Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c4aff5f6-4c2e-351b-bc56-896db0726984.roa
File:                     c4aff5f6-4c2e-351b-bc56-896db0726984.roa (raw, json)
Hash identifier:          3ipS8tH/oFuuxipT0TJDGszDDxXRmt8odFWLGm3PgaQ=
Subject key identifier:   13:A4:29:A6:DC:80:09:C9:A1:6F:8E:5F:92:B0:31:7A:D2:BC:7D:45
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584AF95145D9DE9E3F5C3F64E800
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c4aff5f6-4c2e-351b-bc56-896db0726984.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     30058
IP address blocks:        67.159.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:45:d9:de:9e:3f:5c:3f:64:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=bebf6024-1c97-4aa7-b322-c40a6faaff5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d0:3c:d3:3c:11:1e:1f:55:a1:e5:ab:d5:03:
                    a0:d1:8f:9e:1e:eb:72:3f:fc:ba:c8:2a:be:45:0f:
                    41:1d:05:8f:4b:84:d9:f9:30:24:89:ac:a0:1a:6f:
                    af:d9:48:cb:1e:59:ef:f7:0c:3e:ba:47:cd:00:ff:
                    5f:26:ce:7d:b2:5d:bd:c5:76:6a:88:7b:69:f4:39:
                    0d:aa:d9:88:4a:21:9f:f2:51:f1:72:68:e7:35:de:
                    96:a7:7c:72:54:18:15:a9:8b:25:f0:72:7a:73:91:
                    8c:58:99:b5:dd:62:a4:ef:1a:bc:7c:fd:e7:4e:e7:
                    66:ac:f8:37:bd:3a:0b:55:3b:28:d6:d1:da:ca:5b:
                    16:d3:9e:1b:e6:1a:85:56:66:c0:60:c3:b5:31:ef:
                    cf:67:22:ee:b3:eb:7f:49:51:c7:a1:f7:c1:64:e3:
                    d0:b4:f0:73:bb:37:df:1b:36:ac:5c:0d:86:18:6b:
                    42:dc:eb:7f:59:f6:bd:e9:83:cc:b0:9e:9c:3c:ed:
                    2e:db:3b:8a:63:8b:61:b7:28:ab:c7:cb:76:1d:ed:
                    85:ac:58:01:57:16:20:8e:d9:de:3c:03:a7:ad:b5:
                    c5:f6:05:f8:b9:ee:4e:c1:de:3f:4e:1a:34:86:69:
                    6e:0d:78:f5:a6:fc:17:18:98:aa:08:28:54:5c:90:
                    1b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A4:29:A6:DC:80:09:C9:A1:6F:8E:5F:92:B0:31:7A:D2:BC:7D:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c4aff5f6-4c2e-351b-bc56-896db0726984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:88:28:ac:39:b6:e0:03:ca:3a:a0:f5:fb:c5:f5:97:3a:a8:
         c4:48:fd:25:7b:b4:f5:66:12:fc:7d:7a:47:22:f9:5d:b6:f0:
         0c:22:70:44:53:2e:1c:2b:ef:91:a2:40:c8:84:45:40:5c:72:
         2d:c0:7a:40:e1:67:1b:54:38:a8:da:16:a7:45:cf:31:30:3c:
         12:52:22:63:3c:b8:19:1d:26:7a:19:55:c8:96:fd:48:3b:15:
         e3:4a:da:a5:60:4f:0a:62:ec:5a:e7:0e:5c:a5:81:0b:e8:f3:
         96:68:30:3e:75:53:6a:dd:b1:1c:94:bc:1a:2d:e7:19:ff:68:
         77:47:ea:cc:ed:a5:e4:a1:82:f7:5a:e6:ab:de:37:bb:fa:08:
         4a:f8:b0:c2:33:aa:20:2f:ea:4a:58:23:34:1d:88:75:4d:90:
         da:e8:4c:25:f2:d4:70:04:4d:7e:84:e9:9a:b8:78:06:d4:6b:
         ee:2d:1f:3d:00:90:5b:de:51:15:ae:ad:0e:23:c2:c0:10:72:
         70:ff:b5:57:12:b3:61:12:33:5c:5b:ae:de:6c:bc:db:92:18:
         22:4f:7e:bf:58:8d:8e:91:be:e6:5c:73:a5:01:c1:43:1d:05:
         21:17:51:c9:ef:2f:c5:ae:b8:cb:ad:47:66:c5:68:04:c2:d6:
         08:d4:38:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 03:53:07 2025 by rpki-client