Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/aeb25a8f-2aab-3483-bf9d-e936e337d44b.roa
File:                     aeb25a8f-2aab-3483-bf9d-e936e337d44b.roa (raw, json)
Hash identifier:          kd0RaFaZFetl+trMAIZq26TnFQVibAOCG24EBoXRdzM=
Subject key identifier:   94:03:56:D3:60:29:71:BD:CB:3C:A7:D0:65:D2:55:38:6C:1B:B6:FD
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584E885A4802DBD6990EF7D98200
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/aeb25a8f-2aab-3483-bf9d-e936e337d44b.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     30058
IP address blocks:        23.237.187.0/24 maxlen: 24
                          216.227.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:48:02:db:d6:99:0e:f7:d9:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=93f59fa6-5e55-4e77-b654-9108acca1d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:af:f5:d5:95:f9:b0:90:48:6d:5d:c7:c3:6a:
                    3f:ac:ce:aa:b8:85:33:aa:de:0b:ff:a5:5e:0b:a8:
                    8e:cb:83:51:44:93:3b:33:6c:56:b9:82:c8:cc:86:
                    db:f6:63:0a:30:e4:5d:da:af:6a:87:a8:9c:04:c3:
                    a3:c2:f7:38:4b:2e:65:a3:3e:1f:34:69:96:6c:64:
                    b2:55:a3:27:ab:87:33:a0:af:31:53:10:66:92:01:
                    c4:66:cd:14:47:24:6f:8b:41:d0:e5:36:3e:b5:7c:
                    e3:b3:aa:de:1d:26:be:03:f7:d9:32:ed:4a:d9:81:
                    0d:a5:1f:6b:c3:6a:f3:2b:eb:83:19:7d:cf:bb:36:
                    db:01:ab:b3:d3:e3:86:a2:b0:e9:83:fc:fc:a5:c4:
                    88:fe:76:12:a7:3d:00:c9:48:d9:5b:3c:0f:fb:24:
                    69:40:d3:5c:66:c5:fc:06:1d:78:30:65:77:0b:8d:
                    d1:bd:6c:07:83:be:62:df:cb:04:e4:9f:47:4a:94:
                    59:be:f4:a5:15:ed:8c:a9:ed:fa:76:4e:db:13:9f:
                    94:89:a2:64:97:94:78:85:b8:eb:3b:ef:bc:c4:01:
                    2f:d8:ad:e2:71:5d:f8:d5:85:28:b2:c8:66:69:99:
                    69:fa:f4:a3:5b:4a:96:65:cb:ce:28:78:eb:14:9d:
                    3a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:03:56:D3:60:29:71:BD:CB:3C:A7:D0:65:D2:55:38:6C:1B:B6:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/aeb25a8f-2aab-3483-bf9d-e936e337d44b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.187.0/24
                  216.227.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:7b:92:d2:e5:9d:f7:87:95:a1:f3:bb:e5:7b:7b:19:46:cc:
         2b:2b:95:cc:e5:4b:9d:af:2f:59:eb:10:40:fb:51:33:c3:a1:
         be:24:ce:87:24:93:57:14:8b:c9:5b:5e:6a:07:69:2b:1e:0b:
         a0:ec:5c:aa:cf:e0:57:f0:b3:57:dc:13:16:b0:0e:c4:8f:57:
         c8:cf:59:e6:c5:f4:5a:61:da:90:7c:f1:82:fe:d6:10:29:bf:
         8d:62:dc:a4:e5:cf:3c:3f:9c:d3:0e:13:5d:7d:27:48:8e:c5:
         fc:f6:cd:e5:60:a6:66:06:0a:03:9e:bd:7d:49:df:e3:0a:9f:
         26:14:c1:eb:82:5d:13:c6:74:fa:95:f2:a0:f8:a6:af:90:9b:
         a5:d6:0f:8a:3f:d9:5a:dd:ce:64:18:1c:ed:a4:97:02:32:c2:
         30:dc:3c:ca:35:e7:62:02:d2:58:35:12:da:db:d0:f9:fc:d3:
         1c:0e:5f:e0:d5:51:5e:94:9e:2e:d9:b1:4e:2b:a3:92:9b:e3:
         59:b7:32:98:ed:06:16:f1:7c:e4:1d:c9:86:3c:ae:d8:a3:80:
         c5:0e:92:3a:69:42:de:41:ad:07:78:3c:55:e6:c7:78:e2:6a:
         2e:96:d5:dd:37:27:6e:46:14:d8:c7:ab:41:88:2f:ca:11:28:
         b1:f3:dd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:53:43 2026 by rpki-client