Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/68297118-8e1b-3493-8b7f-527471d8a180.roa
File:                     68297118-8e1b-3493-8b7f-527471d8a180.roa (raw, json)
Hash identifier:          8/1a2wkkteZ+4qrwHnlulWfkRoUhT0aqTj7zydaUxss=
Subject key identifier:   46:3C:D2:27:87:61:69:B9:BF:28:B4:CB:5C:5D:E8:92:A6:E1:1D:B6
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584DADAADEF30B84A3AF97EA8500
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/68297118-8e1b-3493-8b7f-527471d8a180.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     30058
IP address blocks:        67.159.24.0/23 maxlen: 23
                          67.159.28.0/24 maxlen: 24
                          67.159.29.0/24 maxlen: 24
                          2001:49f0:d11a::/48 maxlen: 48
                          2001:49f0:d124::/48 maxlen: 48
                          2001:49f0:d125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:de:f3:0b:84:a3:af:97:ea:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=a28983cf-8ed9-4e09-91dd-f456a858696e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fa:20:87:b1:7d:d9:53:1f:93:fd:fb:19:1e:
                    09:7a:9e:c5:c5:cf:fa:65:94:a2:f9:9c:ef:9a:1a:
                    6f:00:23:b2:5b:17:4d:96:2a:e6:f5:af:86:a9:bf:
                    bb:ec:a3:09:55:90:6c:c2:bf:ea:0f:42:7d:7a:7a:
                    4a:3f:fa:13:75:9e:12:cb:7e:70:11:a7:7c:b0:e5:
                    86:05:a5:88:88:dd:87:fe:17:5c:e1:6e:be:d1:25:
                    61:44:a4:9b:3c:b5:3c:2b:98:8e:46:5a:45:94:fd:
                    e6:31:3d:2a:50:39:23:84:e4:c3:87:56:b7:6e:a1:
                    48:5e:bb:2c:4c:de:fc:47:19:36:1c:f7:76:9a:22:
                    17:43:12:88:f3:06:86:18:ee:5d:d3:b7:5d:ed:94:
                    73:5e:4b:68:2b:de:73:d2:66:5a:33:bd:43:a2:48:
                    75:a8:0c:93:93:de:81:69:72:d7:4a:a0:a8:08:fe:
                    89:d4:88:9d:3d:50:50:ac:ff:9e:ea:07:d1:2c:47:
                    55:4a:e0:e4:50:91:01:86:cf:f6:2a:94:4c:55:46:
                    1f:6b:fe:03:20:48:65:64:c6:0e:ad:63:cd:7a:fd:
                    c9:27:71:ad:98:d6:ee:83:e0:08:82:38:e7:17:c1:
                    91:0d:e9:65:8c:69:71:8c:b0:2b:0e:90:b8:6e:f4:
                    1c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:3C:D2:27:87:61:69:B9:BF:28:B4:CB:5C:5D:E8:92:A6:E1:1D:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/68297118-8e1b-3493-8b7f-527471d8a180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.24.0/23
                  67.159.28.0/23
                IPv6:
                  2001:49f0:d11a::/48
                  2001:49f0:d124::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:b5:60:12:3f:34:93:c6:fc:7f:29:19:4b:5f:9a:12:4e:07:
         3c:0e:ff:49:d5:d6:05:64:7f:ef:9f:0c:83:76:35:25:2e:46:
         79:aa:ba:17:3e:d9:e9:e1:e3:6c:17:60:49:33:2f:e8:7d:5d:
         ca:a1:4a:77:13:bd:be:f4:bd:71:bc:f1:6b:3f:44:e5:7f:55:
         25:26:b8:cf:36:29:01:e2:e1:7e:27:cf:5b:54:38:34:8a:fe:
         49:81:37:a6:05:b2:83:8c:91:00:b6:e2:86:d6:00:a4:61:33:
         1b:3c:26:55:26:85:34:49:c8:f6:3a:05:8e:a8:c5:b2:99:f8:
         56:5d:8a:27:25:49:a4:2f:84:e1:49:53:53:8b:2c:a0:93:c9:
         c6:58:fe:b3:9b:57:aa:0e:f3:bd:78:70:56:e2:2d:2c:6b:02:
         36:4e:77:1d:b6:7f:73:c7:d7:49:9e:1f:8a:f0:97:dc:d8:1e:
         fb:76:53:e7:6c:8d:aa:5b:8e:01:25:f2:32:5f:4d:56:4c:c3:
         8a:fa:e0:39:bc:1b:8a:d1:5c:30:e0:4c:48:d1:a5:ef:ce:9f:
         f4:a1:bf:7e:b0:95:96:1f:8f:bc:53:c2:b8:f1:c4:da:22:12:
         91:36:7e:3c:a3:cc:58:c1:5a:b2:93:ea:c7:fe:94:d4:7b:e9:
         66:0b:55:2e
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWE2tqt7zC4Sjr5fqhQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk
YTI4OTgzY2YtOGVkOS00ZTA5LTkxZGQtZjQ1NmE4NTg2OTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPogh7F92VMfk/37GR4Jep7Fxc/6ZZSi+Zzv
mhpvACOyWxdNlirm9a+Gqb+77KMJVZBswr/qD0J9enpKP/oTdZ4Sy35wEad8sOWG
BaWIiN2H/hdc4W6+0SVhRKSbPLU8K5iORlpFlP3mMT0qUDkjhOTDh1a3bqFIXrss
TN78Rxk2HPd2miIXQxKI8waGGO5d07dd7ZRzXktoK95z0mZaM71Dokh1qAyTk96B
aXLXSqCoCP6J1IidPVBQrP+e6gfRLEdVSuDkUJEBhs/2KpRMVUYfa/4DIEhlZMYO
rWPNev3JJ3GtmNbug+AIgjjnF8GRDelljGlxjLArDpC4bvQcxQIDAQABo4IDdTCC
A3EwHQYDVR0OBBYEFEY80ieHYWm5vyi0y1xd6JKm4R22MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNjgyOTcxMTgtOGUxYi0z
NDkzLThiN2YtNTI3NDcxZDhhMTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQBQ58YAwQB
Q58cMBgEAgACMBIDBwAgAUnw0RoDBwEgAUnw0SQwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAL7VgEj80k8b8
fykZS1+aEk4HPA7/SdXWBWR/758Mg3Y1JS5Geaq6Fz7Z6eHjbBdgSTMv6H1dyqFK
dxO9vvS9cbzxaz9E5X9VJSa4zzYpAeLhfifPW1Q4NIr+SYE3pgWyg4yRALbihtYA
pGEzGzwmVSaFNEnI9joFjqjFspn4Vl2KJyVJpC+E4UlTU4ssoJPJxlj+s5tXqg7z
vXhwVuItLGsCNk53HbZ/c8fXSZ4fivCX3Nge+3ZT52yNqluOASXyMl9NVkzDivrg
ObwbitFcMOBMSNGl786f9KG/frCVlh+PvFPCuPHE2iISkTZ+PKPMWMFaspPqx/6U
1HvpZgtVLg==
-----END CERTIFICATE-----
Generated at Wed May 13 14:23:48 2026 by rpki-client