Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/86c18ca8-a6b2-3356-8d77-ef0021800bf6.roa
File:                     86c18ca8-a6b2-3356-8d77-ef0021800bf6.roa (raw, json)
Hash identifier:          R+4gfdeFuVxk4fCXa0ShOeweZ8M+sUm4+k6GVRnQuf8=
Subject key identifier:   5E:F7:90:AA:6F:9B:01:35:E8:C8:24:52:A5:4E:54:44:E5:4F:21:A8
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584DADAAE32238B8441554CC8F80
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/86c18ca8-a6b2-3356-8d77-ef0021800bf6.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     1239
IP address blocks:        23.237.53.0/24 maxlen: 24
                          23.237.58.0/24 maxlen: 24
                          23.237.76.0/23 maxlen: 24
                          23.237.86.0/23 maxlen: 24
                          23.237.192.0/23 maxlen: 24
                          23.237.230.0/24 maxlen: 24
                          23.237.240.0/24 maxlen: 24
                          50.7.68.0/22 maxlen: 24
                          192.240.96.0/23 maxlen: 24
                          198.255.2.0/24 maxlen: 24
                          198.255.20.0/23 maxlen: 24
                          198.255.76.0/23 maxlen: 24
                          198.255.78.0/23 maxlen: 24
                          198.255.80.0/23 maxlen: 24
                          198.255.82.0/23 maxlen: 24
                          198.255.125.0/24 maxlen: 24
                          2001:49f0:d025::/48 maxlen: 48
                          2001:49f0:d050::/48 maxlen: 48
                          2001:49f0:d051::/48 maxlen: 48
                          2001:49f0:d052::/48 maxlen: 48
                          2001:49f0:d053::/48 maxlen: 48
                          2001:49f0:d054::/48 maxlen: 48
                          2001:49f0:d099::/48 maxlen: 48
                          2001:49f0:d0df::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:e3:22:38:b8:44:15:54:cc:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=7a1b7c31-1751-4c0a-9c15-a022115224fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:58:42:e6:0f:e8:89:6d:ee:05:3f:8d:36:46:
                    a3:c8:d9:c4:21:48:21:26:2f:f1:76:ce:86:13:e8:
                    a3:67:8a:55:fa:64:16:61:83:5a:bb:57:4a:bd:a8:
                    90:64:e1:2b:88:59:52:9b:dd:30:67:88:4e:fd:ba:
                    34:7f:a4:37:de:5c:dc:62:b5:07:ea:18:7e:bd:b7:
                    f2:20:35:31:c2:1c:f9:72:67:4c:58:1f:7c:9f:f4:
                    4f:3b:dd:d0:7d:1a:3b:24:9c:5a:a2:23:df:d0:4d:
                    92:88:c8:bf:ae:20:c6:79:c8:ad:7e:08:4a:68:c8:
                    a7:be:94:ca:86:01:59:e8:e3:b7:3b:43:3a:89:1d:
                    4a:43:e0:09:cc:56:9a:5e:cc:f8:27:59:ba:dd:82:
                    6e:cb:c3:1b:f6:10:ed:e2:46:7c:0c:50:5b:52:64:
                    2c:4e:2c:03:a7:50:a6:f4:f6:13:66:c4:23:37:78:
                    96:04:9b:00:d7:bf:42:9d:d9:6b:62:e7:17:ff:ba:
                    23:b7:4a:56:a2:6c:6e:2d:7f:e6:02:ec:fa:83:cc:
                    fc:a3:4c:7f:93:21:e8:a8:4c:60:cd:4f:ce:1f:30:
                    44:ef:8c:85:ee:42:17:dc:0f:e1:f8:ed:a9:8e:c9:
                    ec:60:c9:6e:8d:84:1e:b3:42:2f:56:6f:88:19:c8:
                    1f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F7:90:AA:6F:9B:01:35:E8:C8:24:52:A5:4E:54:44:E5:4F:21:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/86c18ca8-a6b2-3356-8d77-ef0021800bf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.53.0/24
                  23.237.58.0/24
                  23.237.76.0/23
                  23.237.86.0/23
                  23.237.192.0/23
                  23.237.230.0/24
                  23.237.240.0/24
                  50.7.68.0/22
                  192.240.96.0/23
                  198.255.2.0/24
                  198.255.20.0/23
                  198.255.76.0-198.255.83.255
                  198.255.125.0/24
                IPv6:
                  2001:49f0:d025::/48
                  2001:49f0:d050::-2001:49f0:d054:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d099::/48
                  2001:49f0:d0df::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:f6:e1:dc:48:09:79:73:5f:35:4c:44:15:94:78:f0:65:55:
         34:23:d4:0a:16:1c:50:13:3b:e7:72:77:2a:2b:bc:e3:94:1f:
         b9:ca:78:d3:14:a6:03:13:e4:01:ed:ad:98:e7:6b:88:65:ea:
         44:cd:1b:39:93:2c:07:65:c6:2f:97:8c:d2:bd:38:0c:da:15:
         5d:f6:dc:fb:06:d3:ed:ad:30:e3:94:31:f5:df:be:61:0b:be:
         f0:6c:43:60:60:70:77:67:44:72:bf:93:e3:e7:be:f9:65:5d:
         3a:8a:33:de:9c:07:b6:08:6a:29:09:52:f7:9c:cf:e4:ce:a4:
         a8:22:31:d0:64:b5:10:a9:a3:69:69:c5:8d:d8:37:71:77:30:
         87:f5:a5:fd:a3:cc:1b:d8:c1:7b:e8:d4:07:fc:2e:1e:ea:d2:
         29:9b:74:59:9b:45:01:a9:8f:16:e1:55:7c:ec:0b:b3:a2:3c:
         47:cf:32:ed:12:8b:dd:e1:9c:09:56:ed:09:49:04:b1:fe:11:
         e4:56:ae:0e:76:0f:09:c2:52:da:52:41:ed:cd:c8:fd:c7:d0:
         0b:8c:32:c7:83:49:81:5a:d0:d0:f9:83:12:6b:62:1c:8a:de:
         56:3e:ca:1c:76:63:7b:da:c9:9e:f1:ca:50:08:35:4b:64:7c:
         07:7b:99:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 07:11:54 2026 by rpki-client