Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/47fd139c-acb1-3096-ace2-587cba189c18.roa
File:                     47fd139c-acb1-3096-ace2-587cba189c18.roa (raw, json)
Hash identifier:          o1ShgUU6N6RDccGl5OTwhOA2QpAN1p3mTSsLWVPNjuo=
Subject key identifier:   C5:60:E6:70:DA:3A:21:A5:F4:30:C9:3E:62:19:95:07:2C:4C:13:B1
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584ACF70FEF90357BCD48A330780
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/47fd139c-acb1-3096-ace2-587cba189c18.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     174
IP address blocks:        67.159.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:70:fe:f9:03:57:bc:d4:8a:33:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=4987049a-2d3a-47b2-a251-773b056b9e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ec:d6:5c:31:9d:c3:7c:83:0d:68:64:1e:5b:
                    9d:95:06:81:18:e6:ad:3a:38:d1:ca:44:32:13:aa:
                    b8:67:8c:6f:ad:af:a0:32:1e:2a:e1:5e:76:d8:00:
                    9d:92:25:8d:9c:13:54:74:a1:79:a6:dd:c8:44:08:
                    f0:45:c3:ea:a8:42:0c:f5:78:3d:03:c0:91:1d:b9:
                    fd:7d:6b:ea:3f:67:5b:8b:dc:49:01:62:6a:d8:f0:
                    8d:d0:4f:5c:74:c5:c1:7d:8f:c8:ad:0e:76:a7:38:
                    63:2f:34:05:35:4e:75:f5:c0:cd:02:b4:72:48:1d:
                    d2:76:8d:9c:94:04:28:42:ef:7c:87:e1:0e:e8:23:
                    6a:07:41:2c:7b:c2:85:e7:ab:9a:60:06:84:d2:2d:
                    06:b1:ae:04:3e:e4:41:e3:0c:48:d6:54:89:9e:4d:
                    02:d8:09:c5:18:83:f5:a4:a8:a4:f7:d8:1b:e6:0e:
                    d8:4f:4b:f8:f4:fd:4c:95:83:8d:77:5c:5d:76:84:
                    00:5f:cc:99:0c:07:1b:45:8b:f3:09:a4:08:54:eb:
                    b1:72:de:da:1c:9c:91:66:cf:c7:ba:72:23:e7:93:
                    62:48:1d:f7:67:b9:e5:23:38:05:61:3f:be:dc:1d:
                    38:44:8e:07:89:8f:a8:5f:9b:31:65:12:70:38:10:
                    e3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:60:E6:70:DA:3A:21:A5:F4:30:C9:3E:62:19:95:07:2C:4C:13:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/47fd139c-acb1-3096-ace2-587cba189c18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:88:c5:7f:41:52:93:56:10:d0:ef:97:c8:c1:08:5a:2b:4c:
         ec:f2:57:55:50:4b:94:5c:4b:45:d7:df:5a:cb:07:85:e3:d1:
         1a:e4:f9:96:af:02:68:b9:89:7d:37:75:7b:e5:c2:bf:3e:da:
         6a:25:9a:0f:d3:0c:95:a6:5e:9c:9e:12:ed:76:bf:30:83:1b:
         4d:c4:20:11:cd:85:64:18:5f:f9:a9:06:30:25:b7:88:dd:a0:
         0b:5a:df:e8:e1:0b:ec:77:dd:73:63:be:38:fb:8c:34:ee:c5:
         2b:ff:d5:ce:18:ac:e4:72:b0:d1:3a:58:dd:68:a5:da:1f:a3:
         17:0a:c2:f9:c8:26:79:da:6e:d7:67:72:f1:70:28:72:0c:8d:
         2e:5d:f4:77:50:03:e9:3c:b4:44:76:45:3a:35:2f:39:34:ec:
         f4:f8:27:b1:b2:e4:e8:b4:22:a3:8d:21:17:44:17:9b:cc:d5:
         b1:49:f7:fb:3c:4d:0a:b9:02:82:04:61:9c:84:9e:72:20:27:
         d5:96:bf:db:4f:18:7a:e2:02:be:45:60:de:bd:3a:fd:b1:d0:
         39:80:16:4b:d0:2b:ff:22:fa:4e:37:82:3f:34:80:ed:94:83:
         76:3a:f9:84:85:57:e6:66:51:08:c8:9a:8e:17:a8:bc:36:35:
         21:e1:a0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:13 2025 by rpki-client