Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/09a05594-2aa3-3548-8e60-1c580a66bcd7.roa
File:                     09a05594-2aa3-3548-8e60-1c580a66bcd7.roa (raw, json)
Hash identifier:          TfjR8IQDB9fDR9t94Pi4U8O+Ntjba+9HWPK4pKRAnCQ=
Subject key identifier:   D1:2D:6C:E2:3B:2B:5E:7B:D9:DA:AD:CA:9A:85:C7:97:BD:32:89:3F
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584A2C201CA9F1CE61EBC733FF80
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/09a05594-2aa3-3548-8e60-1c580a66bcd7.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     1299
IP address blocks:        67.159.24.0/23 maxlen: 23
                          67.159.28.0/24 maxlen: 24
                          67.159.29.0/24 maxlen: 24
                          2001:49f0:d11a::/48 maxlen: 48
                          2001:49f0:d124::/48 maxlen: 48
                          2001:49f0:d125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:1c:a9:f1:ce:61:eb:c7:33:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=bf17e379-4341-4305-9c93-03436e818c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c0:b7:cd:21:cd:50:16:41:31:f7:d9:49:94:
                    6d:9a:ce:59:70:47:a1:88:2b:46:65:74:d7:89:87:
                    bd:ae:1c:61:1f:6c:5c:4f:0f:57:78:17:cf:1e:58:
                    97:b9:de:08:f0:73:ab:0e:3e:e9:2a:7f:5c:53:72:
                    2a:17:c5:88:24:64:ea:63:d0:23:07:6d:19:24:07:
                    a1:10:ed:21:20:84:ba:62:28:9a:b3:b1:e0:5f:a5:
                    3e:9a:28:db:37:67:d7:e3:24:08:12:da:73:e2:bd:
                    d5:83:b1:7d:4b:ce:33:e3:26:4a:eb:ae:3a:3b:73:
                    9b:e2:36:ed:74:32:1c:17:55:cb:b3:59:ba:08:76:
                    de:06:7e:d1:27:b3:c0:2b:93:14:5d:04:63:a2:dc:
                    c9:d2:aa:6d:01:a9:ff:31:26:b1:4b:ac:54:3f:b3:
                    cc:19:0e:02:66:7e:53:a4:3e:6b:22:d4:ee:dd:5f:
                    b3:8d:b0:98:36:cd:a4:18:cb:89:9b:d5:b1:80:dd:
                    d2:6f:41:2a:63:59:c3:83:bd:53:25:36:76:ec:82:
                    e3:89:eb:59:44:e8:8c:3e:e5:53:cb:74:83:18:cd:
                    59:2e:87:0f:c9:72:d9:71:a4:fd:b6:99:07:51:6c:
                    4c:09:30:91:66:ad:96:05:ee:8b:63:d4:d6:b8:a4:
                    42:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2D:6C:E2:3B:2B:5E:7B:D9:DA:AD:CA:9A:85:C7:97:BD:32:89:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/09a05594-2aa3-3548-8e60-1c580a66bcd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.24.0/23
                  67.159.28.0/23
                IPv6:
                  2001:49f0:d11a::/48
                  2001:49f0:d124::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:15:a3:97:9a:74:f7:df:13:60:5a:7d:d6:9e:22:9e:78:32:
         69:11:b1:13:b9:e1:cb:bc:8b:49:e9:61:e9:08:80:1c:ca:b5:
         7a:f9:5b:3d:72:62:7c:6e:e3:8c:a6:d0:47:ec:06:44:af:da:
         07:90:c4:db:e5:ac:c4:06:c6:2b:de:d1:c1:5e:3a:b7:f9:be:
         ff:58:f3:87:5a:0c:2e:be:42:ae:09:fa:39:1b:8d:24:08:70:
         e4:e6:21:91:4f:83:7e:e9:71:72:90:f5:5a:0a:8b:4b:b0:f7:
         4a:95:68:67:7f:37:52:68:4b:9c:34:2e:af:50:b8:0d:13:a8:
         88:68:98:6b:02:8f:9d:1f:69:24:fa:5a:8c:b6:29:52:4b:99:
         58:97:9d:f8:24:a2:2e:92:98:8a:74:f7:8a:b3:a7:54:4b:d1:
         71:50:6d:cf:61:5d:c3:d4:3d:d4:2c:e0:79:b5:3d:d1:9c:ab:
         23:ad:12:6b:39:d9:d1:94:f5:cc:ae:31:4e:00:60:bd:ba:61:
         79:50:d2:8d:1a:28:77:51:ff:ea:87:87:14:19:c5:19:71:87:
         6a:fe:22:af:3b:a1:e4:f8:c1:f6:aa:45:75:47:c2:34:89:10:
         81:87:74:ff:26:03:72:bf:2a:3b:0a:34:a0:b9:d7:86:87:c5:
         ff:96:95:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:17:53 2025 by rpki-client