Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/19c34cba-7e1b-3a52-bbce-812367f7fc40.roa
File:                     19c34cba-7e1b-3a52-bbce-812367f7fc40.roa (raw, json)
Hash identifier:          5bkia4g3vjvNxrNtbHUWKn/7EIkAwiIFPmTW5WADIwc=
Subject key identifier:   FD:2D:63:C8:9A:4F:EA:18:0D:56:98:FF:62:4C:B6:84:20:FF:52:D3
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584CAE573E492178501F92F44E40
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/19c34cba-7e1b-3a52-bbce-812367f7fc40.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     174
IP address blocks:        23.237.162.0/23 maxlen: 24
                          23.237.247.0/24 maxlen: 24
                          50.7.49.0/24 maxlen: 24
                          216.227.133.0/24 maxlen: 24
                          2001:49f0:d0d1::/48 maxlen: 48
                          2001:49f0:d122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:3e:49:21:78:50:1f:92:f4:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=2ed23ee5-be20-4419-ab6f-d51bde16877f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:60:f2:55:98:c7:fe:c5:cb:03:97:9c:43:d0:
                    41:75:27:5f:b3:5e:eb:ea:4d:b0:98:f3:c0:c6:96:
                    b8:4f:c5:6e:3a:9d:6e:35:87:b1:7b:81:15:a7:ba:
                    2c:5c:8a:75:45:3d:63:09:55:32:06:fe:c8:62:68:
                    e3:8c:e4:ec:d3:bc:d6:52:d5:94:8b:5d:68:10:da:
                    93:a8:74:2a:b4:ed:a9:8f:a6:35:bd:e0:c8:7b:b5:
                    06:77:e2:7f:02:f9:40:c1:ad:66:43:f1:7f:61:18:
                    81:18:98:a4:f4:5a:3a:65:23:55:9d:26:90:0b:71:
                    bd:c8:96:9a:22:d4:78:1d:2a:14:b7:39:ce:6c:a5:
                    e2:9f:dc:d0:ab:48:b7:31:10:91:0f:b6:3c:26:c3:
                    d8:cc:72:98:f5:60:49:c7:6c:e3:3e:35:2e:cc:bf:
                    2b:d1:95:b8:6b:d2:68:b4:6a:e1:6d:09:82:79:ea:
                    b4:63:8a:3e:1f:0c:91:bc:3e:57:e1:e6:8c:d9:79:
                    ef:7b:1e:61:fe:46:98:d4:ae:11:5d:d6:08:4f:3f:
                    d3:74:97:22:76:4f:4f:64:6f:79:b0:86:c6:cb:cd:
                    1f:95:fe:dc:df:08:12:e1:48:f6:27:31:60:6b:ec:
                    3d:45:08:36:45:dd:2f:5c:bb:f1:a6:67:d3:96:08:
                    f3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:2D:63:C8:9A:4F:EA:18:0D:56:98:FF:62:4C:B6:84:20:FF:52:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/19c34cba-7e1b-3a52-bbce-812367f7fc40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.162.0/23
                  23.237.247.0/24
                  50.7.49.0/24
                  216.227.133.0/24
                IPv6:
                  2001:49f0:d0d1::/48
                  2001:49f0:d122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:96:ed:46:b9:da:40:aa:e3:34:bd:9b:f3:4a:ea:37:4e:90:
         0f:90:c9:a9:70:ad:76:9c:03:82:8d:09:58:06:26:22:9f:5a:
         71:6d:2f:20:5c:22:d3:73:3c:1e:18:f0:78:26:72:87:c1:e2:
         01:0a:be:f5:b2:a8:e8:e3:94:64:88:47:a2:ed:27:82:0d:05:
         ec:58:21:c2:6e:37:38:0d:3e:76:c5:ec:de:57:39:05:4d:c7:
         e8:ec:ed:7f:c6:53:dc:be:7d:12:4a:eb:a8:7d:11:94:cf:4e:
         27:30:a3:94:9e:dc:aa:b4:d2:5b:fa:c3:7c:66:1f:d8:0f:96:
         13:41:75:6a:75:f0:26:e1:49:bf:10:a2:6e:60:94:45:91:48:
         05:0a:20:30:27:5a:66:f1:48:1c:24:0f:9c:e8:69:6b:16:8a:
         d4:91:8c:5b:f0:2a:73:a4:40:b9:b6:b3:83:9d:64:45:7f:5f:
         f3:57:57:1a:45:f4:4e:f3:d5:75:50:30:73:ca:9e:33:4e:18:
         b1:ee:28:4b:91:31:ed:57:4d:71:1a:92:a7:c3:85:2e:f4:95:
         0b:4e:f9:bd:73:8c:21:88:ac:b2:b2:76:70:29:89:6c:c3:d6:
         c4:87:31:60:25:a4:44:a3:07:df:0b:02:a4:a2:94:bd:a9:39:
         f8:33:9f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:30:47 2026 by rpki-client