Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/858ac750-fa54-38ba-b774-f726aabed8b2.roa
File:                     858ac750-fa54-38ba-b774-f726aabed8b2.roa (raw, json)
Hash identifier:          w9rif+KKIRufb61K6VNChorDjvsnlJa5OlzM2Y2J4tA=
Subject key identifier:   EC:C4:34:15:20:AA:57:33:20:AE:E8:0B:82:8C:81:ED:9E:F5:A1:B6
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584B2496D8D93A3E85215BE20380
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/858ac750-fa54-38ba-b774-f726aabed8b2.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     30058
IP address blocks:        66.90.100.0/24 maxlen: 24
                          66.90.103.0/24 maxlen: 24
                          67.159.10.0/24 maxlen: 24
                          198.16.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:d8:d9:3a:3e:85:21:5b:e2:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=b930d0c0-0538-4820-bcb8-a3fef5525d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:19:9a:ee:0b:8c:38:fb:c9:f4:55:77:29:12:
                    09:1f:36:dd:40:65:6e:08:8d:9c:e1:48:24:d7:6d:
                    b9:d8:b3:da:04:a1:83:5e:22:77:3f:a3:aa:35:b6:
                    4f:8b:0a:30:b5:8a:5d:e6:06:d9:47:66:e3:2f:3e:
                    bc:be:1a:04:36:59:c9:3f:ea:03:50:3a:b6:8f:e0:
                    2d:42:44:7f:96:29:d6:c5:3a:82:1a:a9:ed:18:a5:
                    a5:22:27:f7:0d:6a:0c:39:86:8a:ea:b2:05:35:c5:
                    9f:f1:71:90:97:c3:96:16:b4:b5:0b:6c:ff:19:15:
                    cb:a1:86:8e:b2:e6:b9:ac:fc:2e:1d:57:e7:1f:b2:
                    8c:a9:df:1b:30:cb:3e:22:4c:7d:2c:45:f6:c7:31:
                    de:27:6c:72:c0:f5:0a:3f:d0:ae:1a:0b:83:b8:ed:
                    54:15:c8:5b:bf:23:49:2e:38:15:58:14:9b:ec:43:
                    70:a3:99:79:4f:e4:ce:01:7e:8c:9e:db:8f:e7:9e:
                    2b:9b:53:03:c3:84:a5:79:1b:41:f2:68:38:e2:82:
                    52:19:4a:a0:49:65:4a:b6:e9:f8:92:f5:44:3a:fb:
                    0c:33:29:00:67:32:ae:e7:ad:89:9f:4a:b6:7a:fa:
                    25:58:31:30:55:3c:9b:28:20:cf:f1:bc:dd:b6:09:
                    89:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C4:34:15:20:AA:57:33:20:AE:E8:0B:82:8C:81:ED:9E:F5:A1:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/858ac750-fa54-38ba-b774-f726aabed8b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.90.100.0/24
                  66.90.103.0/24
                  67.159.10.0/24
                  198.16.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:da:47:9f:02:43:6c:c6:4c:85:7c:59:38:ee:32:0a:da:23:
         ca:b3:18:de:22:3b:8b:92:84:24:bb:42:b6:eb:1c:48:a5:5c:
         c9:00:cd:3f:85:77:e6:ce:5c:f9:8d:84:73:68:31:df:2b:f6:
         73:61:91:18:78:12:f1:35:f0:c5:ec:5b:b2:c2:e7:85:eb:bd:
         0a:bd:a6:8d:7a:45:c0:4c:55:58:f8:c4:8a:78:af:53:5a:11:
         96:46:e0:96:04:94:1e:0b:59:29:47:68:3b:80:57:b8:20:0b:
         aa:e4:50:0b:92:d5:1c:d6:01:28:02:7d:15:87:f6:82:ac:50:
         88:b7:f7:0f:92:8a:59:5b:9b:22:c1:ee:da:e5:f6:6a:b3:21:
         45:52:1e:31:c3:41:b7:c2:04:9f:5f:bc:43:ef:38:e9:78:d0:
         3e:6d:4a:26:0a:77:5e:3d:90:7e:04:1d:e4:dc:1e:bb:9f:55:
         23:e5:c1:18:b7:ad:3d:5d:40:4a:71:c1:84:eb:69:33:74:3a:
         95:c8:57:45:ea:55:be:15:43:a9:80:38:2d:63:30:44:34:2b:
         67:3f:79:16:fe:fd:d2:17:67:8a:39:9c:34:e1:74:c3:b0:c4:
         fc:c4:eb:20:82:03:3f:dc:2d:72:98:16:fb:03:29:45:5a:7e:
         72:46:12:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:37:59 2025 by rpki-client