Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c7e9f869-3d1c-3b23-8cf9-a9d66af06d26.roa
File:                     c7e9f869-3d1c-3b23-8cf9-a9d66af06d26.roa (raw, json)
Hash identifier:          YdTIxoHzZsK2E67I5TcnLSEOUjkEeLSRo0tLV+MC30w=
Subject key identifier:   67:75:89:D2:90:38:0C:FF:42:0D:0E:E6:23:EF:2B:1E:91:3C:63:3F
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584E3069B17BAD04D4F384D45380
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c7e9f869-3d1c-3b23-8cf9-a9d66af06d26.roa
Signing time:             Tue 16 Jun 2026 09:00:12 +0000
ROA not before:           Tue 16 Jun 2026 09:00:12 +0000
ROA not after:            Mon 14 Sep 2026 09:00:12 +0000
asID:                     30058
IP address blocks:        23.237.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:30:69:b1:7b:ad:04:d4:f3:84:d4:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jun 16 09:00:12 2026 GMT
            Not After : Sep 14 09:00:12 2026 GMT
        Subject: CN=6771c30a-061f-49f6-bca0-4fafb30290e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:89:d9:fb:fc:d5:66:0e:50:3e:a2:f2:89:a9:
                    38:dc:3d:84:1d:1a:5a:41:ca:35:f2:96:44:eb:6b:
                    23:c8:21:7d:0b:3a:70:40:bb:b0:7b:1c:d6:a3:7d:
                    1c:a0:b4:ae:6f:77:b0:48:ad:9b:8c:dd:5e:67:e3:
                    c8:fb:5f:40:9d:8e:d9:37:4b:e3:53:5c:78:16:aa:
                    06:15:eb:14:dc:9b:13:a8:8c:68:2a:d8:3a:e5:c6:
                    aa:d0:11:b6:fb:0d:64:09:80:44:4a:5a:1d:b3:df:
                    ae:60:1d:d6:1f:6d:83:e1:5c:3e:4d:c0:6d:2e:10:
                    b5:c9:7a:46:42:cd:1a:9b:94:0c:3d:4e:7d:0a:ef:
                    b5:09:a3:b3:9f:00:cd:8b:ad:21:57:be:be:2f:0b:
                    ae:9f:e5:8c:72:de:85:e7:cf:8b:86:34:a9:2e:a8:
                    f0:0a:db:34:55:7e:7c:cc:7f:24:3e:d2:40:f2:5b:
                    e5:ee:1c:9f:5c:5d:22:dc:ac:56:02:d3:71:fe:86:
                    15:3e:8e:03:70:b7:40:12:31:2c:29:13:8a:84:bb:
                    7a:dd:af:17:44:90:49:37:06:23:7e:97:8a:82:b6:
                    1b:31:be:66:08:da:29:8a:e1:78:ab:c6:75:cf:16:
                    c0:0d:41:a1:78:16:eb:f1:c6:8d:40:63:62:e6:a8:
                    b1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:75:89:D2:90:38:0C:FF:42:0D:0E:E6:23:EF:2B:1E:91:3C:63:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c7e9f869-3d1c-3b23-8cf9-a9d66af06d26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:1a:c1:45:f1:0e:0b:b9:dc:7a:4a:2b:b9:82:fb:db:6c:0d:
         cd:84:46:f7:8a:05:8a:1f:27:86:c3:e4:20:34:7a:b2:c0:82:
         60:8f:72:6b:a4:1e:c6:0d:56:de:08:e1:d8:12:31:8b:95:c0:
         1b:37:d4:68:bc:fb:7a:b3:a2:de:cc:75:60:75:94:ba:e0:5c:
         2e:c5:96:e7:c7:b5:4b:19:f6:d6:9f:de:8c:89:fd:de:83:35:
         72:11:da:fc:a6:d3:44:ca:ac:a5:ba:93:8c:7d:f6:a2:9b:38:
         64:a2:e8:de:21:c6:78:24:b9:02:7c:e9:df:86:81:a4:e7:83:
         41:1c:81:60:72:11:4f:40:da:fd:ed:a7:d3:63:60:9a:6b:56:
         00:60:89:38:2a:b4:b0:04:8b:6b:2b:db:c6:3e:0b:f6:ec:c5:
         3e:8d:15:8a:3c:c4:2d:fb:8f:bd:89:71:e7:35:aa:d1:4d:b6:
         03:7d:e8:8f:15:40:d5:c3:63:e2:27:bd:63:d1:84:fb:e1:f9:
         a0:dc:1e:ce:88:fd:65:59:b8:e8:9c:8b:d7:dd:af:4a:b5:dc:
         d8:7d:28:10:b1:8b:8d:85:6b:3d:e0:c8:18:d7:02:de:19:ec:
         84:d9:56:83:f1:62:2f:11:e7:64:ac:88:3b:1d:35:39:56:89:
         9f:1a:32:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:54:55 2026 by rpki-client