Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7f4f6a20-105d-3c39-8fac-0f2eb159e841.roa
File:                     7f4f6a20-105d-3c39-8fac-0f2eb159e841.roa (raw, json)
Hash identifier:          pMU4lOwEWb5ManFU9x4MhAwVGd7JGRJLYzPH8KwxU/E=
Subject key identifier:   E5:F3:5E:C5:4C:5A:AB:AC:0C:C2:03:AE:7B:0D:3E:EB:FF:D7:0E:49
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584CC611FE4760F2E51268F21780
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7f4f6a20-105d-3c39-8fac-0f2eb159e841.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     174
IP address blocks:        23.237.47.0/24 maxlen: 24
                          23.237.62.0/24 maxlen: 24
                          23.237.78.0/23 maxlen: 24
                          23.237.88.0/23 maxlen: 24
                          23.237.144.0/24 maxlen: 24
                          23.237.145.0/24 maxlen: 24
                          23.237.146.0/24 maxlen: 24
                          23.237.160.0/23 maxlen: 24
                          23.237.202.0/23 maxlen: 24
                          23.237.251.0/24 maxlen: 24
                          23.237.252.0/24 maxlen: 24
                          50.7.64.0/22 maxlen: 24
                          192.240.98.0/23 maxlen: 24
                          192.240.112.0/22 maxlen: 24
                          192.240.118.0/23 maxlen: 24
                          198.255.22.0/23 maxlen: 24
                          198.255.124.0/24 maxlen: 24
                          216.227.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:11:fe:47:60:f2:e5:12:68:f2:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=b4c419b1-86af-4920-a74a-8d7c812f7641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:36:d9:67:f1:ca:d7:fb:70:a7:cc:17:8d:b1:
                    42:1c:6d:0c:30:a6:81:7a:85:7b:35:e1:e7:0f:77:
                    d6:71:45:84:22:5b:cd:64:0a:b9:af:5f:dc:9c:6b:
                    78:aa:65:b5:49:bc:3c:15:64:cb:4f:22:78:fb:c0:
                    2f:fe:23:b4:3d:e1:52:9f:1d:49:29:40:eb:e3:18:
                    cc:7f:70:58:7b:d3:76:ba:2a:17:c3:4a:6b:83:6d:
                    79:dd:5a:a7:6e:41:9f:d3:fb:a6:33:8f:52:dd:57:
                    26:81:fc:7c:5e:d1:08:5c:c0:c5:e3:cd:62:29:08:
                    a6:4d:bd:4a:0b:94:08:87:59:3a:a8:94:30:f6:72:
                    51:4f:3b:be:13:2d:82:d4:05:55:da:34:f0:f6:fb:
                    f7:01:82:65:43:82:43:4c:29:c2:11:5e:cc:67:30:
                    dd:53:b4:bf:ab:9d:a7:34:38:45:8d:2d:7b:58:a7:
                    40:a0:63:09:d9:f0:0e:ae:cc:23:b7:1f:c0:30:77:
                    ca:81:b5:93:a6:e0:e5:94:b8:e6:58:d2:7a:28:e9:
                    5c:97:2c:df:5a:6d:85:a3:38:9f:71:30:6c:e5:01:
                    65:f3:b1:f0:d0:9f:d2:6f:6a:1b:4f:73:66:ee:fa:
                    a1:76:40:f9:bf:2e:e4:74:fd:63:00:a1:69:f2:03:
                    a1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F3:5E:C5:4C:5A:AB:AC:0C:C2:03:AE:7B:0D:3E:EB:FF:D7:0E:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7f4f6a20-105d-3c39-8fac-0f2eb159e841.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.47.0/24
                  23.237.62.0/24
                  23.237.78.0/23
                  23.237.88.0/23
                  23.237.144.0-23.237.146.255
                  23.237.160.0/23
                  23.237.202.0/23
                  23.237.251.0-23.237.252.255
                  50.7.64.0/22
                  192.240.98.0/23
                  192.240.112.0/22
                  192.240.118.0/23
                  198.255.22.0/23
                  198.255.124.0/24
                  216.227.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:50:68:3f:2c:a6:fa:17:f9:26:2d:36:c7:52:ad:04:c2:b8:
         55:e8:1b:d5:0c:0f:b8:90:e7:09:56:1c:8b:48:62:77:ea:5a:
         34:4b:71:01:2a:8b:6f:5b:4a:e9:34:cf:db:94:37:d4:4c:00:
         1f:da:83:75:00:2e:7c:c6:48:4e:09:7f:f0:f4:b7:9d:8c:85:
         3c:68:04:7c:25:09:1e:0d:7f:32:f7:a3:85:1a:7f:da:ed:62:
         13:ec:65:67:b3:5f:48:ba:fe:bc:1f:0a:b8:68:19:74:46:dc:
         a4:76:5f:79:85:06:ef:f3:69:f5:e8:42:d3:d4:da:cc:dc:e7:
         c7:1f:ec:b3:c8:d1:67:81:1b:0c:25:ba:61:c6:16:ca:ed:a3:
         16:9d:aa:e3:ab:67:5b:30:fe:e6:86:2d:90:89:bc:3d:ee:77:
         d3:bd:cd:02:c2:d2:9a:fc:df:2a:ce:11:56:b7:a0:2e:ec:21:
         29:24:0c:2f:f7:79:7a:91:14:8d:d4:fa:47:be:a5:ce:14:df:
         0b:59:9d:b9:32:78:db:2c:79:f9:6f:1d:8c:4f:57:12:e9:75:
         34:1b:8c:67:1b:c7:d2:da:d8:58:85:7a:ef:c0:b5:55:96:85:
         f3:a3:5b:c8:bb:a0:b4:dc:06:7b:6c:dd:09:7c:e3:33:69:b6:
         89:f0:f7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:30:27 2026 by rpki-client