Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8bae2104-002c-3732-af7e-f26123198ae6.roa
File:                     8bae2104-002c-3732-af7e-f26123198ae6.roa (raw, json)
Hash identifier:          mRunN/81OwR8mtigVHJ4Y7EHBXm6+SplAYiXIHK4JdQ=
Subject key identifier:   1E:AE:CC:86:0C:C8:6A:16:AF:14:41:6C:8C:0F:E0:67:4D:E5:50:00
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584CAE573E78D3A838877CCCD900
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8bae2104-002c-3732-af7e-f26123198ae6.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     174
IP address blocks:        23.237.74.0/23 maxlen: 24
                          23.237.82.0/23 maxlen: 24
                          23.237.158.0/23 maxlen: 24
                          23.237.208.0/24 maxlen: 24
                          50.7.72.0/22 maxlen: 24
                          192.240.100.0/23 maxlen: 24
                          198.255.121.0/24 maxlen: 24
                          2001:49f0:d002::/48 maxlen: 48
                          2001:49f0:d048::/48 maxlen: 48
                          2001:49f0:d090::/48 maxlen: 48
                          2001:49f0:d0c9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:3e:78:d3:a8:38:87:7c:cc:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=8f501c02-0f47-4706-82fe-55e147f79833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a1:bf:25:03:83:f1:5a:33:79:22:38:a5:b5:
                    3f:03:11:4b:4e:37:1a:59:e2:12:eb:e0:d4:f7:74:
                    64:6b:27:77:58:63:bc:9f:87:08:c6:7a:32:83:3b:
                    5f:d2:67:49:72:20:1b:e9:72:fb:a6:3d:43:ea:f3:
                    6a:ba:6d:7d:c5:f8:27:c5:fb:57:3a:ed:00:ed:a3:
                    5f:b1:52:43:15:db:e8:d3:dc:a0:68:71:c4:de:0b:
                    9e:42:f6:31:27:1b:6a:e2:e0:1f:b9:73:b2:18:81:
                    bf:97:c1:ca:eb:87:d1:3a:87:18:30:4e:a6:1e:6d:
                    c7:20:1e:78:3b:33:01:f1:36:b9:9a:2a:3b:bf:2f:
                    ed:d2:63:7e:08:28:9e:f2:c4:a0:20:63:1a:9d:e0:
                    b3:5f:dd:e3:04:38:83:9c:06:34:97:e4:95:1a:93:
                    5d:65:6e:8d:aa:58:99:d0:c3:eb:0a:ad:0a:b2:e0:
                    e3:95:ca:aa:60:51:f9:31:07:d6:75:f6:c9:41:55:
                    a5:01:50:3c:5b:21:f8:26:a8:4c:be:de:8d:d1:bd:
                    b1:37:ef:ad:9d:19:03:2a:b1:76:f5:de:68:3d:99:
                    da:4d:5e:06:76:b5:a7:aa:5d:e2:14:2f:3d:f2:5b:
                    77:1b:2d:0d:ef:79:58:06:c5:14:38:ca:05:18:ca:
                    13:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AE:CC:86:0C:C8:6A:16:AF:14:41:6C:8C:0F:E0:67:4D:E5:50:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8bae2104-002c-3732-af7e-f26123198ae6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.74.0/23
                  23.237.82.0/23
                  23.237.158.0/23
                  23.237.208.0/24
                  50.7.72.0/22
                  192.240.100.0/23
                  198.255.121.0/24
                IPv6:
                  2001:49f0:d002::/48
                  2001:49f0:d048::/48
                  2001:49f0:d090::/48
                  2001:49f0:d0c9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:ec:70:9a:b4:e5:73:57:41:66:77:50:0a:26:bc:79:f4:13:
         a9:a9:86:ca:28:6b:08:e9:f0:12:6c:0e:ec:bb:90:2b:9f:6c:
         39:0d:4d:c5:9f:63:2b:34:be:4d:d0:23:e4:39:80:d6:8c:30:
         06:d3:8e:6a:8d:de:c3:7a:fc:d9:de:f8:e0:f7:ac:e6:63:24:
         b6:b9:f7:62:c6:60:33:69:4a:6a:73:ed:4d:1b:1e:24:25:c2:
         e8:02:9e:c9:3c:93:d2:47:4a:48:c4:fa:d0:59:1c:83:fb:e4:
         f4:84:22:93:24:cc:58:1c:52:28:8f:b5:5b:ee:0a:d7:93:4f:
         25:29:4d:48:a1:cb:bd:c3:be:44:c7:c6:9e:a1:e3:19:ae:19:
         df:a7:8c:ea:a5:7a:9f:6f:4c:eb:f3:fd:af:f9:da:1a:b3:6c:
         b3:90:63:98:24:67:e0:9e:41:52:8d:91:40:6b:bd:1c:ed:dc:
         39:87:bd:99:c5:28:e2:6c:66:bd:37:de:f5:f1:86:12:d2:87:
         d8:3e:3a:e6:76:05:69:e2:f8:cc:3b:f1:d6:01:54:f3:bc:b6:
         ce:fa:84:81:2c:22:6c:27:cf:24:7d:53:fb:8a:32:7a:a3:4a:
         3e:d1:fb:ee:ad:15:00:d5:02:cb:b1:34:dc:26:91:67:db:ae:
         05:b3:a6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:28:57 2026 by rpki-client