Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/de1d8ef9-62b0-38d1-9587-cc35342d9073.roa
File:                     de1d8ef9-62b0-38d1-9587-cc35342d9073.roa (raw, json)
Hash identifier:          QJYTAYhg+K8PrKBgQAihDXlZsqebudlxN4VHf7NFhU4=
Subject key identifier:   19:4B:83:76:94:5F:FA:A1:04:DA:2A:AB:C4:35:F4:F4:D6:32:91:7C
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584B5DD1F4C53F413A85B93AD080
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/de1d8ef9-62b0-38d1-9587-cc35342d9073.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     174
IP address blocks:        67.159.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:f4:c5:3f:41:3a:85:b9:3a:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=3989a1a2-d519-40a8-8387-e870184e4ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f5:02:91:7d:b0:d1:4c:14:8c:66:a7:dc:1a:
                    f6:95:e5:d4:4e:58:9e:dc:23:3a:8e:50:18:78:63:
                    af:59:5c:92:57:62:a1:b8:e9:02:36:a6:1e:be:4d:
                    6b:99:5f:0d:3d:be:d8:7e:f5:e2:b0:26:d3:c9:cf:
                    73:e7:44:d2:ae:7e:64:3d:e8:c1:4f:fe:2b:ee:28:
                    80:85:41:c6:9b:cf:66:02:83:0b:db:5f:ee:63:c0:
                    27:f6:ec:fa:d5:f0:86:d2:e5:86:d1:58:64:f2:4b:
                    04:50:df:e5:74:65:c1:f7:62:2b:00:f9:4b:c7:7d:
                    0b:26:03:85:82:4e:29:02:05:9a:55:9b:b4:0c:d6:
                    a4:0d:db:73:c3:16:06:05:d4:b7:45:a8:a8:e7:1b:
                    26:68:79:11:9d:f7:f4:87:10:5a:a5:41:bc:45:16:
                    43:6b:6c:f6:de:0e:3a:2a:df:a4:24:d6:11:3c:b8:
                    a6:b5:b0:4e:6e:2d:a1:e8:03:4d:4c:62:75:58:5f:
                    75:72:3f:b3:63:00:21:01:22:09:11:a6:c7:74:f3:
                    0f:f3:59:ca:dd:4a:38:35:a4:bf:33:9d:87:04:2c:
                    8d:4f:09:13:fb:b8:fa:2d:af:a8:03:5b:6a:d1:dd:
                    77:d3:85:66:b8:5d:00:40:e0:fd:b5:85:ec:ff:97:
                    d6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:4B:83:76:94:5F:FA:A1:04:DA:2A:AB:C4:35:F4:F4:D6:32:91:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/de1d8ef9-62b0-38d1-9587-cc35342d9073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:e8:ef:aa:c9:90:e5:25:ea:63:dc:4b:70:89:c5:45:46:2e:
         15:a8:83:db:5a:c2:0c:5b:d6:c3:13:8c:75:71:04:f2:38:99:
         a7:75:e6:38:3c:d9:2e:6f:1e:23:00:70:2b:60:60:78:f9:29:
         da:83:78:57:e6:53:0c:c9:3d:8c:b7:90:4a:f7:cd:38:40:41:
         20:d2:83:36:bf:0c:1f:ca:08:21:54:72:0b:49:d5:40:61:9b:
         3e:04:4c:71:cf:f3:8b:fa:da:df:0e:0d:ee:70:cd:63:9c:cd:
         19:b7:7e:0e:50:bc:2a:96:12:56:a5:b5:ff:ef:f6:70:b6:22:
         fa:6a:15:bd:7a:f1:df:b4:85:53:05:a2:6d:14:0c:05:33:ac:
         c3:c9:c8:1a:a7:3c:65:71:5d:df:98:b9:f4:56:f4:ae:5e:63:
         74:3c:2a:a0:5d:61:53:10:a6:f1:20:a7:8f:52:d1:f5:d5:93:
         af:bf:1d:9e:9f:a4:b3:bb:39:ad:27:c4:f6:52:e4:9b:b2:ce:
         e7:23:4a:dc:7a:5c:90:52:5f:9b:43:35:51:36:4b:49:51:ac:
         05:a5:d9:8b:7d:0c:c7:27:c4:12:57:8d:be:0f:93:5b:f2:76:
         ea:a4:1f:80:c4:68:5f:31:4e:5d:b3:d1:79:31:2f:b0:41:43:
         d8:06:8a:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fTFP0E6hbk60IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk
Mzk4OWExYTItZDUxOS00MGE4LTgzODctZTg3MDE4NGU0YWQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvUCkX2w0UwUjGan3Br2leXUTlie3CM6jlAY
eGOvWVySV2KhuOkCNqYevk1rmV8NPb7YfvXisCbTyc9z50TSrn5kPejBT/4r7iiA
hUHGm89mAoML21/uY8An9uz61fCG0uWG0Vhk8ksEUN/ldGXB92IrAPlLx30LJgOF
gk4pAgWaVZu0DNakDdtzwxYGBdS3Raio5xsmaHkRnff0hxBapUG8RRZDa2z23g46
Kt+kJNYRPLimtbBObi2h6ANNTGJ1WF91cj+zYwAhASIJEabHdPMP81nK3Uo4NaS/
M52HBCyNTwkT+7j6La+oA1tq0d1304VmuF0AQOD9tYXs/5fWnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBlLg3aUX/qhBNoqq8Q19PTWMpF8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZGUxZDhlZjktNjJiMC0z
OGQxLTk1ODctY2MzNTM0MmQ5MDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ58PMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAITo76rJkOUl6mPcS3CJxUVGLhWog9tawgxb1sMTjHVxBPI4mad15jg8
2S5vHiMAcCtgYHj5KdqDeFfmUwzJPYy3kEr3zThAQSDSgza/DB/KCCFUcgtJ1UBh
mz4ETHHP84v62t8ODe5wzWOczRm3fg5QvCqWElaltf/v9nC2IvpqFb168d+0hVMF
om0UDAUzrMPJyBqnPGVxXd+YufRW9K5eY3Q8KqBdYVMQpvEgp49S0fXVk6+/HZ6f
pLO7Oa0nxPZS5JuyzucjStx6XJBSX5tDNVE2S0lRrAWl2Yt9DMcnxBJXjb4Pk1vy
duqkH4DEaF8xTl2z0XkxL7BBQ9gGijM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:26:31 2025 by rpki-client