Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/de1d8ef9-62b0-38d1-9587-cc35342d9073.roa
File:                     de1d8ef9-62b0-38d1-9587-cc35342d9073.roa (raw, json)
Hash identifier:          RbM1XqILf5UiONWt16zWmk9r3E6ih4XY+Y17o2hIz6s=
Subject key identifier:   02:BD:C9:51:D8:6D:AD:F3:9B:BA:AA:5F:40:E1:39:96:4B:CD:50:C5
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285848BE861A8C7160D2DEAAE91CC0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/de1d8ef9-62b0-38d1-9587-cc35342d9073.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     174
IP address blocks:        67.159.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:1a:8c:71:60:d2:de:aa:e9:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=0d533362-74f6-4016-9537-a3fad560eb3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f5:1b:2e:c0:36:6c:d2:ae:c0:8d:3f:29:43:
                    7d:32:3f:2b:f2:01:c5:42:15:ae:56:4e:61:ed:f6:
                    36:76:9e:cd:e8:ba:9d:86:1e:b0:6b:d0:4d:b8:d3:
                    eb:1d:14:3a:f9:a5:7f:e2:41:ae:34:52:e7:ef:ba:
                    07:3d:3d:59:ee:71:09:30:e2:e1:88:4d:5b:ef:4b:
                    75:b5:d1:81:a5:22:2f:7d:9f:94:2f:f5:ab:6d:7e:
                    16:eb:4b:44:61:2a:31:ed:fe:f5:b8:56:23:9e:9f:
                    3e:e3:0f:cf:d8:09:08:67:19:1d:45:d5:8d:40:cb:
                    1f:83:a8:9c:80:0d:c8:c1:82:f2:98:fa:2c:6a:e4:
                    88:ed:e3:a3:7d:c3:58:e6:e0:e6:0c:66:7e:58:bc:
                    04:ef:7f:39:ac:9f:e6:d7:95:ac:5d:cb:10:7b:71:
                    e4:05:bc:92:e1:25:f3:d9:25:97:e5:1b:21:36:8b:
                    39:c2:63:7f:40:48:21:29:bd:2c:78:46:1f:3e:5f:
                    41:27:98:a5:98:6b:a6:34:d4:ca:51:91:06:22:dc:
                    ee:ea:c3:2e:2d:bd:48:10:51:fc:24:bf:5f:e8:92:
                    90:7e:79:da:fa:b9:9c:1c:2e:6d:54:58:89:4e:99:
                    1b:d7:80:35:b8:92:26:7e:8d:f2:ad:8e:73:1d:20:
                    0e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BD:C9:51:D8:6D:AD:F3:9B:BA:AA:5F:40:E1:39:96:4B:CD:50:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/de1d8ef9-62b0-38d1-9587-cc35342d9073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:66:19:fc:db:5f:4a:3e:6d:31:18:64:c7:ce:3f:74:ab:9e:
         d5:c4:52:e2:02:26:a4:56:d1:bf:35:0d:25:3b:68:15:03:f7:
         05:c6:cb:c6:f8:d1:9d:bf:62:f9:6e:3c:a1:fe:5e:aa:5a:38:
         3c:41:20:c2:a7:44:d8:67:00:96:08:cc:fa:9b:12:11:1d:84:
         a0:63:d6:a8:60:7c:a7:59:87:4b:02:52:d0:d5:49:df:9a:da:
         52:89:3d:b7:0b:9f:c4:46:b7:17:b5:80:c7:fe:c2:85:ae:5e:
         57:da:76:9f:e3:7f:4c:eb:c8:aa:73:90:3c:1c:88:9a:ba:71:
         60:17:99:f0:61:37:3d:25:de:52:9a:ca:44:e1:03:47:52:e0:
         5f:0b:e3:3c:45:f8:93:79:c7:57:d8:72:b8:f0:6c:1b:60:73:
         e5:b3:b5:25:ac:91:93:22:50:a7:1a:c5:4d:7d:6b:93:8b:ef:
         01:c0:5f:5d:c2:45:3d:6d:70:ac:71:be:3a:a5:62:b5:cc:df:
         73:5a:8e:b5:fb:4a:10:3c:dc:d3:01:26:57:87:70:a9:18:84:
         79:11:51:6f:c8:6a:98:77:17:31:ce:c9:78:d5:6e:72:28:ca:
         c9:23:7b:67:a9:1b:e3:a6:d1:a4:b7:c7:17:fb:f0:12:d0:07:
         0e:29:18:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:20:00 2025 by rpki-client