Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/2cd7744b-370f-371d-9b01-0334b9c10fe9.roa
File:                     2cd7744b-370f-371d-9b01-0334b9c10fe9.roa (raw, json)
Hash identifier:          oeytGvy0mkEyCUc2fNCy9sV+RdsAuKMig7h9ofHDy9I=
Subject key identifier:   CB:7C:CF:CB:94:72:42:80:01:75:C1:09:38:6E:A6:02:87:99:9D:AC
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F9BCDF3D57BE2FA7F432C7400
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/2cd7744b-370f-371d-9b01-0334b9c10fe9.roa
Signing time:             Sat 24 Oct 2026 13:00:12 +0000
ROA not before:           Sat 24 Oct 2026 13:00:12 +0000
ROA not after:            Fri 22 Jan 2027 14:00:12 +0000
asID:                     1239
IP address blocks:        23.237.2.0/23 maxlen: 23
                          23.237.4.0/23 maxlen: 23
                          2001:49f0:d069::/48 maxlen: 48
                          2001:49f0:d06a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9b:cd:f3:d5:7b:e2:fa:7f:43:2c:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Oct 24 13:00:12 2026 GMT
            Not After : Jan 22 14:00:12 2027 GMT
        Subject: CN=2279fca3-cdea-492e-a29e-85ebb778e3b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b0:91:df:dd:a0:2e:7d:9f:43:9f:a0:38:cd:
                    2e:71:ee:c9:e4:93:09:89:06:d3:91:7a:1c:63:f7:
                    9e:84:50:77:1a:da:22:7d:6b:6d:a1:9d:b8:98:ec:
                    86:3a:06:0c:cc:12:17:08:03:07:b7:54:ef:6d:00:
                    ee:50:fa:6c:d1:0f:82:0d:a6:0c:81:42:08:a6:2f:
                    79:12:c7:0e:d3:1a:ad:dc:f1:e1:f6:fa:22:5f:21:
                    d4:96:f9:ca:90:d2:cb:85:3c:d2:d8:57:29:a4:4f:
                    6d:46:9f:63:79:c9:f9:59:70:df:dd:29:d7:d3:2c:
                    94:70:53:8c:2d:72:8e:3b:94:42:e8:f7:f9:43:c8:
                    83:21:36:30:a6:97:cf:4b:26:ae:09:c0:be:d2:a5:
                    a8:57:97:4d:22:9f:87:16:8a:89:89:f4:bb:5a:c9:
                    b5:c1:08:02:66:24:5e:27:a7:a2:b9:77:ab:5e:60:
                    47:9b:ce:5d:13:23:56:65:eb:5c:fc:76:6a:b0:1e:
                    95:9d:72:b7:3f:c4:3d:28:ce:29:49:a1:63:50:19:
                    53:42:83:c9:7f:a0:ca:10:14:9a:53:bb:9e:a8:b4:
                    f9:19:ff:66:aa:9a:b4:17:b8:0d:0d:46:9e:c2:9c:
                    d1:a3:db:fb:51:56:23:4d:9d:5b:6f:01:dc:a9:64:
                    44:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:7C:CF:CB:94:72:42:80:01:75:C1:09:38:6E:A6:02:87:99:9D:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/2cd7744b-370f-371d-9b01-0334b9c10fe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.2.0-23.237.5.255
                IPv6:
                  2001:49f0:d069::-2001:49f0:d06a:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:f2:4f:09:98:ce:41:7b:ab:1a:e6:82:e6:ef:11:74:8b:4f:
         81:49:fa:3d:04:82:26:4f:31:3a:2e:7b:13:b2:b8:6b:2d:bc:
         4b:bc:1f:b6:0b:92:85:fe:40:11:16:5e:30:f9:c6:dc:99:61:
         e1:87:46:be:5a:e3:73:aa:67:d7:fe:1b:62:66:8a:88:bf:58:
         15:b1:e3:75:9b:9a:39:8a:b1:0e:52:50:b2:9b:cd:a8:89:67:
         e2:31:78:da:f0:f8:5d:bc:66:aa:e2:ce:91:38:26:5d:07:ad:
         44:1e:14:04:23:75:0d:b2:c2:20:af:d2:82:a8:82:bb:c3:27:
         1f:2f:f8:b6:15:ee:75:1f:fd:87:33:88:20:64:15:dd:9f:af:
         63:8b:5e:64:5f:e8:65:e5:4d:6d:35:22:d6:5d:e6:91:51:51:
         59:5f:a9:33:3e:6b:21:a5:6f:16:35:cd:5a:ff:3c:62:4e:03:
         b4:ea:a0:e0:e2:54:ce:14:63:25:b4:1c:d6:23:68:0f:07:be:
         58:ec:b6:5a:d1:c3:6e:57:34:bb:cc:51:c2:4a:b1:9b:04:12:
         24:6a:f4:b3:06:c5:27:0c:98:af:a1:7a:4c:21:d3:88:41:40:
         d4:da:c5:1c:45:b7:a5:a4:3f:2e:0b:34:d1:a7:91:10:0d:9b:
         26:86:34:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:40:31 2026 by rpki-client