Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e758c838-396f-35ba-a101-80b22009c45b.roa
File:                     e758c838-396f-35ba-a101-80b22009c45b.roa (raw, json)
Hash identifier:          UOhFTO59q6cnzgHomYUJblhBoRWGpIgmEG8IK6xYENE=
Subject key identifier:   C1:57:6B:C1:E5:84:56:60:78:9A:78:4C:5E:D0:2A:BC:16:76:1D:5B
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584B5DD1F4D7171A6286A568F6D0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e758c838-396f-35ba-a101-80b22009c45b.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     174
IP address blocks:        67.159.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:f4:d7:17:1a:62:86:a5:68:f6:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=a569395e-41b1-48ae-a006-8d99dfc1dd19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:13:ff:56:80:2c:c0:14:7f:0d:aa:71:38:b4:
                    59:5d:a0:4b:fb:df:c0:d9:e3:87:5b:e3:62:5e:64:
                    8e:60:db:d1:99:a7:c5:2d:00:2e:ac:04:b9:04:2c:
                    cf:d0:71:3e:aa:e8:fa:9d:74:a6:d2:96:7d:87:fe:
                    45:58:44:68:3c:6c:ed:eb:29:8e:38:4e:39:a8:df:
                    1e:66:f8:f7:62:d1:bd:aa:d2:7a:1e:64:20:a5:26:
                    5e:63:c4:a6:18:91:d4:b0:0a:02:0f:b0:dd:8c:55:
                    b8:0f:35:6e:82:9a:62:65:db:2b:e2:db:18:97:1d:
                    d7:bd:54:9a:92:a0:7d:f9:e6:ce:2d:99:e6:b1:da:
                    8b:7c:f8:42:06:2d:b5:f6:79:31:f0:03:fd:94:a8:
                    6e:49:5a:92:3c:d9:fe:c9:44:90:f2:cf:47:6f:d6:
                    7e:e7:e0:fd:25:d4:ee:14:96:49:2f:5e:fa:ba:48:
                    65:54:32:30:60:b7:24:84:59:0b:b5:ca:fe:33:db:
                    cb:47:48:81:12:89:b3:b8:05:07:57:f7:e0:d0:04:
                    7f:59:14:6a:e5:7e:8d:31:63:b0:02:f3:9e:f5:0a:
                    66:4b:b4:24:40:6b:6d:84:70:59:94:84:47:4a:72:
                    8b:07:4c:1c:4e:48:41:0e:18:97:f4:48:cd:b5:76:
                    24:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:57:6B:C1:E5:84:56:60:78:9A:78:4C:5E:D0:2A:BC:16:76:1D:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e758c838-396f-35ba-a101-80b22009c45b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:e8:3d:70:86:20:08:28:ff:fb:90:11:ed:60:36:19:f6:8f:
         ea:80:d6:5b:70:30:da:db:04:41:a7:a0:f9:b5:43:07:29:29:
         40:30:c0:ca:98:82:a4:e7:e3:39:56:fb:e1:96:d7:b4:8d:cf:
         68:b7:17:25:13:b0:b7:44:ce:f5:d7:32:a7:70:ed:d9:39:1b:
         9d:80:e5:50:a4:f2:65:f0:ea:c1:f2:f3:28:48:17:5d:4e:51:
         e8:8a:c7:bc:ab:9f:b9:f2:a1:5c:03:59:13:ff:85:37:85:0b:
         b6:e6:5b:ba:a7:88:ae:f3:2b:cc:00:73:a4:1e:cc:69:76:5e:
         01:8b:8c:79:48:2d:46:35:f3:b0:29:16:8e:4f:f8:f9:a4:a4:
         32:ad:50:1c:44:72:a1:87:02:bb:a4:23:14:61:5e:bf:2c:a7:
         55:30:2a:de:cf:9f:ba:74:ec:d5:54:13:cc:95:67:a4:32:3b:
         ee:53:a1:1f:7b:50:6f:13:95:e4:46:b4:17:6b:d9:cc:f4:13:
         b2:17:79:3e:86:2d:86:e3:f5:06:ea:e8:ac:cb:7e:5b:20:5f:
         07:19:6a:f6:73:e5:1a:03:41:b0:d0:fd:9d:ec:9c:fc:25:80:
         ca:ce:ad:7a:1f:f8:97:94:c6:6c:0a:77:3a:3f:b3:00:d8:ad:
         b1:80:29:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fTXFxpihqVo9tAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk
YTU2OTM5NWUtNDFiMS00OGFlLWEwMDYtOGQ5OWRmYzFkZDE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xP/VoAswBR/DapxOLRZXaBL+9/A2eOHW+Ni
XmSOYNvRmafFLQAurAS5BCzP0HE+quj6nXSm0pZ9h/5FWERoPGzt6ymOOE45qN8e
Zvj3YtG9qtJ6HmQgpSZeY8SmGJHUsAoCD7DdjFW4DzVugppiZdsr4tsYlx3XvVSa
kqB9+ebOLZnmsdqLfPhCBi219nkx8AP9lKhuSVqSPNn+yUSQ8s9Hb9Z+5+D9JdTu
FJZJL176ukhlVDIwYLckhFkLtcr+M9vLR0iBEomzuAUHV/fg0AR/WRRq5X6NMWOw
AvOe9QpmS7QkQGtthHBZlIRHSnKLB0wcTkhBDhiX9EjNtXYktwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMFXa8HlhFZgeJp4TF7QKrwWdh1bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZTc1OGM4MzgtMzk2Zi0z
NWJhLWExMDEtODBiMjIwMDljNDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ58QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMXoPXCGIAgo//uQEe1gNhn2j+qA1ltwMNrbBEGnoPm1QwcpKUAwwMqY
gqTn4zlW++GW17SNz2i3FyUTsLdEzvXXMqdw7dk5G52A5VCk8mXw6sHy8yhIF11O
UeiKx7yrn7nyoVwDWRP/hTeFC7bmW7qniK7zK8wAc6QezGl2XgGLjHlILUY187Ap
Fo5P+PmkpDKtUBxEcqGHArukIxRhXr8sp1UwKt7Pn7p07NVUE8yVZ6QyO+5ToR97
UG8TleRGtBdr2cz0E7IXeT6GLYbj9Qbq6KzLflsgXwcZavZz5RoDQbDQ/Z3snPwl
gMrOrXof+JeUxmwKdzo/swDYrbGAKcw=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:25:50 2025 by rpki-client