Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/96e227a2-d436-397b-82d9-f9ece14a3136.roa
File:                     96e227a2-d436-397b-82d9-f9ece14a3136.roa (raw, json)
Hash identifier:          ovAaEfPbuUQjWoQZHk9a/jAHzLj+SKONdY+n8oGfByo=
Subject key identifier:   27:BD:AF:5B:BC:31:01:6F:9C:F5:81:D4:26:FA:51:85:06:89:91:C2
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F7E7DB612917E6FDD231E82C0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/96e227a2-d436-397b-82d9-f9ece14a3136.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     30058
IP address blocks:        23.237.59.0/24 maxlen: 24
                          216.227.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:b6:12:91:7e:6f:dd:23:1e:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=80e4392c-8fd6-46d6-84f6-bda0fbc49cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d0:77:f6:d0:18:e1:d3:69:53:67:79:35:8b:
                    ec:1f:4e:d1:72:4e:cd:28:ed:c8:b8:22:f7:f6:43:
                    d9:0e:47:7e:bc:54:e8:7c:55:9c:ef:82:b5:ae:84:
                    28:5d:6d:41:de:03:d4:31:dd:d7:89:69:dd:c1:ec:
                    68:70:34:d5:04:2f:19:8b:9c:c9:36:1a:2b:b4:57:
                    9e:56:fc:1d:6d:3b:da:3f:e4:a3:51:1f:c7:63:05:
                    ed:3d:31:c6:29:44:db:25:34:2e:95:80:d7:53:89:
                    e0:ec:49:90:9c:ca:58:21:a3:24:6c:8c:75:75:70:
                    6b:8a:f5:bf:99:73:22:5a:ef:2a:d3:42:f5:f0:c4:
                    24:6e:ab:82:61:4b:de:72:39:93:4e:19:4f:13:15:
                    d3:7b:f9:ba:36:bb:8c:59:30:c8:07:01:84:b2:f7:
                    14:7e:73:c6:ae:6a:f7:81:18:b3:6f:1e:a1:9d:8a:
                    ff:4e:9a:53:a3:c4:22:13:d8:99:ed:f5:df:92:91:
                    a9:8e:8c:3e:96:2f:99:31:1e:8f:86:67:b7:70:8b:
                    9f:1d:64:e8:3d:69:8b:2d:56:a3:b3:0f:67:55:c3:
                    18:cc:a5:cf:f4:8a:57:6b:aa:65:56:0a:1f:ec:43:
                    7c:45:c5:9a:04:c7:0a:09:d7:bc:37:0d:3f:f1:4a:
                    dc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BD:AF:5B:BC:31:01:6F:9C:F5:81:D4:26:FA:51:85:06:89:91:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/96e227a2-d436-397b-82d9-f9ece14a3136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.59.0/24
                  216.227.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:c0:cf:e8:73:17:50:f2:76:c0:f8:7c:ce:59:6f:f6:3b:82:
         d8:55:8b:04:b6:6a:fd:91:ec:e2:e3:6b:ef:ba:27:d5:04:bd:
         a8:0e:b5:75:03:93:5f:aa:33:3d:72:8a:a7:3e:7b:88:0f:81:
         4f:4c:f0:13:c5:a8:1b:d5:15:43:4a:65:13:b9:a6:ac:69:93:
         9d:b1:7c:bd:0d:7d:43:6f:56:1e:59:04:7d:85:de:48:42:f9:
         e4:f9:0a:1e:9b:cb:e2:2c:8e:9b:69:e9:0e:4b:cb:9b:15:fd:
         fc:88:7c:4d:04:0c:ab:9d:2f:89:f2:0d:8d:10:30:ba:be:de:
         24:f6:57:1f:9e:e1:69:24:26:36:9e:2d:60:67:16:b7:ae:e0:
         14:e4:e5:13:41:43:d8:74:94:cc:ed:16:ca:36:19:06:a4:6d:
         83:ee:ea:67:89:cb:12:31:8f:34:f4:e2:2f:c1:18:99:fd:92:
         3a:e9:cd:bf:f0:c8:96:04:b1:b5:25:be:88:79:69:80:2e:e9:
         12:68:89:65:e7:08:89:87:2c:d9:77:6e:cb:64:73:90:7d:0d:
         df:e2:ac:bb:a0:b0:9a:92:d4:80:86:eb:7e:94:63:99:68:c0:
         f5:87:de:b5:a0:22:fc:90:7b:ce:4a:d6:76:78:ae:fc:01:d9:
         ef:da:62:85
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9+fbYSkX5v3SMegsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk
ODBlNDM5MmMtOGZkNi00NmQ2LTg0ZjYtYmRhMGZiYzQ5Y2IwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdB39tAY4dNpU2d5NYvsH07Rck7NKO3IuCL3
9kPZDkd+vFTofFWc74K1roQoXW1B3gPUMd3XiWndwexocDTVBC8Zi5zJNhortFee
VvwdbTvaP+SjUR/HYwXtPTHGKUTbJTQulYDXU4ng7EmQnMpYIaMkbIx1dXBrivW/
mXMiWu8q00L18MQkbquCYUvecjmTThlPExXTe/m6NruMWTDIBwGEsvcUfnPGrmr3
gRizbx6hnYr/TppTo8QiE9iZ7fXfkpGpjow+li+ZMR6Phme3cIufHWToPWmLLVaj
sw9nVcMYzKXP9IpXa6plVgof7EN8RcWaBMcKCde8Nw0/8UrcmwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFCe9r1u8MQFvnPWB1Cb6UYUGiZHCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvOTZlMjI3YTItZDQzNi0z
OTdiLTgyZDktZjllY2UxNGEzMTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF+07AwQB
2OOwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGLAz+hzF1DydsD4fM5Zb/Y7gthViwS2av2R7OLja++6J9UE
vagOtXUDk1+qMz1yiqc+e4gPgU9M8BPFqBvVFUNKZRO5pqxpk52xfL0NfUNvVh5Z
BH2F3khC+eT5Ch6by+Isjptp6Q5Ly5sV/fyIfE0EDKudL4nyDY0QMLq+3iT2Vx+e
4WkkJjaeLWBnFreu4BTk5RNBQ9h0lMztFso2GQakbYPu6meJyxIxjzT04i/BGJn9
kjrpzb/wyJYEsbUlvoh5aYAu6RJoiWXnCImHLNl3bstkc5B9Dd/irLugsJqS1ICG
636UY5lowPWH3rWgIvyQe85K1nZ4rvwB2e/aYoU=
-----END CERTIFICATE-----
Generated at Sat Oct 24 11:15:43 2026 by rpki-client