Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/20efb6fb-1edd-3db8-83b8-b797e412637a.roa
File:                     20efb6fb-1edd-3db8-83b8-b797e412637a.roa (raw, json)
Hash identifier:          XMQbmIq1MuRCOM89AfyAXOR5LtN623f0n0H3DFxdKd0=
Subject key identifier:   D3:02:89:DA:FF:25:43:E7:65:7D:A1:F7:50:C3:77:EF:15:7C:02:C3
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584EF7177B071FDFBFE5633DABA0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/20efb6fb-1edd-3db8-83b8-b797e412637a.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     30058
IP address blocks:        23.237.148.0/23 maxlen: 23
                          23.237.150.0/23 maxlen: 23
                          23.237.152.0/23 maxlen: 23
                          23.237.154.0/23 maxlen: 23
                          23.237.156.0/23 maxlen: 23
                          2001:49f0:d0c4::/48 maxlen: 48
                          2001:49f0:d0c5::/48 maxlen: 48
                          2001:49f0:d0c6::/48 maxlen: 48
                          2001:49f0:d0c7::/48 maxlen: 48
                          2001:49f0:d0c8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:7b:07:1f:df:bf:e5:63:3d:ab:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=e5007db2-111c-4cae-bd79-bbb3fc353c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ae:ea:b1:78:d1:ec:4e:bd:94:e8:37:2b:3d:
                    e0:2e:ef:23:e5:74:4e:d8:8f:b8:5c:ca:d0:5b:2e:
                    57:48:01:5e:95:8a:0a:5b:a0:a3:2d:f2:12:eb:70:
                    be:83:a7:66:86:fe:13:b7:70:51:a9:21:8f:2b:02:
                    dd:26:bc:17:2f:c3:95:f5:49:d7:0e:62:48:54:42:
                    2f:1b:c1:37:f6:01:c6:ec:b4:85:2a:e2:c3:21:85:
                    f2:15:8c:02:77:2f:5c:f3:5e:37:ed:07:b1:4f:88:
                    74:d7:55:8b:9d:e1:23:bd:64:04:83:c4:c0:45:21:
                    e2:26:f5:0d:18:01:00:af:21:62:c8:d2:5e:14:39:
                    73:05:6e:12:8a:89:97:c5:64:b0:50:9d:a5:c9:17:
                    4b:b3:27:cc:25:4f:b0:0f:92:d7:af:10:7c:b9:8c:
                    a4:ac:28:5e:3c:5a:08:ba:1a:ec:cb:24:14:1d:6f:
                    ff:e8:ab:5d:3c:01:90:0b:48:72:85:6b:8b:f8:61:
                    18:bb:6f:b5:58:6d:a0:4a:ad:af:ff:40:37:3e:2b:
                    84:b0:8a:0c:7e:82:a5:6e:86:a7:02:97:40:4d:73:
                    a6:49:c9:43:b3:50:24:1b:52:75:4f:30:19:1f:ee:
                    0e:e1:8b:51:e2:1c:f7:55:98:6d:6f:5e:0a:a4:13:
                    de:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:02:89:DA:FF:25:43:E7:65:7D:A1:F7:50:C3:77:EF:15:7C:02:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/20efb6fb-1edd-3db8-83b8-b797e412637a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.148.0-23.237.157.255
                IPv6:
                  2001:49f0:d0c4::-2001:49f0:d0c8:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:c2:42:58:ca:f3:8e:c1:61:b3:49:7f:78:46:67:4b:3a:5c:
         d7:e5:e0:9e:5d:0e:61:4f:63:91:45:08:87:32:95:ca:11:a2:
         e7:a1:f4:4d:70:00:5c:95:8a:eb:9b:c7:ad:62:25:e4:b9:97:
         de:be:18:06:22:a2:70:db:bd:b5:f8:e6:2f:6a:ea:68:b7:1d:
         ee:3d:13:47:d8:e0:28:0e:64:3a:ea:a4:cb:78:a4:eb:23:f3:
         d4:4e:86:d4:79:b5:82:88:1e:b3:d6:2d:ce:51:be:fb:7d:c2:
         df:81:f0:73:c2:4c:de:96:df:89:41:28:d7:00:73:53:f5:3a:
         b3:55:db:de:8d:be:f6:1a:93:93:e8:3d:ce:b6:7a:01:dd:ef:
         fd:cd:53:57:68:64:fa:9a:48:6b:5f:d6:42:25:2a:a5:0d:0a:
         e9:cb:f5:ef:73:68:e9:c6:e1:46:a8:ad:9a:e3:aa:1d:aa:b8:
         41:cf:dd:be:1f:0c:bd:3b:80:38:94:f9:9d:b8:92:d1:c1:0c:
         62:ab:9b:05:a4:45:c8:d5:c2:a2:e3:ee:41:f7:42:a4:4f:95:
         81:00:9b:a7:a1:46:28:3e:69:fe:08:a3:87:1e:f5:07:53:04:
         4c:b8:31:ea:b4:6f:48:4c:01:94:a3:2c:ea:8c:b4:2a:b4:2b:
         d3:7f:eb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:26:05 2026 by rpki-client