Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7ada39ba-6b96-341c-9db1-449979c69409.roa
File:                     7ada39ba-6b96-341c-9db1-449979c69409.roa (raw, json)
Hash identifier:          hRKMCKoFtfDlINXak+Bpp/U7mHHrwdTvnQQXSSEo9AY=
Subject key identifier:   95:B2:04:50:0B:06:0E:A9:C5:62:27:B0:94:8C:73:BF:30:AE:84:0C
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584EF2E76FDC8C3855A3399F8AC0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7ada39ba-6b96-341c-9db1-449979c69409.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     1239
IP address blocks:        67.159.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:6f:dc:8c:38:55:a3:39:9f:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=554c21fb-e930-416a-abab-bf33c1f3c053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:32:15:72:a1:c9:b7:30:09:57:6a:34:64:ba:
                    b5:22:99:71:00:0c:16:93:79:a2:15:e4:db:bd:42:
                    e7:99:1e:ed:e1:93:f8:ef:c7:3d:4c:31:b8:8d:84:
                    73:7a:36:0a:0c:12:02:b3:59:e4:8c:88:14:ed:9d:
                    14:a2:68:46:29:b5:af:e6:18:69:23:6b:d5:8c:48:
                    ba:3d:3b:e7:2a:05:73:35:c3:dc:f0:8f:4c:cb:56:
                    85:49:7c:00:3c:3f:7f:53:a9:ef:fc:dd:35:27:9e:
                    e4:bc:4f:ad:77:0f:e3:d5:f7:cc:d0:f5:93:ff:5b:
                    1c:67:f1:02:21:ac:5b:d2:45:0d:12:f1:89:4f:11:
                    da:3c:11:0b:f3:4d:f7:59:21:dc:9d:19:74:e8:87:
                    c7:32:c3:b8:cf:81:7b:7c:3e:98:26:be:06:ab:00:
                    88:9c:8d:5f:4d:27:79:a3:08:5d:3f:ab:a9:31:ba:
                    2d:ae:71:f0:e9:ca:aa:e9:7b:23:f5:93:36:1b:ec:
                    ae:98:3c:5a:0f:81:78:99:21:ca:d2:d8:93:a6:d4:
                    39:36:f3:1d:0e:1c:4d:32:5f:bf:0c:c7:be:ae:4a:
                    24:94:bb:ba:18:7e:01:24:93:83:40:91:c0:fd:2c:
                    72:c3:76:ed:91:72:07:52:02:d1:26:22:4e:6f:78:
                    56:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B2:04:50:0B:06:0E:A9:C5:62:27:B0:94:8C:73:BF:30:AE:84:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7ada39ba-6b96-341c-9db1-449979c69409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:d6:cd:92:4a:2a:e9:28:44:a7:94:59:90:1c:ff:9e:c3:ff:
         dd:e1:56:d7:fa:14:5a:56:6b:63:96:ea:8f:e7:6d:74:a2:d1:
         d1:0d:43:3f:7a:18:89:47:8a:53:57:98:fa:58:60:92:74:cf:
         42:96:02:34:20:b3:d5:d3:bd:07:3a:80:fc:00:75:62:23:41:
         e9:e1:4d:2a:68:6e:12:04:96:27:5d:06:01:79:06:a6:57:d0:
         90:fb:4b:40:a8:df:2a:34:46:e4:68:00:d7:69:26:4e:b2:b3:
         a4:92:74:fc:f3:12:5d:d1:34:8a:a8:65:71:c0:8f:0b:94:d4:
         dc:b9:d5:89:82:d9:e8:3a:66:82:bb:2e:8f:45:49:44:c7:d4:
         09:48:6a:cb:01:dd:6d:50:da:63:fd:8c:db:bd:fe:a0:53:95:
         76:a4:e4:90:31:43:17:94:a8:8b:31:95:47:6c:1b:93:ab:e9:
         3d:65:cf:db:cd:d1:04:05:29:72:81:9d:13:40:93:95:f7:2a:
         bb:02:6e:5f:62:a2:99:64:e8:6c:18:58:04:d8:38:a5:99:42:
         68:b8:53:03:05:7d:51:dd:7b:be:4c:86:64:ed:52:57:dd:2f:
         20:83:59:ca:65:04:07:1f:90:cc:ad:ff:42:1e:ab:e7:f1:10:
         ee:b1:7a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:23:39 2026 by rpki-client