Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5ad9abec-021f-3ca3-a6c3-e2ef2182cecf.roa
File:                     5ad9abec-021f-3ca3-a6c3-e2ef2182cecf.roa (raw, json)
Hash identifier:          Pl5U5/rQ8CYnoJChq9DzRCi11bx7tRKRiXz6NCcqSmE=
Subject key identifier:   7E:9B:81:4D:BC:28:3A:78:D1:D5:F0:17:40:CF:67:35:49:C2:99:7C
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584B5DD1F501EBCFB94AAA6DACA0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5ad9abec-021f-3ca3-a6c3-e2ef2182cecf.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     1239
IP address blocks:        67.159.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:f5:01:eb:cf:b9:4a:aa:6d:ac:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=44352e83-4500-41b8-8dbd-36328097f91c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:90:85:dd:d4:de:f0:39:6e:0a:aa:3c:b0:b1:
                    de:44:12:fc:15:18:38:45:c8:01:78:78:40:67:29:
                    6e:ae:d1:b9:b5:b0:03:7d:72:5a:2f:b2:a0:69:85:
                    ed:5d:6a:e4:75:ea:27:11:7b:d5:25:de:26:52:5e:
                    71:30:17:97:fa:ff:a7:d1:4a:8b:41:91:b3:6e:59:
                    5c:74:5b:e1:7c:a5:11:cb:fd:da:5a:a7:5a:b5:1c:
                    b0:0d:66:64:b5:64:ad:14:47:7e:a9:66:13:89:97:
                    5d:38:2c:4d:9b:d0:f8:40:1d:98:67:0a:c3:9e:9e:
                    de:91:dd:ff:86:8d:8b:1c:6b:2f:e9:43:46:38:c5:
                    06:10:6a:ec:8e:bb:a4:60:e4:66:cf:5e:01:0b:e2:
                    bc:10:b1:e0:1a:43:3d:54:5a:af:78:22:f0:58:d4:
                    8b:8a:4f:09:bd:90:21:5d:55:65:6b:be:27:72:ef:
                    7e:73:79:e9:23:c7:89:49:e7:cb:d4:24:83:bd:85:
                    ba:0a:b7:41:a3:89:d6:68:64:c1:31:cb:44:10:f5:
                    e9:22:be:12:0a:4a:3e:f9:56:ea:48:74:c2:92:79:
                    98:6e:c7:97:e3:4b:cb:50:e9:21:32:0b:dc:4b:05:
                    c1:29:3f:e3:a3:51:84:a0:21:98:c0:9c:2f:40:ce:
                    58:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9B:81:4D:BC:28:3A:78:D1:D5:F0:17:40:CF:67:35:49:C2:99:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5ad9abec-021f-3ca3-a6c3-e2ef2182cecf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:bd:39:57:96:7f:cc:6d:10:f2:76:e5:64:cc:0f:a3:12:ed:
         50:ff:62:44:f5:bf:30:17:c6:82:b3:12:2a:6d:63:ed:37:6a:
         0a:34:bb:b0:ff:4d:17:b6:6f:77:b8:95:77:ad:e2:8b:d7:5a:
         44:65:54:f6:c8:95:67:ed:0b:34:a3:bf:24:db:aa:0d:6e:d5:
         92:73:54:31:e9:62:88:dc:36:14:c2:d1:39:b4:14:ac:6f:72:
         f3:32:57:89:77:d8:ce:b5:21:3e:01:d2:3d:1c:c7:dc:50:7b:
         4e:ef:4d:13:91:5d:ed:c2:49:eb:f5:cd:e8:21:2e:e6:af:6d:
         89:73:4b:0a:ef:0c:34:59:7b:fb:7c:d9:c7:ce:89:76:68:c4:
         e5:65:21:d1:1f:05:5c:a4:0d:7c:4b:1e:9d:bd:13:6d:36:59:
         0e:d4:c1:b5:c0:b6:77:45:43:d9:a9:4e:82:ec:4f:22:6d:b0:
         37:9f:49:d3:96:63:5b:1f:72:aa:a1:ec:e0:d8:c9:b2:4c:c1:
         fb:99:cb:a1:70:5e:25:6b:75:bb:41:51:ce:0e:50:b7:83:fd:
         00:1a:21:f0:53:c9:67:f1:1f:53:0f:74:52:40:f5:e7:68:80:
         12:29:30:2c:06:e2:4c:6f:ee:5e:5b:1e:d0:a2:23:13:58:f8:
         f1:5a:44:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:56:26 2025 by rpki-client