Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7ada39ba-6b96-341c-9db1-449979c69409.roa
File:                     7ada39ba-6b96-341c-9db1-449979c69409.roa (raw, json)
Hash identifier:          zoxG//pAa8hshaSvGOCX7MKTDgWLTPV3gBD7Cb86sP4=
Subject key identifier:   78:9E:97:A0:32:43:24:51:49:D4:E1:CF:37:09:AC:76:B2:FC:0F:AF
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F94D350076EEC8D6CA4DCC500
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7ada39ba-6b96-341c-9db1-449979c69409.roa
Signing time:             Thu 22 Oct 2026 01:00:12 +0000
ROA not before:           Thu 22 Oct 2026 01:00:12 +0000
ROA not after:            Wed 20 Jan 2027 02:00:12 +0000
asID:                     1239
IP address blocks:        67.159.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:94:d3:50:07:6e:ec:8d:6c:a4:dc:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Oct 22 01:00:12 2026 GMT
            Not After : Jan 20 02:00:12 2027 GMT
        Subject: CN=82eda0b2-a1a4-4792-9ba4-40420291f099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:da:d5:a6:bd:8f:b2:c5:6a:c0:56:d7:6e:e0:
                    54:71:2d:64:08:e2:98:4d:ae:d0:dc:71:9c:5d:a6:
                    95:89:13:a7:96:f9:2a:15:af:13:70:99:22:97:21:
                    8d:6d:73:95:fd:11:c2:c8:56:61:9c:df:e1:b9:86:
                    b8:ac:3e:3f:09:9a:18:93:d2:60:c7:aa:25:e8:12:
                    44:8d:4a:89:bc:04:44:91:39:ef:05:7a:96:ab:b2:
                    14:ce:73:59:f3:5d:a9:c0:22:69:1b:8d:0b:f7:39:
                    41:07:51:2a:44:69:05:7b:79:5b:6a:88:bb:dd:81:
                    b1:ec:cb:c0:05:ff:26:a0:89:d6:29:e2:46:f2:d2:
                    0f:32:f2:b7:c4:a9:1b:88:cb:2e:50:1d:56:9a:c6:
                    cf:a5:d9:f7:b9:27:3a:af:ee:b4:03:ac:72:9a:ab:
                    91:04:84:34:36:eb:41:ff:bc:62:d5:45:bf:42:20:
                    6b:55:71:fe:23:a1:2f:a6:45:66:34:fa:00:5a:82:
                    05:2b:3e:3a:24:3d:99:4c:c6:3c:a0:2e:b7:65:94:
                    20:94:bd:98:07:6f:1e:48:b7:a8:cc:a0:86:03:5d:
                    df:81:c9:91:8a:ba:df:b7:af:9c:1c:38:24:c6:45:
                    87:fb:60:6a:5f:ae:1e:7b:fb:89:56:18:68:04:de:
                    ba:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9E:97:A0:32:43:24:51:49:D4:E1:CF:37:09:AC:76:B2:FC:0F:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7ada39ba-6b96-341c-9db1-449979c69409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:12:6f:3c:e0:f0:d9:dc:2e:ca:1b:f6:54:22:c3:2a:e5:90:
         0d:80:2e:d3:dd:af:92:4f:12:0e:d7:4b:3c:b7:5f:9a:a6:d4:
         22:4f:ce:8c:a2:f2:91:4e:88:3e:b1:3e:96:ce:5e:dc:12:10:
         8b:fd:9e:d6:20:46:6f:f6:f0:0f:3c:8e:a2:c9:50:bc:c1:49:
         34:bd:c1:26:90:42:ce:a3:2b:82:f5:56:f1:de:f3:1c:17:11:
         d2:68:f7:a1:23:62:dd:61:b1:b3:74:25:fa:29:40:8e:81:7d:
         b9:07:70:45:fc:5c:5e:62:75:4b:45:26:15:ce:db:da:4d:6b:
         8e:84:81:39:e1:ba:62:cd:7e:e9:a1:bf:d9:ba:59:60:36:7c:
         27:7a:0c:a3:cf:28:71:f6:07:db:70:66:61:6e:a1:80:94:c1:
         9f:b3:45:d0:eb:c6:4f:6f:f9:10:53:43:f9:d1:01:a1:53:e8:
         94:c2:c7:3f:17:68:42:80:25:bb:e9:42:f4:7a:29:4a:91:af:
         9a:63:a7:74:79:50:68:b2:98:c7:e2:2d:05:90:45:d3:9e:75:
         93:08:db:25:ca:8a:5d:b9:70:9f:3a:f2:09:53:2d:f3:c6:64:
         77:08:73:12:13:b8:5e:77:a5:f0:c4:6d:4f:17:47:36:1c:20:
         ab:6e:19:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 07:11:50 2026 by rpki-client