Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/9bdd0cf2-396a-3cb0-9cbf-2d8e18e53347.roa
File:                     9bdd0cf2-396a-3cb0-9cbf-2d8e18e53347.roa (raw, json)
Hash identifier:          wB+FjnL6nr3IdmDjNvANWLhPWfkg1bcENQ8CMCBvpy4=
Subject key identifier:   F7:70:15:18:2C:6C:31:C7:41:A8:26:BC:72:E9:8C:4C:FF:EA:36:D5
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584EA788A110D18FCEEBF787AC00
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/9bdd0cf2-396a-3cb0-9cbf-2d8e18e53347.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30058
IP address blocks:        23.237.18.0/23 maxlen: 24
                          23.237.20.0/22 maxlen: 24
                          23.237.26.0/23 maxlen: 24
                          23.237.253.0/24 maxlen: 24
                          198.255.117.0/24 maxlen: 24
                          198.255.118.0/24 maxlen: 24
                          198.255.119.0/24 maxlen: 24
                          198.255.123.0/24 maxlen: 24
                          2001:49f0:a06b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:a1:10:d1:8f:ce:eb:f7:87:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fd3abcd5-4ba4-4e7c-9165-23dd3b7040a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a6:f0:1a:82:d4:7f:9d:98:41:59:4a:f0:32:
                    dd:15:c4:d3:14:ef:46:8c:14:3c:33:db:d3:25:1c:
                    c2:18:4a:e1:e7:7b:c3:32:0a:72:fe:5e:ee:e2:c9:
                    f1:e4:c7:2f:5e:55:b5:a2:af:bf:d5:91:a8:bd:61:
                    d0:4f:79:11:cb:96:8b:f4:f5:02:7c:12:5f:97:0b:
                    ce:54:af:e6:da:26:4d:73:d7:77:3e:d4:ca:cc:69:
                    c6:c1:8b:15:31:70:48:39:29:8e:cb:7e:49:09:e1:
                    36:58:d1:26:d5:47:e5:9d:4f:45:d2:77:77:ee:11:
                    ec:94:b0:66:1a:ef:85:e4:b3:9e:6e:2f:5a:b8:47:
                    5d:e3:b0:ee:dc:da:ad:ef:f2:7a:8e:db:e7:23:d3:
                    e7:4e:94:7d:f2:e3:74:72:b3:73:60:ea:50:dc:c1:
                    fa:e3:a9:66:27:a1:b9:f9:7f:44:f7:bf:94:5f:d2:
                    69:d5:ae:f9:5f:54:71:74:ce:9d:61:81:b1:31:79:
                    f9:9d:49:12:77:2d:4c:31:1c:be:98:a5:ec:83:2c:
                    70:c0:24:76:52:9c:eb:79:c3:18:bf:88:be:db:53:
                    4a:a2:7a:16:61:c0:16:72:5e:2a:e4:a5:34:12:fb:
                    87:2a:68:b4:ce:e2:01:5f:09:6e:47:70:34:7e:98:
                    f5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:70:15:18:2C:6C:31:C7:41:A8:26:BC:72:E9:8C:4C:FF:EA:36:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/9bdd0cf2-396a-3cb0-9cbf-2d8e18e53347.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.18.0-23.237.23.255
                  23.237.26.0/23
                  23.237.253.0/24
                  198.255.117.0-198.255.119.255
                  198.255.123.0/24
                IPv6:
                  2001:49f0:a06b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:8d:e5:08:e5:bb:a4:0f:3a:31:eb:70:bc:bf:e6:10:0c:c5:
         19:5f:f3:31:f1:3b:28:64:8a:bd:cd:3d:d9:f3:58:93:88:0d:
         a4:90:bf:08:c8:24:38:e1:ec:b7:33:e4:1a:ed:f5:63:a7:49:
         e2:6c:37:2b:df:a8:04:3e:53:a3:e4:fc:62:ac:2f:5a:0d:c9:
         9d:9a:9c:ca:8f:03:c1:61:52:1d:a5:67:8b:26:dd:a2:82:bd:
         f3:c2:74:2f:33:9b:ea:64:00:24:6c:ce:7c:85:a9:45:f9:5a:
         5b:1b:29:fe:fc:48:44:c0:f1:56:4c:7c:89:a5:0c:15:92:bb:
         fb:07:d2:7f:bb:f6:f9:b1:bd:f2:86:45:4a:75:4a:29:42:7b:
         dd:4e:0f:e7:d0:41:59:95:6b:64:50:0b:64:79:2f:4f:0e:3c:
         14:db:57:2f:73:23:9d:12:22:12:d9:9b:49:05:0b:d7:3b:7f:
         13:36:cb:46:64:c5:4e:50:66:3a:0d:7f:5f:13:4b:2f:be:7c:
         37:e4:b2:8b:0d:5f:04:b2:16:44:ad:a3:6d:97:d1:4e:79:a6:
         a9:61:04:38:80:88:26:73:72:58:89:6a:cc:7b:59:d2:b2:d0:
         c7:7e:48:de:f9:f5:8a:ba:40:cd:4d:c2:eb:b6:00:2c:5b:94:
         44:9b:ce:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:58:10 2026 by rpki-client