Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8ae0b6a9-3aee-303d-8cbc-58416a2570f3.roa
File:                     8ae0b6a9-3aee-303d-8cbc-58416a2570f3.roa (raw, json)
Hash identifier:          B1nMSjL/Z39ac58wncyknNiQvaWJ70NqjwzdK0OMTPk=
Subject key identifier:   74:34:81:B5:93:E5:77:37:0C:11:5D:77:EA:3B:BA:2F:AA:FF:0F:96
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584CAA272178218720742A7CAFA0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8ae0b6a9-3aee-303d-8cbc-58416a2570f3.roa
Signing time:             Tue 27 Jan 2026 14:00:36 +0000
ROA not before:           Tue 27 Jan 2026 14:00:36 +0000
ROA not after:            Mon 27 Apr 2026 13:00:36 +0000
asID:                     174
IP address blocks:        23.237.48.0/24 maxlen: 24
                          23.237.68.0/23 maxlen: 24
                          23.237.70.0/23 maxlen: 24
                          23.237.102.0/23 maxlen: 24
                          23.237.104.0/23 maxlen: 24
                          23.237.140.0/23 maxlen: 24
                          198.255.86.0/23 maxlen: 24
                          198.255.88.0/23 maxlen: 24
                          198.255.122.0/24 maxlen: 24
                          2001:49f0:d04d::/48 maxlen: 48
                          2001:49f0:d04e::/48 maxlen: 48
                          2001:49f0:d055::/48 maxlen: 48
                          2001:49f0:d0a9::/48 maxlen: 48
                          2001:49f0:d0aa::/48 maxlen: 48
                          2001:49f0:d0bf::/48 maxlen: 48
                          2001:49f0:d138::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:27:21:78:21:87:20:74:2a:7c:af:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jan 27 14:00:36 2026 GMT
            Not After : Apr 27 13:00:36 2026 GMT
        Subject: CN=966d7a00-9534-4454-8e18-35f5d7a72bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:79:c2:21:00:37:6b:34:a3:ac:57:3e:ce:4f:
                    af:5a:11:c1:97:4f:89:b1:3b:a4:de:64:9e:7b:b1:
                    f0:80:20:68:fb:de:22:86:61:2d:88:1d:f5:43:67:
                    0e:80:e6:1a:dd:77:4b:a7:af:3a:1f:88:7a:30:b4:
                    73:3c:f1:56:6d:c1:ac:5e:35:77:0b:0c:d3:a8:56:
                    f3:4b:09:34:57:76:1d:f8:24:33:aa:62:8b:c7:cb:
                    6d:10:95:1d:64:7d:c9:e0:aa:54:50:ca:0b:99:bf:
                    d3:06:06:bd:b1:8c:ed:bd:b7:de:cd:c3:77:b2:f5:
                    2a:e4:33:4c:55:e5:5a:4d:ca:7d:59:7a:fd:09:1c:
                    27:f7:d2:16:b6:15:2f:6b:b1:b3:cb:07:b9:e3:10:
                    0e:ac:ed:e8:34:f0:77:37:1b:51:07:d6:da:8a:e9:
                    9b:9a:0b:e4:d7:98:31:67:e9:7f:d0:d8:de:7d:b6:
                    af:68:47:16:b1:4a:96:50:ab:af:2e:c0:fe:6e:28:
                    fe:bf:da:0a:01:07:d5:32:86:fd:e8:51:6c:60:c6:
                    64:82:01:07:27:30:f0:e1:a4:89:c9:8b:fe:74:a7:
                    b8:50:fe:31:07:b8:d0:ab:41:77:6d:1f:91:e5:9b:
                    30:4f:dc:78:b0:24:b8:3e:24:b5:1a:a7:f2:dd:59:
                    6e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:34:81:B5:93:E5:77:37:0C:11:5D:77:EA:3B:BA:2F:AA:FF:0F:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8ae0b6a9-3aee-303d-8cbc-58416a2570f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.48.0/24
                  23.237.68.0/22
                  23.237.102.0-23.237.105.255
                  23.237.140.0/23
                  198.255.86.0-198.255.89.255
                  198.255.122.0/24
                IPv6:
                  2001:49f0:d04d::-2001:49f0:d04e:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d055::/48
                  2001:49f0:d0a9::-2001:49f0:d0aa:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d0bf::/48
                  2001:49f0:d138::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:62:5b:5a:da:f7:a7:e2:77:92:ee:da:29:bf:df:78:28:a0:
         d8:e9:89:8d:b6:17:e4:d0:33:27:9c:03:75:da:88:71:66:c2:
         8e:84:a2:f9:89:ca:af:df:44:ed:bf:e0:8e:f3:a6:61:f6:dc:
         1a:48:41:bc:cd:79:6f:53:b6:c2:0d:13:cb:8e:b0:0d:12:4a:
         27:56:37:ca:d3:0a:54:62:27:5d:63:25:e6:fc:2f:bb:13:36:
         54:e2:22:19:58:2c:5c:43:05:0a:38:65:6d:0c:9a:6a:77:a5:
         b9:fd:e0:61:da:28:5e:15:72:8b:a4:4a:09:b2:90:b7:4d:25:
         43:20:9e:06:4f:5f:b8:37:27:22:35:10:23:ec:1b:da:1c:5c:
         c6:d5:70:2d:0d:5e:d4:38:8e:0e:a4:2a:66:49:0d:25:6b:0b:
         9a:96:02:22:6e:f2:ef:70:7c:cd:cc:11:8c:6e:55:8d:a9:e4:
         fd:4f:41:a0:9d:3e:3c:50:8d:ca:39:1b:03:b1:f8:8c:ae:d9:
         0d:93:d2:7c:c1:85:5e:56:76:81:4d:7a:75:86:1a:9c:f5:09:
         8e:d1:26:a7:c6:51:2e:74:f0:9e:09:81:96:95:47:87:df:b6:
         8f:38:b3:57:fd:37:f7:33:da:00:31:2d:96:2a:f7:be:72:b5:
         3e:5b:93:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:29:30 2026 by rpki-client