Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8db55952-c2ee-30a0-94ff-d5cc5748109c.roa
File:                     8db55952-c2ee-30a0-94ff-d5cc5748109c.roa (raw, json)
Hash identifier:          m8h0rcNk8Vw58cLELqK+Bpfo0DNTVBpNKWcu+y0k5qU=
Subject key identifier:   45:0B:3A:DE:04:CA:7C:28:EB:20:2E:FC:BF:7A:D4:A1:10:FE:11:10
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F8B0DA5B2323C57C8675E3980
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8db55952-c2ee-30a0-94ff-d5cc5748109c.roa
Signing time:             Sun 18 Oct 2026 13:00:12 +0000
ROA not before:           Sun 18 Oct 2026 13:00:12 +0000
ROA not after:            Sat 16 Jan 2027 14:00:12 +0000
asID:                     174
IP address blocks:        23.237.41.0/24 maxlen: 24
                          198.255.98.0/23 maxlen: 24
                          198.255.100.0/23 maxlen: 24
                          2001:49f0:d05e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8b:0d:a5:b2:32:3c:57:c8:67:5e:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Oct 18 13:00:12 2026 GMT
            Not After : Jan 16 14:00:12 2027 GMT
        Subject: CN=689c4c9f-fbaa-4e0f-a005-9a450e40fdd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a1:f7:81:af:e2:2e:87:31:fe:3c:27:bc:9d:
                    30:b9:9a:5e:96:8e:6b:50:37:47:b7:61:c4:34:0a:
                    ca:fc:8b:e0:01:85:3d:48:bb:e4:ed:2d:b2:b0:c8:
                    c7:24:87:0a:77:6b:16:0e:de:34:96:d4:16:49:41:
                    68:ca:0b:d6:17:36:52:ae:3b:e7:17:c3:55:45:2f:
                    87:50:7b:b4:36:12:3e:45:6c:bc:01:3a:3e:41:f4:
                    94:cf:47:78:5d:fa:a2:d8:9a:57:39:37:a4:a0:5d:
                    a2:32:e5:02:dc:1a:5a:6a:b0:a8:b7:19:04:2b:dd:
                    d6:b2:3b:87:26:cb:52:bb:b6:b5:23:39:01:ff:1f:
                    57:45:f6:ef:20:21:4f:dd:84:fc:ec:81:74:2c:16:
                    fd:85:04:46:73:bf:f5:f2:d4:5c:c1:09:8b:4c:44:
                    7d:f9:64:2c:b7:b1:40:30:f3:82:8d:b0:d1:50:da:
                    5d:fd:68:53:ed:c1:d4:da:1d:8a:21:fa:65:32:a7:
                    6b:73:30:60:1a:33:a0:de:f2:69:c7:2a:b8:d9:d3:
                    c0:bf:d0:fc:d6:f1:1f:7b:3f:e6:c6:05:d6:6a:68:
                    76:fb:d4:cd:a2:fe:9d:db:1e:7f:12:d1:07:a9:5f:
                    18:b3:bc:9e:a4:4d:ff:1c:85:38:35:4e:96:95:cd:
                    c2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:0B:3A:DE:04:CA:7C:28:EB:20:2E:FC:BF:7A:D4:A1:10:FE:11:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8db55952-c2ee-30a0-94ff-d5cc5748109c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.41.0/24
                  198.255.98.0-198.255.101.255
                IPv6:
                  2001:49f0:d05e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:17:86:1d:03:ba:35:a4:b4:f7:cc:69:a9:ed:52:ad:00:7a:
         91:da:c9:99:ff:29:2e:bc:82:3a:c2:d7:db:b6:a0:37:eb:31:
         d3:55:16:e2:f0:a9:32:b3:71:ba:df:ff:19:4c:50:b5:50:7c:
         24:3e:6e:2e:73:a5:e2:77:e7:93:c6:51:8a:34:47:99:bf:8a:
         78:d8:bf:cd:0c:93:66:33:2a:d1:bf:24:d3:0a:b5:a3:dd:bc:
         2d:72:fb:6f:9e:4b:8c:f3:ca:3c:33:36:8d:25:ce:34:48:02:
         68:e9:f7:42:00:d5:77:c7:06:96:ff:21:ad:74:b9:fa:04:17:
         90:9e:08:a8:6b:7e:66:25:b0:64:b3:f6:9d:b4:ff:65:a3:e2:
         6c:6e:cb:6e:4d:fd:35:d6:d6:23:94:35:3a:53:04:52:9e:4e:
         5b:12:47:dd:92:a2:fd:e6:52:ca:83:fd:31:66:7b:47:76:e3:
         95:a1:58:6a:38:18:8b:a8:55:fe:21:06:15:06:c7:34:f3:30:
         f3:59:58:a8:53:51:86:07:18:19:79:a0:7d:28:df:f2:80:9e:
         cf:53:05:b7:54:01:51:51:38:26:13:c4:20:1c:74:78:1a:bb:
         38:7f:02:1b:3c:52:b0:6d:c2:5e:25:f2:5e:b2:28:c8:35:d9:
         cf:ee:d3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:47:16 2026 by rpki-client