Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f4d58f02-e98e-3fbe-b279-79bf7115fc6f.roa
File:                     f4d58f02-e98e-3fbe-b279-79bf7115fc6f.roa (raw, json)
Hash identifier:          Fo7NYbRI5iZ1mzPA9YmbZwhE13E+keLNAa2nq4Gb/z4=
Subject key identifier:   86:88:0B:2C:D2:55:75:76:55:B1:57:6C:CA:83:5C:FC:94:08:D3:A1
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F4977470719352E65DDB2DD80
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f4d58f02-e98e-3fbe-b279-79bf7115fc6f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     1239
IP address blocks:        67.159.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:47:07:19:35:2e:65:dd:b2:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3a851313-6f78-46e2-bfc1-a1bc1204fd29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:de:75:21:43:1c:53:2d:9a:3a:36:5e:42:6f:
                    8e:ed:8a:77:30:6b:a7:83:07:1b:11:12:8e:0f:00:
                    91:33:30:e6:3d:0d:b3:35:e9:3f:ab:d2:67:c4:10:
                    3a:e9:07:1d:be:e8:a2:8a:11:6a:12:ed:68:08:76:
                    98:f2:fe:d8:05:fe:9b:1c:2c:28:fa:e4:dc:0b:5f:
                    00:e8:cf:97:64:08:5c:bb:b6:0e:49:2e:fd:b8:f7:
                    7d:56:ec:a6:dc:3c:3a:15:11:1e:11:5e:6d:ea:f7:
                    8d:a0:62:3e:d0:8e:37:a9:27:ba:51:4b:40:97:a0:
                    5b:7c:41:b3:3b:ca:40:34:0b:90:d0:96:b6:2c:5e:
                    36:3b:35:0e:4e:7e:d7:03:0c:6a:e2:fc:0e:25:e6:
                    42:d5:14:62:e3:0e:ce:1f:3a:6d:ae:b0:38:58:2a:
                    47:72:87:72:cf:7d:db:d6:aa:40:2e:af:b8:9c:61:
                    73:5f:db:2c:0d:ec:db:90:b7:4e:dd:0d:7c:b6:50:
                    0a:aa:6c:ca:ab:0d:88:93:0a:aa:7b:6f:bd:25:d2:
                    7b:98:c0:c4:cc:dc:f6:c4:e4:77:ef:5d:ff:e7:c0:
                    a7:a5:1d:47:58:44:59:df:79:cd:fc:70:54:7f:89:
                    9f:19:27:e3:04:86:2f:ef:7f:f5:f0:05:87:a0:0f:
                    f7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:88:0B:2C:D2:55:75:76:55:B1:57:6C:CA:83:5C:FC:94:08:D3:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f4d58f02-e98e-3fbe-b279-79bf7115fc6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:4e:9a:41:8e:aa:8b:50:46:7c:dd:ed:d6:8d:c3:f3:b0:59:
         be:dd:5a:15:04:2a:12:20:b7:eb:d3:00:b4:08:fa:bd:28:35:
         13:84:79:01:66:6e:08:60:eb:0f:9c:89:99:2e:79:f8:f6:e3:
         07:d4:89:9e:a3:6c:d4:59:63:25:f7:b6:80:5d:80:fd:2a:39:
         41:71:50:4d:b4:50:f3:9f:51:e1:50:d2:cb:fa:1b:45:3a:f9:
         f9:2a:47:63:ed:5b:a6:98:4c:e5:e9:48:09:ed:2f:f2:77:cb:
         a0:ac:95:b8:f5:73:90:4a:7b:a1:3f:09:f3:a8:2e:23:3f:24:
         52:84:12:0d:53:67:08:f6:74:7b:a9:a9:bc:0a:43:0a:f1:ec:
         0b:e4:e1:07:bc:9b:39:de:2c:41:f6:c9:40:ab:90:de:fb:41:
         c6:b8:ec:f6:5f:89:6e:05:02:98:32:98:74:28:bc:a3:db:ce:
         3a:9c:61:47:ea:00:1e:e2:7d:3a:94:c1:b8:a5:2d:3e:1e:39:
         e3:85:71:97:27:5f:f5:7f:99:ce:27:f6:17:16:d1:c7:12:5d:
         58:c5:f7:7f:43:ef:55:68:84:23:01:64:53:c2:93:2f:50:39:
         eb:83:19:a3:4b:9e:1f:79:1e:04:ed:53:7e:db:00:57:a6:0e:
         29:1c:dc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:53:28 2026 by rpki-client