvgJm001CgPWWsLvyF
427P0Vs1HHkQV1TxD4h6P58ggVFBYqoJiHdCOjNY+7hrpSkikqBN1YMQpgcHPs7x
K+Fvpt9SrafiFwLpAWD8dz7GCLBNA97bP5wgkwBCaX+muaim6EeKR4aTHgfKlZA+
KALoIruRxS/PVzZfhzFI61D2pTcOb6pXetlSwLmR72rB9dC3Cur9MP/92Xih2hSj
cHu+UDa2Q/ydTmbdJoXY96bllBJF0kQBW1Fc3XIJiRSnXTvwXyVR+JnK6cm9QzTr
HbeQB+3KchgShgIhAGrjRfLa4P/Qgu7w5/XsR54POh5gOO6cQwIDAQABo4IDbDCC
A2gwHQYDVR0OBBYEFBF0sR+NpwiQ8crivJiugYZu9FqVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvODYwZjZmNzktZmFjOC0z
MTVlLWJlYjUtNTgwOWVmNDJkZTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAQlpqAwQA
Q58LMA8EAgACMAkDBwAgAUnw0OgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAR10NjpJjGWGnVtutmLusBIp9
3fMt3PDlqhEg1d5kgDTOZKVr3uT1R7CnvH2Hub5w0pBSPMVdbBpsuAzToRWklU8T
mGSfJFzFgOcCT8iGVc6lizmR12AxeUgX00zdAq2/Hy4MhoBM1ivil6cU7VgHnCSl
MnuP0F/j5w8qOpiuRx7lZdh8k+XE8NccO1tvdvd4pYTHsxyc2fLhSzZtdqvL3D62
TwGPd5z2qNPWkd7UWL2QD+BXstseTas7Qy0JFwFNef0beZpQq+1ewa0SMzOKGZa6
/68ziV6zxB4eWRY0yNrKC4np+KG/RrrcQwlEDz3pqYQ3Bibn+lHFWMam3uVGIA==
-----END CERTIFICATE-----
Generated at Mon Jul 21 02:23:39 2025 by rpki-client