Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/4bceaa4d-4ac6-3768-84fa-88c768f46b14.roa
File:                     4bceaa4d-4ac6-3768-84fa-88c768f46b14.roa (raw, json)
Hash identifier:          Qspz0BAwhxAktBfTrLGCegUu8o9/Ry0430qJywgMkZg=
Subject key identifier:   1B:5F:7D:7D:39:7C:B2:D8:4A:4D:3D:66:66:D3:89:12:C3:BD:BC:0A
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584B5DD1F55C7A63DD6E3E865500
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/4bceaa4d-4ac6-3768-84fa-88c768f46b14.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     30058
IP address blocks:        67.159.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:f5:5c:7a:63:dd:6e:3e:86:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=d3560489-f60c-49b1-9faf-3f63a3eaba39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b4:e8:75:5f:5a:9d:d0:31:93:1f:09:71:a1:
                    87:07:ef:a9:ae:7c:ff:a4:f1:d3:0c:93:05:20:1d:
                    cd:52:e7:04:c3:53:96:fa:a8:ec:fa:95:1c:ec:f7:
                    82:c1:18:8e:77:35:ad:57:09:38:16:56:79:cb:12:
                    e3:23:98:0b:8e:3f:05:03:09:30:e9:b9:37:6a:52:
                    8e:cb:45:f6:6d:cf:cb:80:a8:0d:4f:b8:f8:f3:31:
                    0a:0d:3b:2f:d3:ac:b8:3d:33:09:6d:e5:ae:41:37:
                    19:07:8e:1b:bf:94:cc:69:e5:5d:f3:c7:bc:1b:9a:
                    83:b2:56:07:f0:69:df:63:e6:bd:c3:01:70:fa:7e:
                    db:15:0c:1d:b9:c5:c7:0b:14:8e:64:2a:f8:22:57:
                    8a:1c:10:7d:72:a5:b9:48:a8:3d:34:d6:c3:64:b5:
                    69:98:04:83:17:3b:b9:bc:eb:9a:47:1e:32:73:fb:
                    1e:96:0b:3f:11:9f:44:7a:12:a2:9b:a0:dc:3f:83:
                    ab:be:a4:14:28:bd:66:cb:57:ee:66:bd:30:a3:ca:
                    ea:23:a2:3f:23:88:fc:f4:46:76:6b:f8:1d:a5:1f:
                    a3:d3:0b:d3:d2:fb:ee:2b:9a:28:1d:87:76:b3:70:
                    56:ac:ff:d2:eb:6f:67:fc:01:15:27:d8:82:f7:25:
                    05:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5F:7D:7D:39:7C:B2:D8:4A:4D:3D:66:66:D3:89:12:C3:BD:BC:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/4bceaa4d-4ac6-3768-84fa-88c768f46b14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:2b:da:a3:bd:c6:96:87:35:7b:de:16:52:8e:24:cf:55:15:
         53:3e:11:35:0d:cb:ed:c1:71:04:04:7e:d1:03:06:71:39:09:
         37:27:bc:29:a8:16:1e:91:5c:7c:ce:2a:c6:ea:78:50:1d:82:
         09:64:f1:24:97:87:0d:bc:9c:ee:92:b8:d9:c1:f1:89:8b:67:
         1a:81:8d:82:b7:10:30:09:fd:de:0e:98:cf:a8:76:c0:5e:f7:
         db:79:b9:fa:4c:ef:4a:3d:ab:f9:58:27:96:9e:d9:10:14:c0:
         39:d2:ef:5d:ef:16:28:a7:85:f9:22:b6:d8:b2:52:24:71:c5:
         2f:8d:87:45:a9:20:10:3e:26:90:4e:31:27:14:45:f0:e3:10:
         b3:75:a5:26:c5:ef:af:d0:fd:9f:60:f1:fa:2a:fd:23:54:f6:
         81:5a:20:85:05:14:88:d8:ce:b9:9c:1b:a6:34:98:a9:91:20:
         8a:11:43:f4:3c:5c:d8:7f:9f:c9:f0:90:62:e0:14:4b:ed:43:
         16:24:7a:ad:f0:0e:9e:7f:04:8e:67:65:62:ae:75:d5:d0:45:
         63:cb:b4:da:6c:93:4f:df:f6:a5:46:5d:bb:e4:5d:d7:98:97:
         60:2d:86:41:18:4b:44:50:bb:38:df:db:19:f4:dd:11:8c:55:
         ea:c7:47:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:06:13 2025 by rpki-client