Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/77e799cb-a436-3318-85a0-aa9c82570b24.roa
File:                     77e799cb-a436-3318-85a0-aa9c82570b24.roa (raw, json)
Hash identifier:          IvcTpxaGYemIoywStCcgDjBILCyy3jLruGE8sV+4tp0=
Subject key identifier:   42:C1:AF:3D:B6:E7:96:F8:7C:10:BF:22:1A:53:D0:59:D6:D5:85:F1
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584DADAADED873BCE0D7FE7309C0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/77e799cb-a436-3318-85a0-aa9c82570b24.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     174
IP address blocks:        67.159.24.0/23 maxlen: 23
                          67.159.28.0/24 maxlen: 24
                          67.159.29.0/24 maxlen: 24
                          2001:49f0:d11a::/48 maxlen: 48
                          2001:49f0:d124::/48 maxlen: 48
                          2001:49f0:d125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:de:d8:73:bc:e0:d7:fe:73:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=701e78f7-4c70-48a6-9348-400da311a0e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cc:6d:34:0b:04:02:ce:6b:59:c5:4d:ac:ae:
                    2c:28:b8:7a:7c:92:12:9e:21:69:15:8a:61:fd:7a:
                    1c:2c:79:d1:ae:af:c0:c2:78:a4:48:05:d6:13:e0:
                    47:b8:9b:bd:7c:56:84:97:ce:95:13:ba:31:56:c0:
                    41:47:7a:1a:e0:f9:de:f8:59:2d:32:29:a4:43:4e:
                    95:73:48:43:68:dd:f3:13:f0:b7:de:f9:4a:08:b7:
                    e2:c9:1c:43:54:54:08:cc:b9:d2:15:4d:38:f4:36:
                    af:1e:78:5b:0c:aa:b4:d9:fb:8b:32:ae:48:bc:b3:
                    e9:17:00:25:86:cf:7a:f1:82:0d:6b:0b:97:55:56:
                    c3:0a:39:85:05:56:6f:71:5a:fc:8f:f1:ac:8b:7d:
                    c6:a0:72:7f:c7:d8:91:e4:19:de:e6:62:32:b6:7f:
                    82:86:4f:26:14:0c:ae:ec:79:79:84:9b:d2:0f:a3:
                    87:f2:58:39:0a:75:44:01:fd:f7:c7:56:4c:68:a4:
                    d7:7a:c6:2f:c3:9b:69:e8:e1:02:6c:0a:4a:12:f8:
                    3c:9b:e8:91:4b:02:fe:86:76:9f:cb:a2:e3:f0:83:
                    d3:6b:16:5f:5c:37:db:37:6c:65:96:a1:54:d1:e2:
                    a4:1d:b0:ac:02:4b:e1:ce:b8:d6:b9:0c:53:6b:d9:
                    b3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C1:AF:3D:B6:E7:96:F8:7C:10:BF:22:1A:53:D0:59:D6:D5:85:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/77e799cb-a436-3318-85a0-aa9c82570b24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.24.0/23
                  67.159.28.0/23
                IPv6:
                  2001:49f0:d11a::/48
                  2001:49f0:d124::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:71:b8:3e:95:66:89:5e:26:a6:de:10:ab:bc:e1:a7:94:7f:
         b6:cf:04:f9:8c:81:74:27:94:ad:16:f8:55:fb:17:b6:dd:3d:
         dd:aa:90:b2:45:4e:9c:a0:be:cb:f6:a7:d0:35:59:dc:e5:05:
         2c:7e:2d:a5:60:28:b6:df:09:56:1a:56:f9:47:00:9b:78:18:
         f1:07:6f:b5:cc:c6:13:d8:5f:37:64:e4:47:65:97:c0:34:4b:
         56:a9:c3:84:e9:5e:be:24:f2:bd:b6:c6:40:ad:e8:7f:f8:22:
         b3:60:6b:d1:30:d5:05:6f:3a:78:5c:19:2a:b3:49:c1:78:15:
         5b:44:a7:d6:49:0f:07:9c:1b:81:71:90:4f:cc:27:b1:36:7d:
         3f:f9:1b:e0:8c:fc:b6:15:84:d8:43:35:36:c3:2f:e5:c6:4b:
         81:b8:80:ab:63:0d:9d:5e:ad:0d:73:64:79:9c:83:f7:b5:b1:
         92:b4:ed:f8:4b:17:50:d4:5a:c1:a1:43:fa:7a:c5:af:94:36:
         7d:b3:54:61:26:63:19:ee:ca:5c:c4:f7:b2:d0:bc:fe:5f:3a:
         a9:4e:de:9c:28:c2:35:e7:8b:67:54:31:e9:b6:b1:aa:d8:bc:
         d1:d1:ac:15:03:ea:f8:b1:b2:d0:5a:0e:14:3e:d6:40:6f:e1:
         3e:aa:a5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:10:45 2026 by rpki-client