Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c4aff5f6-4c2e-351b-bc56-896db0726984.roa
File:                     c4aff5f6-4c2e-351b-bc56-896db0726984.roa (raw, json)
Hash identifier:          IAYRMdxPsCwW8Z/n6n6MIobwslarBO7FbDJicyjrZvA=
Subject key identifier:   00:9E:3F:41:B3:3A:D3:34:E9:AE:14:92:6D:6D:55:5E:77:8D:BC:FB
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584CB981D796F2F1A20CA8440580
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c4aff5f6-4c2e-351b-bc56-896db0726984.roa
Signing time:             Mon 02 Feb 2026 02:00:32 +0000
ROA not before:           Mon 02 Feb 2026 02:00:32 +0000
ROA not after:            Sun 03 May 2026 01:00:32 +0000
asID:                     30058
IP address blocks:        67.159.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b9:81:d7:96:f2:f1:a2:0c:a8:44:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Feb  2 02:00:32 2026 GMT
            Not After : May  3 01:00:32 2026 GMT
        Subject: CN=9734efdd-632e-48e3-b621-02db6f3cc883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7d:84:1d:b1:aa:06:6c:d5:4a:be:c2:29:2f:
                    a9:23:e0:3c:75:2c:7c:3a:3a:62:5a:0b:07:5e:21:
                    c7:39:1e:9a:47:55:63:63:7c:40:93:b9:e7:a4:58:
                    71:d8:8a:88:62:46:d2:af:93:94:cd:56:4b:b9:f4:
                    f1:1c:00:cd:10:b4:ee:58:3a:14:67:18:99:50:05:
                    bd:cd:98:56:76:81:68:4f:4d:34:84:ca:e2:2d:bd:
                    c2:b0:93:fa:f7:fd:a6:b4:8c:eb:95:f2:5f:74:c3:
                    f5:9f:1e:8b:22:14:e0:83:73:5d:fd:4e:a1:b8:2b:
                    0f:e8:f0:15:4a:14:ec:39:6e:5c:54:c8:6f:75:18:
                    97:a5:ff:79:9d:7a:69:78:7d:71:24:7a:df:3c:a5:
                    ad:28:2a:58:e6:11:a2:d3:87:2c:c0:8b:b7:73:2a:
                    fd:d0:1e:34:66:5d:1d:6a:f9:82:b6:8d:d7:61:c0:
                    b5:54:e7:83:ff:8a:3b:93:0a:e6:14:25:62:ca:e2:
                    cd:77:bc:ef:53:56:16:2a:54:39:e6:4d:7a:03:40:
                    1f:23:cc:7c:3b:ea:7e:7a:46:d5:90:72:da:8b:d4:
                    3c:a3:f9:ef:44:9b:d4:07:5a:3c:31:97:c0:59:bb:
                    01:11:99:79:03:aa:a8:c6:ff:ac:6a:0f:64:c0:0e:
                    1a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9E:3F:41:B3:3A:D3:34:E9:AE:14:92:6D:6D:55:5E:77:8D:BC:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c4aff5f6-4c2e-351b-bc56-896db0726984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:ea:bf:2d:07:e0:e0:37:a7:82:ed:e8:48:25:77:1c:ae:d1:
         9b:ab:63:9d:36:a7:60:47:33:a8:c1:1a:f0:20:26:b6:8d:a7:
         1a:7d:76:77:7d:15:07:4a:ad:77:4e:c5:53:41:1b:d8:70:6d:
         c4:18:4e:1f:8d:bb:87:4e:dc:0c:47:0b:eb:ff:45:1d:b8:ad:
         06:2f:a5:6d:bb:ee:5e:31:3f:b4:14:47:f0:89:6a:cc:41:77:
         4c:b1:aa:98:2b:18:91:a8:52:1f:8f:18:b3:af:98:ed:f2:57:
         bb:34:96:34:8d:af:4e:30:6f:f1:98:49:99:80:e0:9d:2f:0c:
         4d:8c:9d:fd:50:7c:fd:97:41:36:32:3e:89:c0:5c:62:6f:75:
         bf:b3:6b:78:19:bf:08:81:c7:64:ce:0c:51:a7:96:64:03:b2:
         80:b2:4e:24:6f:01:6f:a5:7e:62:94:b4:4d:2e:b0:aa:9c:38:
         91:da:de:3e:cd:42:36:fc:53:ef:7f:09:6a:bb:92:89:d8:40:
         bd:fb:61:5b:32:ff:f4:7e:df:6f:45:f1:a5:a2:af:7e:f2:ce:
         ef:be:64:fe:24:06:4b:4d:f0:2b:24:1d:be:93:bb:86:47:47:
         72:15:63:77:5d:f8:d4:71:f1:f8:ec:26:bb:de:e8:8b:39:5e:
         e8:94:6f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:38:55 2026 by rpki-client