Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c3f5e61d-4a03-375b-80aa-73d6d5db706f.roa
File:                     c3f5e61d-4a03-375b-80aa-73d6d5db706f.roa (raw, json)
Hash identifier:          8qYx7vqGSMX27vGlRVKW5AnoLpOl8ys7XUad3mLXzIk=
Subject key identifier:   1A:32:E2:08:5D:B9:FE:08:B7:2F:C8:19:3D:32:C0:3E:81:53:A4:9F
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F9A688019E780E3418C1A1100
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c3f5e61d-4a03-375b-80aa-73d6d5db706f.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     1239
IP address blocks:        23.237.148.0/23 maxlen: 23
                          23.237.150.0/23 maxlen: 23
                          23.237.152.0/23 maxlen: 23
                          23.237.154.0/23 maxlen: 23
                          23.237.156.0/23 maxlen: 23
                          2001:49f0:d0c4::/48 maxlen: 48
                          2001:49f0:d0c5::/48 maxlen: 48
                          2001:49f0:d0c6::/48 maxlen: 48
                          2001:49f0:d0c7::/48 maxlen: 48
                          2001:49f0:d0c8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:80:19:e7:80:e3:41:8c:1a:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=8dd9dc98-4d6f-44f1-8bc1-2341be86215d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c8:fc:6b:8c:7b:42:0c:5d:01:7c:54:7c:ec:
                    57:fa:00:60:18:e1:9a:f3:d1:99:1c:ba:0d:e1:28:
                    f8:a9:94:63:51:e2:f2:b8:12:d7:f8:73:68:f4:bc:
                    41:85:a3:26:9d:00:ec:68:37:81:5f:f3:89:a0:74:
                    c1:d5:5c:e3:0b:fa:10:b4:d8:33:a1:72:b2:a3:e3:
                    62:e4:1e:5c:59:81:97:f5:fb:3b:cb:5c:b6:46:75:
                    03:f6:a0:ff:b8:64:70:b4:89:d3:90:c9:64:f0:ed:
                    11:a0:57:70:34:59:f1:45:7d:e6:b9:d3:09:c1:5e:
                    e1:4f:63:31:e9:78:b7:38:5c:08:e0:76:a7:66:7d:
                    e4:93:9e:d1:55:52:8e:c1:15:0b:fb:f9:60:f9:5a:
                    7e:f7:89:99:92:32:20:d4:18:06:11:5b:67:1b:8d:
                    88:c0:da:e4:ca:71:3c:8a:68:11:cc:b2:d0:bc:fb:
                    92:b9:9b:8c:18:d5:5b:d9:9e:52:1d:38:da:13:82:
                    dd:82:0e:4a:cb:63:a1:88:93:29:9f:b9:49:31:93:
                    79:93:19:ae:17:c4:dc:8c:e1:72:b3:1b:7c:9f:21:
                    63:7e:21:2c:fc:ab:60:62:93:38:71:67:e9:55:1d:
                    c3:c2:99:7c:f9:67:1f:4b:6d:09:79:aa:4d:b5:5f:
                    ae:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:32:E2:08:5D:B9:FE:08:B7:2F:C8:19:3D:32:C0:3E:81:53:A4:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c3f5e61d-4a03-375b-80aa-73d6d5db706f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.148.0-23.237.157.255
                IPv6:
                  2001:49f0:d0c4::-2001:49f0:d0c8:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:19:7f:da:1c:fd:b7:41:13:5b:21:24:0c:87:9f:d4:67:ee:
         06:82:1b:de:8d:79:f0:af:80:f8:e8:d3:68:a3:a4:f9:e4:43:
         ac:9b:12:f3:73:fd:12:12:f2:f1:f1:75:cb:4e:c2:75:e2:3f:
         0d:f2:c4:87:03:60:e5:66:a5:ae:50:29:1d:8d:c5:09:d2:81:
         0b:62:ae:2a:ac:86:ab:16:f6:2d:57:0f:3b:8e:82:19:3b:da:
         ad:2e:f9:a2:fc:8d:b5:b4:27:9d:df:10:7f:bb:f2:39:55:90:
         73:9b:26:e7:0e:c7:74:4a:5f:34:80:d5:1e:2c:f3:5b:41:f3:
         42:f8:97:5e:54:df:67:e2:96:ac:88:82:ce:43:d0:b5:d2:4e:
         7f:e4:04:f8:7c:e1:08:c5:8c:b9:18:98:e6:0d:f4:b1:82:82:
         9d:5a:79:85:ec:84:89:7d:53:84:31:5e:e8:e9:48:54:20:6d:
         33:9e:d5:68:02:a9:98:e2:23:7c:a0:98:ec:59:28:a4:a6:4a:
         62:ac:59:06:25:f4:7d:91:d8:00:a4:f4:e3:79:82:bc:1f:f0:
         1c:d8:3f:7c:a6:6d:f3:77:58:cd:60:ca:9f:e7:15:b7:e8:2c:
         92:82:06:b7:89:38:09:e9:4b:f3:0c:13:73:ab:fb:41:30:1b:
         da:80:84:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 19:23:00 2026 by rpki-client