Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c54223f6-3607-352e-8d03-6529dcae3ba8.roa
File:                     c54223f6-3607-352e-8d03-6529dcae3ba8.roa (raw, json)
Hash identifier:          M8BMLN21IJ5MdDk/c9GHiQ4l7fielhnxn5y1eHbahAE=
Subject key identifier:   15:2F:0E:6A:E1:1B:3E:7C:95:A4:6F:64:40:1A:D7:70:5E:C2:E9:D1
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285849EEB502B017EA4D5EDF1B6E00
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c54223f6-3607-352e-8d03-6529dcae3ba8.roa
Signing time:             Thu 22 May 2025 01:00:51 +0000
ROA not before:           Thu 22 May 2025 01:00:51 +0000
ROA not after:            Wed 20 Aug 2025 01:00:51 +0000
asID:                     174
IP address blocks:        67.159.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:b5:02:b0:17:ea:4d:5e:df:1b:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: May 22 01:00:51 2025 GMT
            Not After : Aug 20 01:00:51 2025 GMT
        Subject: CN=9b5b52db-9a86-437e-997d-d69bdffa167e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:10:f9:db:6e:d2:98:2c:27:e9:3c:bb:6d:4a:
                    36:fc:8f:db:02:7c:26:ed:42:25:ab:6a:4f:e2:b6:
                    3f:15:53:a9:50:30:af:3c:f3:f4:89:74:09:74:fe:
                    a9:04:51:47:29:f2:0d:ef:88:16:b1:f4:d3:44:a2:
                    14:c3:1b:a7:3b:b6:55:7f:04:b8:9b:6a:46:1f:34:
                    9e:43:7c:77:c8:c8:a8:78:a3:8a:29:9f:d5:fa:b6:
                    b1:05:a7:b9:87:c6:78:fd:04:5e:2e:f5:7a:1c:31:
                    43:03:0b:48:b1:f2:87:aa:61:7e:91:b3:9c:70:85:
                    2f:b2:c3:f2:e3:a3:05:17:3e:8f:d7:27:fc:8b:aa:
                    1a:db:5b:64:a6:92:b9:6a:3c:0a:82:e1:62:cf:a1:
                    8f:fe:c2:3a:19:c9:89:7f:20:a0:1a:6a:2c:da:22:
                    6a:7e:54:6a:d8:d8:8a:ff:fc:5b:1c:d1:c3:99:ca:
                    81:57:ed:a7:75:2a:60:da:a0:90:7f:17:86:99:54:
                    51:5b:66:25:b7:7b:6c:cf:37:43:3c:1e:6b:2e:36:
                    7e:ff:89:b7:ac:c6:f9:bb:81:3c:d7:f9:76:36:b2:
                    c5:22:a9:27:c2:99:68:fd:34:4b:4d:6f:db:3b:93:
                    ed:1b:c8:eb:cc:73:c4:f9:96:66:fa:88:0d:a8:c7:
                    f9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2F:0E:6A:E1:1B:3E:7C:95:A4:6F:64:40:1A:D7:70:5E:C2:E9:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c54223f6-3607-352e-8d03-6529dcae3ba8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:8f:71:a6:19:ec:4b:c4:a1:6a:9e:e2:c1:f8:ae:7e:b4:52:
         30:69:a7:c0:be:35:04:f6:da:61:6e:c2:63:ab:46:74:80:bf:
         ab:a7:a9:fd:ab:96:7f:af:f2:3b:bb:c2:75:b9:d3:06:fb:57:
         50:6d:38:32:93:1b:54:ce:a8:15:9d:c9:1a:16:be:68:41:07:
         56:20:5c:4a:45:84:0b:ac:ce:55:be:f5:00:a5:e6:56:c9:04:
         57:d0:db:c5:eb:8d:00:e5:b8:1f:8c:36:3c:7f:21:eb:05:75:
         1b:0e:cd:3d:44:95:c1:1b:e6:4f:4f:cf:d7:a5:03:7f:a9:e1:
         9a:1d:1e:b6:70:18:2e:54:17:fa:3e:29:55:cc:a0:18:b0:ac:
         24:af:ac:0f:62:78:d4:a4:52:f9:82:e1:5a:f4:4c:c4:8a:22:
         6d:89:7a:42:98:e2:d2:a3:cb:fb:66:e2:9f:ed:b8:01:aa:74:
         6a:d4:3e:b6:07:de:02:4d:29:24:aa:8c:f8:55:61:fd:85:e4:
         50:d0:22:c6:f2:4b:6b:66:46:77:7b:93:87:43:f3:98:b7:87:
         11:fb:af:4c:ff:9c:f6:71:80:18:52:e9:55:67:50:41:6c:f9:
         c0:27:82:70:68:12:0e:66:af:7a:17:74:b2:48:60:e2:3a:29:
         26:37:6b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:11:24 2025 by rpki-client