Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5e3d41db-9d63-311f-9038-1863d5af303e.roa
File:                     5e3d41db-9d63-311f-9038-1863d5af303e.roa (raw, json)
Hash identifier:          pLb789iInYf4o7MsNXwJJyh7fyC2oKbd/2Yu9RSOZ9Q=
Subject key identifier:   FA:29:2D:11:47:FC:49:2F:33:7F:4A:8A:D7:CE:DA:53:F6:28:9A:61
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584E46BF2C8BD37ACFB786C90D00
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5e3d41db-9d63-311f-9038-1863d5af303e.roa
Signing time:             Wed 24 Jun 2026 09:00:12 +0000
ROA not before:           Wed 24 Jun 2026 09:00:12 +0000
ROA not after:            Tue 22 Sep 2026 09:00:12 +0000
asID:                     30058
IP address blocks:        23.237.41.0/24 maxlen: 24
                          198.255.98.0/23 maxlen: 24
                          198.255.100.0/23 maxlen: 24
                          2001:49f0:d05e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:46:bf:2c:8b:d3:7a:cf:b7:86:c9:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jun 24 09:00:12 2026 GMT
            Not After : Sep 22 09:00:12 2026 GMT
        Subject: CN=d144b1ce-85aa-4223-a721-15330f97c8c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fd:ad:c9:7a:e9:44:02:82:d4:64:d8:9e:ae:
                    f5:09:9d:3f:71:e9:da:53:1e:05:39:51:e2:63:28:
                    61:44:5f:ce:f8:42:d0:51:05:3c:d9:ec:3f:a4:b3:
                    e6:ba:ae:e4:9c:65:b9:63:31:84:df:6f:3f:e3:f0:
                    45:3e:a7:0f:c7:d8:1a:62:a4:12:8b:3e:82:98:d5:
                    59:df:1a:c9:d3:7c:c7:ac:bc:5f:38:47:ec:fd:ad:
                    9e:d0:04:0a:8f:23:90:8f:8e:df:09:4f:c6:64:f0:
                    09:6f:58:cc:1c:59:ae:9b:cd:8b:4b:56:ab:2d:de:
                    0c:d4:9f:d7:03:f5:49:5f:a9:d2:06:c7:06:8d:76:
                    a7:80:9c:93:42:f0:fe:65:03:ae:14:6f:a6:20:f8:
                    d6:76:a7:01:af:fb:af:13:6a:c5:52:b2:9b:33:e2:
                    f3:11:aa:2e:43:db:2f:63:c0:56:b0:6e:49:4d:8c:
                    2f:c0:5c:95:0a:d1:ea:94:e6:9c:5a:68:1b:b0:b2:
                    a8:2b:a6:54:a2:45:7a:90:2d:8e:81:93:7e:c6:87:
                    aa:d8:aa:ee:5b:3a:6c:53:46:55:29:89:60:04:98:
                    bf:eb:44:9c:94:ca:e7:43:bb:c2:04:f6:95:c6:e7:
                    41:55:ff:0a:cb:00:69:03:72:f6:ec:0c:d3:88:a4:
                    d1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:29:2D:11:47:FC:49:2F:33:7F:4A:8A:D7:CE:DA:53:F6:28:9A:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5e3d41db-9d63-311f-9038-1863d5af303e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.41.0/24
                  198.255.98.0-198.255.101.255
                IPv6:
                  2001:49f0:d05e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:94:86:9b:85:30:f9:d8:19:77:09:2b:3a:f1:35:f3:fb:fe:
         c7:a7:f7:b7:07:4f:0f:64:f5:d7:8d:d6:5c:82:76:43:ac:32:
         c5:6e:f3:6b:91:61:70:bf:b0:bb:59:e0:f2:7a:d6:76:3d:c3:
         1a:79:db:fc:72:8a:cc:5c:4b:35:40:d1:54:75:93:f3:2e:62:
         6f:08:9b:a4:ab:34:8a:0e:39:f1:62:ed:ac:82:ef:9a:e6:42:
         20:e9:85:8a:77:95:5b:bf:4a:65:80:ca:5d:98:24:13:5c:93:
         8a:30:5a:83:0c:21:db:12:2a:81:2c:d9:95:99:3d:b8:7b:c1:
         9e:ef:6c:24:04:b1:55:77:2a:b8:d7:dd:f3:7e:09:78:cb:42:
         17:77:66:13:ea:02:d6:58:2b:9d:f1:a6:1f:cc:0c:13:f7:13:
         fa:73:4f:5e:42:b2:6f:f9:f5:f8:2f:d7:37:81:a8:c1:f7:2a:
         89:27:ef:68:d4:00:c6:09:60:0b:17:c9:3c:58:31:59:a0:7c:
         c1:2a:a3:14:22:17:c8:37:6f:72:23:bc:30:e2:5a:4c:af:a0:
         f6:ff:c5:2c:e4:56:19:88:fa:46:b2:1a:72:d0:2e:a5:6a:bd:
         02:9e:b5:2e:49:10:ae:e8:df:d6:35:9f:4b:15:2c:3b:5f:f0:
         6a:c8:1e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:55:55 2026 by rpki-client