Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5e3d41db-9d63-311f-9038-1863d5af303e.roa
File:                     5e3d41db-9d63-311f-9038-1863d5af303e.roa (raw, json)
Hash identifier:          vLf9HxVBE1+UWdZl2fYlf/mawc20baj9gQmmXKCXijM=
Subject key identifier:   77:FE:68:86:6B:BE:6B:D6:5C:8D:AB:A6:DD:69:39:4D:CC:49:F6:7C
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F8B0DA6CFDCD5D1ACF8208900
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5e3d41db-9d63-311f-9038-1863d5af303e.roa
Signing time:             Sun 18 Oct 2026 13:00:12 +0000
ROA not before:           Sun 18 Oct 2026 13:00:12 +0000
ROA not after:            Sat 16 Jan 2027 14:00:12 +0000
asID:                     30058
IP address blocks:        23.237.41.0/24 maxlen: 24
                          198.255.98.0/23 maxlen: 24
                          198.255.100.0/23 maxlen: 24
                          2001:49f0:d05e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8b:0d:a6:cf:dc:d5:d1:ac:f8:20:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Oct 18 13:00:12 2026 GMT
            Not After : Jan 16 14:00:12 2027 GMT
        Subject: CN=21cdf100-e10c-41d8-b38e-4b941eabec73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:99:00:79:fc:8c:82:ec:b5:e1:4c:cf:f4:f5:
                    53:39:3b:e4:e7:a4:a4:d9:c9:4c:05:66:7c:aa:9b:
                    03:1f:15:cb:c9:b7:30:f6:18:a6:17:28:2a:96:a2:
                    0e:98:1a:15:c4:30:0d:62:5c:5c:bc:77:8a:34:ee:
                    6a:d5:c8:bb:b8:58:bf:0d:29:36:83:31:b5:c6:77:
                    a9:26:25:88:45:34:fa:12:7f:43:14:04:1e:e4:18:
                    e2:11:30:c6:36:33:b7:84:20:83:aa:dc:8b:bd:7c:
                    47:f5:e0:12:65:a6:69:c9:d4:1c:ea:a9:34:a7:bc:
                    0c:d3:4d:67:9c:57:ba:52:c5:31:44:41:d4:17:34:
                    65:f3:be:a8:54:85:00:9b:6d:e6:a1:db:1e:9e:d4:
                    4a:38:0c:fd:c6:e2:49:a6:0c:b0:1e:27:a6:11:78:
                    7c:ee:cb:d3:24:50:54:63:cc:20:ef:ee:b0:7b:3e:
                    87:dd:22:67:28:22:32:5c:61:f0:1b:1d:ee:c1:52:
                    1f:34:89:87:52:b5:e6:39:e6:d8:9e:bc:6a:21:c8:
                    ae:05:9a:50:a7:8e:c5:2a:ce:3b:06:a9:42:30:7f:
                    81:65:59:78:86:20:31:3c:e3:3c:65:e4:bd:b3:f5:
                    57:e9:1c:cc:fb:06:bf:3e:c0:bc:a7:01:78:46:fc:
                    7a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FE:68:86:6B:BE:6B:D6:5C:8D:AB:A6:DD:69:39:4D:CC:49:F6:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5e3d41db-9d63-311f-9038-1863d5af303e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.41.0/24
                  198.255.98.0-198.255.101.255
                IPv6:
                  2001:49f0:d05e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:9c:b4:d8:83:64:00:9b:22:dd:13:15:d5:5a:c7:51:68:90:
         89:49:93:95:37:36:83:d5:43:77:20:f1:2f:92:fc:8b:cf:ca:
         43:2c:84:ce:c2:23:8a:cc:6a:92:71:f2:89:f2:eb:a4:7b:e4:
         22:4b:18:b5:fc:2f:c4:21:9c:de:98:7d:5f:1f:ad:9d:b9:6e:
         c1:83:5c:59:25:42:98:15:b8:36:99:0f:27:91:84:e7:aa:4e:
         0f:1e:cb:31:b0:6e:6d:5e:53:f7:85:16:51:49:ff:f3:c1:0f:
         a2:12:c8:3a:df:a9:12:6a:85:bf:2a:aa:46:74:d4:91:b3:33:
         9c:aa:41:89:0d:6f:02:c2:d3:61:82:80:f6:77:9a:2e:e7:0d:
         a4:c9:06:6e:d6:eb:82:2e:49:be:3c:18:d9:43:a1:f9:6d:af:
         28:f3:6f:07:30:6a:a3:6f:35:c9:4d:13:a9:82:a8:a1:1d:b8:
         c9:2c:e6:fb:1c:18:3e:cd:8b:a1:42:e4:46:a5:ee:a1:60:54:
         25:76:87:47:88:21:0f:6b:ab:3d:c7:74:a7:8c:4e:fa:32:bd:
         76:20:50:dd:2b:6c:de:8d:2e:b9:5d:bb:04:fa:16:08:55:34:
         55:a8:c3:14:1c:db:f5:9c:10:f8:df:7a:f9:cb:4e:68:98:e0:
         65:1e:51:17
-----BEGIN CERTIFICATE-----
MIIGYjCCBUqgAwIBAgIUAQ0Mn0MoWE+LDabP3NXRrPggiQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI2MTAxODEzMDAxMloXDTI3MDExNjE0MDAxMlowLzEtMCsGA1UEAxMk
MjFjZGYxMDAtZTEwYy00MWQ4LWIzOGUtNGI5NDFlYWJlYzczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZkAefyMguy14UzP9PVTOTvk56Sk2clMBWZ8
qpsDHxXLybcw9himFygqlqIOmBoVxDANYlxcvHeKNO5q1ci7uFi/DSk2gzG1xnep
JiWIRTT6En9DFAQe5BjiETDGNjO3hCCDqtyLvXxH9eASZaZpydQc6qk0p7wM001n
nFe6UsUxREHUFzRl876oVIUAm23modsentRKOAz9xuJJpgywHiemEXh87svTJFBU
Y8wg7+6wez6H3SJnKCIyXGHwGx3uwVIfNImHUrXmOebYnrxqIciuBZpQp47FKs47
BqlCMH+BZVl4hiAxPOM8ZeS9s/VX6RzM+wa/PsC8pwF4Rvx6HwIDAQABo4IDdDCC
A3AwHQYDVR0OBBYEFHf+aIZrvmvWXI2rpt1pOU3MSfZ8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNWUzZDQxZGItOWQ2My0z
MTFmLTkwMzgtMTg2M2Q1YWYzMDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUAwQAF+0pMAwD
BAHG/2IDBAHG/2QwDwQCAAIwCQMHACABSfDQXjBUBgNVHSABAf8ESjBIMEYGCCsG
AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291
cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBenLTYg2QAmyLd
ExXVWsdRaJCJSZOVNzaD1UN3IPEvkvyLz8pDLITOwiOKzGqScfKJ8uuke+QiSxi1
/C/EIZzemH1fH62duW7Bg1xZJUKYFbg2mQ8nkYTnqk4PHssxsG5tXlP3hRZRSf/z
wQ+iEsg636kSaoW/KqpGdNSRszOcqkGJDW8CwtNhgoD2d5ou5w2kyQZu1uuCLkm+
PBjZQ6H5ba8o828HMGqjbzXJTROpgqihHbjJLOb7HBg+zYuhQuRGpe6hYFQldodH
iCEPa6s9x3SnjE76Mr12IFDdK2zejS65XbsE+hYIVTRVqMMUHNv1nBD433r5y05o
mOBlHlEX
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:04:59 2026 by rpki-client