Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/de1d8ef9-62b0-38d1-9587-cc35342d9073.roa
File:                     de1d8ef9-62b0-38d1-9587-cc35342d9073.roa (raw, json)
Hash identifier:          cq9IOZsZfyi/9oAJXtUFKe5gb/hHQ2nqqKwagJs7UsE=
Subject key identifier:   A0:1A:83:B5:66:D0:5A:32:68:C0:24:F5:D1:1B:71:0D:86:24:1E:C6
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F432858499DBF3A7548578D64DC0BE300
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/de1d8ef9-62b0-38d1-9587-cc35342d9073.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     174
IP address blocks:        67.159.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:3a:75:48:57:8d:64:dc:0b:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=2cb9f2b0-fe42-421d-a2c4-2131a64a1ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:16:a1:0e:dd:8f:5e:b1:49:95:50:b3:ac:b6:
                    57:86:88:c8:e0:4d:9d:c4:14:a4:f1:4a:a4:58:5f:
                    12:8c:43:d3:b5:fc:9b:b8:15:9c:41:93:6b:a4:ae:
                    4c:4c:e0:9c:4d:40:ce:06:75:74:cc:d6:13:3e:d8:
                    fe:00:e3:4b:5c:65:0d:16:48:74:af:0e:35:0d:81:
                    2d:27:9b:7e:40:d3:7a:f1:30:fd:dd:e0:56:63:5d:
                    84:ad:f0:bf:94:87:92:af:ba:ff:fe:51:02:93:cd:
                    94:04:f7:8b:28:04:96:a5:43:bc:94:a1:e6:11:46:
                    8c:18:27:d6:24:39:bc:b0:07:a1:ac:6a:5c:3b:b9:
                    0c:7a:82:dc:b5:c5:8b:7a:9d:87:53:a2:19:4c:fd:
                    94:4d:dc:61:bc:f2:bd:e1:ad:bb:04:bf:8b:ad:4f:
                    52:d1:92:30:69:9a:e0:de:dd:65:34:79:05:c6:aa:
                    6d:e5:e2:15:db:af:e1:d4:c6:d1:ef:99:42:c0:bd:
                    82:a2:a6:e0:b2:0b:58:68:de:8e:66:a6:0e:2f:5b:
                    2b:3b:37:df:44:80:35:8d:63:6f:aa:ec:4a:c9:d7:
                    15:90:44:ef:2b:b4:0d:00:52:cf:8a:30:30:86:22:
                    35:f5:ba:b8:1e:0d:da:0b:0b:aa:7a:66:e3:4c:68:
                    14:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1A:83:B5:66:D0:5A:32:68:C0:24:F5:D1:1B:71:0D:86:24:1E:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/de1d8ef9-62b0-38d1-9587-cc35342d9073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:80:f0:03:41:b9:34:49:e1:d1:44:78:fc:42:7c:a0:6d:a9:
         1e:bb:c6:31:b1:71:15:f9:60:c1:c9:bb:ca:03:af:2b:8e:64:
         c1:86:3d:ce:3a:a2:69:4f:da:30:81:6a:0c:2f:28:52:e9:cd:
         79:6f:92:2c:cf:29:c6:ad:b1:40:99:5e:10:82:c2:19:51:78:
         72:90:66:b1:92:07:07:42:ff:97:5e:74:9f:7d:59:7a:83:d6:
         5c:49:bb:28:42:02:8a:e9:d4:a9:9d:d6:b8:bf:d1:43:66:15:
         27:e8:67:bd:6b:fb:19:af:ac:70:aa:77:32:56:29:87:bd:53:
         ec:86:d6:42:fe:8a:6c:13:e5:80:44:f9:2e:8e:2c:f3:7c:ae:
         9c:97:21:70:5d:80:30:e7:41:9a:04:7f:1e:79:88:0d:8d:c8:
         03:da:d3:a7:6d:27:1b:9f:36:b2:dd:c7:2c:87:26:0c:00:e5:
         72:61:4a:d9:b6:6a:e4:2f:03:f8:c5:7e:3e:f0:3f:47:96:d2:
         e1:33:2e:ce:e0:7c:75:f8:44:7a:60:1a:f1:5e:2b:a0:ba:6b:
         0a:ee:01:89:c2:4e:68:78:3f:64:7b:98:e3:b4:20:e9:3e:8e:
         b4:ed:fd:1d:c0:71:87:36:8d:34:77:a7:05:a4:20:ec:8d:b1:
         70:a2:8a:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzp1SFeNZNwL4wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk
MmNiOWYyYjAtZmU0Mi00MjFkLWEyYzQtMjEzMWE2NGExZWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhahDt2PXrFJlVCzrLZXhojI4E2dxBSk8Uqk
WF8SjEPTtfybuBWcQZNrpK5MTOCcTUDOBnV0zNYTPtj+AONLXGUNFkh0rw41DYEt
J5t+QNN68TD93eBWY12ErfC/lIeSr7r//lECk82UBPeLKASWpUO8lKHmEUaMGCfW
JDm8sAehrGpcO7kMeoLctcWLep2HU6IZTP2UTdxhvPK94a27BL+LrU9S0ZIwaZrg
3t1lNHkFxqpt5eIV26/h1MbR75lCwL2CoqbgsgtYaN6OZqYOL1srOzffRIA1jWNv
quxKydcVkETvK7QNAFLPijAwhiI19bq4Hg3aCwuqembjTGgU8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKAag7Vm0FoyaMAk9dEbcQ2GJB7GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZGUxZDhlZjktNjJiMC0z
OGQxLTk1ODctY2MzNTM0MmQ5MDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ58PMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALiA8ANBuTRJ4dFEePxCfKBtqR67xjGxcRX5YMHJu8oDryuOZMGGPc46
omlP2jCBagwvKFLpzXlvkizPKcatsUCZXhCCwhlReHKQZrGSBwdC/5dedJ99WXqD
1lxJuyhCAorp1Kmd1ri/0UNmFSfoZ71r+xmvrHCqdzJWKYe9U+yG1kL+imwT5YBE
+S6OLPN8rpyXIXBdgDDnQZoEfx55iA2NyAPa06dtJxufNrLdxyyHJgwA5XJhStm2
auQvA/jFfj7wP0eW0uEzLs7gfHX4RHpgGvFeK6C6awruAYnCTmh4P2R7mOO0IOk+
jrTt/R3AcYc2jTR3pwWkIOyNsXCiigg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:26:23 2025 by rpki-client