Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/961b5219-9fb9-3d5a-b6ef-4fb052bd109d.roa
File:                     961b5219-9fb9-3d5a-b6ef-4fb052bd109d.roa (raw, json)
Hash identifier:          6XCEh3/D2DLD1k4BKPgG5O4kv+oZqXVd6npDCWwrkI0=
Subject key identifier:   79:6E:05:88:BC:E3:E7:5B:6B:CF:9E:75:38:7B:27:CB:40:73:21:DE
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F1CC7AC13F8385627308CF380
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/961b5219-9fb9-3d5a-b6ef-4fb052bd109d.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     174
IP address blocks:        67.159.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:ac:13:f8:38:56:27:30:8c:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=96438898-a619-42d8-8d9c-1a9d4edeb76c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:eb:d0:a6:f5:de:0c:23:d0:7a:74:f9:fc:d9:
                    f9:7d:ed:24:0f:5b:3f:d9:3b:b8:78:03:fa:53:8a:
                    a3:35:d4:6c:5d:b6:95:44:5f:85:52:65:df:9f:e8:
                    58:97:b0:72:e3:8f:a5:05:66:43:cc:43:43:a5:b5:
                    82:70:6c:8d:89:be:b2:31:ec:ce:05:05:89:86:37:
                    bc:01:98:c1:82:b2:10:46:f3:8f:50:23:ba:e3:26:
                    60:ad:fb:94:71:8f:f1:ee:70:4e:3c:ab:77:fd:f2:
                    dd:8f:66:2e:85:8c:0e:6c:28:8c:45:37:fe:58:1a:
                    f7:d0:d4:5a:d4:54:9d:63:6c:36:58:09:b6:47:cb:
                    d4:82:63:7f:fc:ec:50:0b:5b:19:61:33:bd:79:24:
                    b3:6c:d5:14:4d:08:3c:03:26:15:09:c4:36:c3:fa:
                    db:cb:69:87:76:5c:44:68:74:0e:28:07:a4:01:17:
                    34:e6:ec:15:36:99:60:cc:ee:72:b3:83:49:75:14:
                    90:98:f3:b5:67:6b:f4:50:f5:d7:23:78:9e:94:12:
                    4d:7d:89:84:b8:f1:26:12:44:63:d7:33:8e:1f:2c:
                    90:65:d7:6e:84:7f:a6:8f:67:b7:e4:90:f5:e3:15:
                    ed:8a:8d:7d:6c:e3:e2:8d:93:8d:3f:9a:df:e1:fe:
                    8e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6E:05:88:BC:E3:E7:5B:6B:CF:9E:75:38:7B:27:CB:40:73:21:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/961b5219-9fb9-3d5a-b6ef-4fb052bd109d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:06:4a:6c:8f:7a:2c:a7:b4:e8:cf:65:15:22:a3:81:eb:d0:
         2a:46:69:66:06:cb:73:de:be:33:c4:f5:b3:2d:27:a2:a7:b4:
         95:34:4e:ad:6b:1e:04:79:b8:ee:5a:d2:33:f9:a2:83:df:89:
         00:3d:3b:96:0c:00:a4:d8:43:c0:07:db:05:df:49:93:72:ac:
         36:3b:be:8e:97:45:f7:e4:45:00:f0:d1:3f:e1:52:44:26:99:
         68:f6:ee:12:0d:89:67:19:56:c3:31:68:ac:08:9e:d0:8d:7e:
         db:20:32:7a:01:cc:41:45:28:61:14:5e:d5:43:fb:36:4e:35:
         d7:bd:fc:60:7b:44:f0:7a:c3:c2:6a:3a:43:aa:51:f3:5d:37:
         ee:12:1e:cc:06:c6:65:52:f6:24:b8:31:7a:67:fd:73:e7:e7:
         ab:1f:75:42:9f:59:38:3c:f4:11:34:68:14:6f:43:3d:3f:c6:
         83:7d:57:ba:30:97:de:50:66:ef:db:a3:12:49:08:e2:6d:9f:
         7e:bb:38:e3:79:06:d2:11:6e:2f:c5:5d:3a:4b:38:34:af:68:
         9a:ac:91:ac:93:aa:72:bc:dd:ca:af:3b:cc:95:b2:2f:cd:4c:
         b2:15:cd:28:d7:cb:eb:f0:46:11:56:a6:28:15:8a:be:13:50:
         f5:5f:c9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:54:22 2026 by rpki-client