Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f1a9d622-15e2-3efb-a4b2-06949c47c74d.roa
File:                     f1a9d622-15e2-3efb-a4b2-06949c47c74d.roa (raw, json)
Hash identifier:          hS2ik/Fq4ojpEuIGlyxVcn3SCL6Y4Vm6DIdF5t+erA8=
Subject key identifier:   C9:7B:DD:80:A3:34:51:97:7F:F8:32:F3:84:49:FA:73:39:B2:B3:BE
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584D41510158184620DA59643280
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f1a9d622-15e2-3efb-a4b2-06949c47c74d.roa
Signing time:             Sun 22 Mar 2026 17:32:20 +0000
ROA not before:           Sun 22 Mar 2026 17:32:20 +0000
ROA not after:            Sat 20 Jun 2026 17:32:20 +0000
asID:                     30058
IP address blocks:        67.159.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:41:51:01:58:18:46:20:da:59:64:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Mar 22 17:32:20 2026 GMT
            Not After : Jun 20 17:32:20 2026 GMT
        Subject: CN=3c795f9f-863a-4030-8cd7-fca8ec69186a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4e:90:4c:20:be:08:20:e6:f7:28:60:7e:d4:
                    73:4c:3b:6a:58:62:69:62:4b:23:ad:4b:59:87:fd:
                    17:ca:41:be:eb:52:d7:1f:7d:81:16:4c:01:b4:2f:
                    5f:a6:1f:f5:8b:98:38:6c:43:3d:87:d8:fe:22:9a:
                    d7:d1:2c:b8:30:02:f0:e8:44:62:40:d9:c6:b4:95:
                    6a:88:22:31:c7:b9:48:dc:bc:cf:d7:7a:63:d5:5b:
                    04:a5:ce:f2:69:24:60:ba:44:30:32:8a:ca:e6:86:
                    63:a5:7e:07:f2:4b:e5:78:c2:5b:d8:f5:d3:fb:18:
                    8e:75:12:ac:81:72:9b:98:e6:0c:98:b8:41:36:80:
                    6f:03:1b:74:8d:ca:89:f1:31:95:c2:66:52:fe:89:
                    bd:4e:9a:fa:f5:2f:e1:3b:1d:d2:b2:84:d1:3f:d0:
                    3f:c4:28:26:64:e2:f1:03:9b:a6:f2:6f:54:d5:a3:
                    a0:39:ea:62:5c:5a:26:af:a4:ed:ef:f7:d2:bc:49:
                    99:32:d6:8d:1d:09:ca:24:7a:ed:75:8f:1d:18:06:
                    c2:aa:11:df:54:af:da:db:be:dc:63:d8:59:da:c2:
                    da:66:a3:83:51:98:a3:fb:8c:ff:96:2d:08:f8:90:
                    4b:68:47:ff:cc:e3:13:bc:8f:b4:b0:5a:81:1d:1f:
                    9d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7B:DD:80:A3:34:51:97:7F:F8:32:F3:84:49:FA:73:39:B2:B3:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f1a9d622-15e2-3efb-a4b2-06949c47c74d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:f1:1a:53:12:a1:87:92:3a:a3:d5:79:dc:29:26:7f:d1:4c:
         1d:8d:2c:43:35:ee:ec:1f:2c:d1:a7:f9:79:7e:72:07:a2:4d:
         09:9f:29:fb:27:18:64:f8:f0:9c:53:95:60:c6:53:cc:aa:94:
         3b:43:af:6c:9c:32:ce:60:44:98:fb:43:09:6d:ea:05:a7:b4:
         8c:83:6f:d0:a4:eb:18:0d:09:ed:3e:11:46:4f:d2:2e:35:c2:
         ba:c4:53:33:2b:19:b2:54:6a:16:ec:23:57:57:d3:d4:87:71:
         d8:9c:d6:64:88:b9:b8:9a:29:2a:56:08:78:65:38:50:97:fc:
         d5:97:98:60:d0:7c:0c:ad:27:52:4d:ee:17:0d:b5:79:4c:4a:
         a2:d5:ff:2d:bf:06:c5:1b:3f:1d:5f:18:47:83:cc:1d:2e:1b:
         9a:3f:2b:97:26:7f:9f:2a:de:a0:23:fe:fd:c7:71:b4:1c:fc:
         81:ef:79:ae:52:5a:c4:68:97:c1:e4:bf:05:18:23:50:e4:be:
         87:0c:8a:7b:5d:da:da:a9:c7:01:b9:f2:c1:df:cd:59:3a:ef:
         b4:c4:b9:df:b4:dc:1e:4c:e0:a4:92:c3:60:05:c4:c3:28:54:
         47:a1:a5:cb:5e:1e:bf:15:88:ba:cd:c9:60:34:6d:16:a9:a0:
         a2:4c:d9:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1BUQFYGEYg2llkMoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI2MDMyMjE3MzIyMFoXDTI2MDYyMDE3MzIyMFowLzEtMCsGA1UEAxMk
M2M3OTVmOWYtODYzYS00MDMwLThjZDctZmNhOGVjNjkxODZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3U6QTCC+CCDm9yhgftRzTDtqWGJpYksjrUtZ
h/0XykG+61LXH32BFkwBtC9fph/1i5g4bEM9h9j+IprX0Sy4MALw6ERiQNnGtJVq
iCIxx7lI3LzP13pj1VsEpc7yaSRgukQwMorK5oZjpX4H8kvleMJb2PXT+xiOdRKs
gXKbmOYMmLhBNoBvAxt0jcqJ8TGVwmZS/om9Tpr69S/hOx3SsoTRP9A/xCgmZOLx
A5um8m9U1aOgOepiXFomr6Tt7/fSvEmZMtaNHQnKJHrtdY8dGAbCqhHfVK/a277c
Y9hZ2sLaZqODUZij+4z/li0I+JBLaEf/zOMTvI+0sFqBHR+dIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMl73YCjNFGXf/gy84RJ+nM5srO+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZjFhOWQ2MjItMTVlMi0z
ZWZiLWE0YjItMDY5NDljNDdjNzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ58wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEzxGlMSoYeSOqPVedwpJn/RTB2NLEM17uwfLNGn+Xl+cgeiTQmfKfsn
GGT48JxTlWDGU8yqlDtDr2ycMs5gRJj7Qwlt6gWntIyDb9Ck6xgNCe0+EUZP0i41
wrrEUzMrGbJUahbsI1dX09SHcdic1mSIubiaKSpWCHhlOFCX/NWXmGDQfAytJ1JN
7hcNtXlMSqLV/y2/BsUbPx1fGEeDzB0uG5o/K5cmf58q3qAj/v3HcbQc/IHvea5S
WsRol8HkvwUYI1DkvocMintd2tqpxwG58sHfzVk677TEud+03B5M4KSSw2AFxMMo
VEehpcteHr8ViLrNyWA0bRapoKJM2Vs=
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:11 2026 by rpki-client