Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/791c2f5d-4258-3b3d-82a7-78c6a688c098.roa
File:                     791c2f5d-4258-3b3d-82a7-78c6a688c098.roa (raw, json)
Hash identifier:          zMXYzzJ+QFk3VEI/L0PM7s5gCH+w7g59UHSTk7Gnmtw=
Subject key identifier:   AC:0A:02:92:B8:20:BB:E0:5D:40:A5:25:F3:C8:7E:76:E1:EB:2F:36
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584E6F3A4C4DCEC557FDF5086680
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/791c2f5d-4258-3b3d-82a7-78c6a688c098.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     30058
IP address blocks:        23.237.74.0/23 maxlen: 24
                          23.237.82.0/23 maxlen: 24
                          23.237.158.0/23 maxlen: 24
                          23.237.208.0/24 maxlen: 24
                          50.7.72.0/22 maxlen: 24
                          192.240.100.0/23 maxlen: 24
                          198.255.121.0/24 maxlen: 24
                          2001:49f0:d002::/48 maxlen: 48
                          2001:49f0:d048::/48 maxlen: 48
                          2001:49f0:d090::/48 maxlen: 48
                          2001:49f0:d0c9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:4c:4d:ce:c5:57:fd:f5:08:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=b8200a2c-db46-43ac-b200-ac79d40f6731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c1:85:d0:bc:d3:df:c2:d7:cc:58:72:26:c4:
                    7b:e6:1a:1f:dc:cd:2c:3b:25:7d:ec:86:a2:11:5d:
                    9b:02:99:4a:38:e8:b2:0e:d7:ad:a8:cc:24:ec:69:
                    2f:c2:ca:95:50:fb:70:b8:38:79:f1:cb:d2:0b:26:
                    03:21:1c:80:2c:6c:38:f2:26:17:d5:7f:6d:39:12:
                    4c:23:8b:b6:8b:65:4e:2f:3e:10:7f:e6:ea:c9:f9:
                    72:80:f1:19:03:f5:b3:15:f0:dc:67:08:87:f9:33:
                    4a:d5:cf:f5:25:6c:62:e4:69:74:24:00:6f:0b:43:
                    06:37:40:4d:a1:c2:29:e6:45:22:fa:d0:41:4f:c9:
                    6a:4d:7e:0e:cd:40:cb:c2:ef:8f:f9:b2:d0:8d:b0:
                    87:7d:5e:aa:96:0d:db:25:02:e9:f5:08:a2:5d:ee:
                    52:e4:df:5e:bb:4f:8f:dd:50:d8:5c:60:d8:8b:5b:
                    f1:b3:b7:ba:4a:e8:a1:79:18:64:29:1f:7b:65:48:
                    ea:06:c0:9b:a6:09:ff:d6:61:f9:05:85:43:2b:2a:
                    7f:e1:47:4a:13:c4:1f:64:90:e4:77:f9:70:17:c2:
                    92:a9:ec:78:6e:3b:03:fb:7e:6d:55:b2:ef:7a:8c:
                    48:f3:64:db:93:a8:42:2a:94:77:42:7b:14:31:ac:
                    34:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0A:02:92:B8:20:BB:E0:5D:40:A5:25:F3:C8:7E:76:E1:EB:2F:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/791c2f5d-4258-3b3d-82a7-78c6a688c098.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.74.0/23
                  23.237.82.0/23
                  23.237.158.0/23
                  23.237.208.0/24
                  50.7.72.0/22
                  192.240.100.0/23
                  198.255.121.0/24
                IPv6:
                  2001:49f0:d002::/48
                  2001:49f0:d048::/48
                  2001:49f0:d090::/48
                  2001:49f0:d0c9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:8a:28:8a:d5:ce:45:31:f0:0a:cf:9b:90:d0:cd:3f:95:f9:
         c0:6f:cf:94:93:54:8a:da:cf:59:4e:99:e3:48:e2:0b:de:65:
         b2:3b:75:72:ed:13:f1:8f:6b:42:93:60:41:51:8d:18:5e:89:
         0e:9c:23:91:89:62:63:a9:b1:d4:0a:df:1f:92:29:d4:be:a8:
         19:a5:3b:3a:0b:e0:e0:a4:7d:cd:be:82:4d:34:d2:71:54:63:
         ab:4b:aa:56:a4:17:a5:f2:85:d6:77:f5:a2:82:92:ea:8e:fe:
         90:91:e5:72:b5:ac:be:3f:99:18:83:ed:5f:4e:c6:08:72:42:
         0e:81:7f:c6:df:e8:33:a7:a8:74:11:0f:b2:85:23:c7:25:8b:
         71:ae:9a:d9:a1:cb:80:3a:7e:fb:69:1b:26:13:28:b2:d4:a4:
         49:7d:bc:c9:12:48:7a:96:0a:15:b5:4f:6a:36:88:3b:c6:9b:
         d7:8b:80:eb:44:77:53:df:41:ff:a0:0b:53:89:ba:b0:6c:94:
         46:0f:13:aa:35:20:36:3b:95:79:f4:aa:97:64:8f:c3:d8:c6:
         b1:9e:91:7f:58:33:8e:c5:1d:df:bc:fb:18:ed:b1:8f:5b:59:
         f1:3d:40:5c:fb:5f:51:0a:df:5a:e0:c5:94:d7:00:35:10:3d:
         ec:93:6a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:55:46 2026 by rpki-client