Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/de1d8ef9-62b0-38d1-9587-cc35342d9073.roa
File:                     de1d8ef9-62b0-38d1-9587-cc35342d9073.roa (raw, json)
Hash identifier:          LI6a687w+XtfN859CM8I6IfKLF00O4ax2mpfnNqxBWU=
Subject key identifier:   DF:6F:71:B1:41:5E:B3:FA:5B:56:D3:0A:9D:25:B4:D2:B0:3A:7F:57
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F4977464FE017661E9DF3C400
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/de1d8ef9-62b0-38d1-9587-cc35342d9073.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     174
IP address blocks:        67.159.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:46:4f:e0:17:66:1e:9d:f3:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d6cbd439-d65a-433e-9084-3303494447b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:80:8f:ad:ae:ac:40:62:ec:44:10:90:60:77:
                    89:e6:86:e3:f1:85:24:6a:ce:38:11:c5:86:78:9c:
                    5c:a6:ee:f9:3b:7e:bb:92:81:3e:7b:80:d7:7b:fb:
                    8e:c0:ea:6c:a3:72:63:f8:d5:78:76:37:2f:07:93:
                    db:99:19:cb:a9:76:3b:e7:54:54:63:04:8c:b3:0a:
                    89:55:80:9b:5b:09:68:90:df:7b:39:99:01:59:95:
                    29:7b:cd:57:b0:ab:1e:63:4e:1e:52:bb:27:3c:5e:
                    49:4a:b5:15:2e:f6:0f:b7:ed:6a:a5:fd:cb:0c:d7:
                    38:3f:76:84:96:85:11:d6:a1:b7:dc:7e:42:38:ac:
                    5f:e6:a3:ee:77:5c:f0:30:33:fe:07:20:62:c8:ae:
                    f4:2f:9d:9c:60:d2:5c:c2:f8:20:33:72:25:5d:4e:
                    9d:78:7c:3c:df:25:16:71:75:d6:56:33:6b:a1:cd:
                    74:e1:fa:1a:6b:ce:08:fc:fb:6b:80:c6:45:e8:4c:
                    ab:f8:aa:37:5d:68:88:43:85:82:72:a9:e8:f7:0f:
                    cf:cd:4d:f2:b5:ad:a9:1c:03:a1:e9:e3:68:d7:c9:
                    5f:26:79:28:82:3f:e7:e5:4d:b2:8b:96:2c:da:35:
                    f9:52:29:d8:9f:cf:88:87:f4:2e:73:8c:5c:f3:26:
                    81:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6F:71:B1:41:5E:B3:FA:5B:56:D3:0A:9D:25:B4:D2:B0:3A:7F:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/de1d8ef9-62b0-38d1-9587-cc35342d9073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:7d:3f:69:37:0c:2f:ff:89:eb:bb:1e:89:a3:63:06:57:e1:
         d4:34:85:8f:4b:17:52:18:a3:2c:51:93:70:9d:3b:c2:7b:f3:
         c4:c9:e9:50:e3:ef:b0:93:c8:c4:9b:7b:6e:89:05:75:d4:89:
         a4:b5:dc:fc:b1:d4:69:6e:80:cc:b5:eb:ae:da:10:05:58:b5:
         e2:c8:39:7a:48:01:6d:ec:a7:72:25:23:81:ca:23:bc:32:df:
         05:ba:81:69:0d:8e:ec:35:99:5a:9c:b9:1a:b2:c1:19:32:b0:
         fa:32:cb:9f:00:4f:0a:7b:64:36:49:c1:79:2b:44:26:7c:92:
         b4:ba:4d:64:79:fe:59:a3:cf:a0:55:85:95:a7:0c:04:29:a7:
         bd:87:05:44:1c:03:e1:af:47:94:cb:28:f7:ac:19:70:5b:fa:
         d3:6b:50:d8:69:0c:ec:30:c4:78:51:1a:57:cd:c4:ac:e7:c1:
         62:94:f0:fc:96:c7:a7:db:6a:e3:b8:1e:ca:9d:07:0e:9d:10:
         62:96:dd:ff:49:09:c5:c3:62:7d:07:28:56:8c:c7:64:d1:07:
         b6:8f:02:60:63:18:a2:8c:09:2d:74:12:9b:27:30:e3:e6:97:
         1a:80:60:5b:81:92:77:86:17:12:94:68:a7:7f:ce:bb:82:f7:
         a6:cc:18:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 02:50:38 2026 by rpki-client