Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7ada39ba-6b96-341c-9db1-449979c69409.roa
File:                     7ada39ba-6b96-341c-9db1-449979c69409.roa (raw, json)
Hash identifier:          47EZn6LNwJaJ2ESiJSBxfOn+grkckR+FK9cCEWtch9k=
Subject key identifier:   E1:8F:20:5F:8C:6E:8A:61:47:C9:F5:84:8E:4F:B7:09:5D:E2:58:6A
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584ACF70FED1F7D6E4299D8DEA40
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7ada39ba-6b96-341c-9db1-449979c69409.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     1239
IP address blocks:        67.159.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:70:fe:d1:f7:d6:e4:29:9d:8d:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=8f1cffa6-be27-41bb-b6e5-287834be18c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:aa:52:64:60:bb:0d:98:c0:01:3a:90:9e:c0:
                    36:a0:9c:2b:cd:1b:34:8c:30:bf:5a:78:89:4c:1d:
                    b0:e5:12:7b:df:d9:8e:cf:fa:c2:d0:dd:f5:55:2b:
                    0a:29:c4:ec:01:4a:b5:3e:b5:25:97:e3:bf:33:96:
                    4b:4f:32:ab:6d:dd:61:fb:fe:01:3e:94:8a:b3:fb:
                    31:01:91:9f:6c:13:3a:b7:09:1e:8e:20:ca:0c:7b:
                    40:7d:cb:12:1e:53:07:20:3e:88:4e:b8:9b:bc:79:
                    82:9c:70:4e:a0:11:e6:56:aa:39:12:26:91:21:e3:
                    05:f7:6e:b9:3a:69:68:82:9c:47:0a:c5:94:ee:36:
                    bb:9e:c6:a1:e8:b3:0d:45:34:46:79:92:04:66:b6:
                    89:64:c5:d3:a7:e1:69:8d:3e:20:70:48:a6:82:e7:
                    67:8c:ea:8a:f1:e6:45:5f:b7:3c:06:5f:76:2f:af:
                    29:f4:f2:66:07:58:3f:90:0b:73:65:07:0f:21:f0:
                    db:1e:50:2f:5d:e4:44:83:0a:7d:37:c4:f5:d9:16:
                    7f:fa:7a:15:7f:c3:73:35:5a:e9:4a:a7:65:ad:af:
                    49:f9:22:c7:9d:05:e5:97:5f:f9:61:f2:2d:ca:26:
                    71:33:d7:20:a2:c1:ac:14:50:d6:25:95:fd:98:2e:
                    91:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8F:20:5F:8C:6E:8A:61:47:C9:F5:84:8E:4F:B7:09:5D:E2:58:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7ada39ba-6b96-341c-9db1-449979c69409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:81:f8:58:a7:59:51:1d:11:bb:b9:66:6f:d8:46:c9:40:ad:
         21:f5:d2:4c:52:a3:02:c6:17:eb:e4:4e:ed:02:65:d7:cb:ed:
         c7:35:7e:21:64:ba:15:70:04:6b:d6:cd:b4:67:db:85:61:78:
         cd:9c:70:c0:58:12:f9:a8:0c:1b:ee:4b:fb:40:1b:63:1c:07:
         44:a9:20:6d:ea:6e:bf:f5:d4:77:cb:67:07:19:fe:2b:de:b8:
         3d:e8:f4:80:60:2c:63:07:33:5a:df:46:c9:5e:4d:12:ad:33:
         ed:88:70:7d:b0:7b:7e:f1:3b:2e:52:e7:73:95:b7:c6:34:68:
         e2:64:bd:68:68:dc:f7:f7:f0:a7:ac:55:4d:a2:23:74:2f:06:
         e7:ec:ee:73:42:76:1e:a2:ae:27:86:c0:f0:20:01:c0:27:d4:
         1e:91:32:36:a2:f1:11:4f:28:23:27:67:e4:57:d6:11:2d:34:
         e3:ef:9b:d5:06:a9:3f:8e:17:4a:aa:18:eb:1c:90:95:e8:b4:
         7a:ab:6a:bd:aa:ff:10:b6:38:75:cb:6d:a0:a8:f4:61:ce:14:
         9f:f6:40:c5:d6:c6:53:20:a8:8c:57:e4:d5:aa:9f:fd:9c:37:
         5f:a4:2c:c1:97:8f:38:ab:c7:70:bb:51:a4:93:f6:17:1d:92:
         53:2f:33:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:46:16 2025 by rpki-client