Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f1675267-9cfa-39aa-adfb-425d746e3821.roa
File:                     f1675267-9cfa-39aa-adfb-425d746e3821.roa (raw, json)
Hash identifier:          8ZyCsrlpKxd6NKyqxikFY/aL1k0/LgMjMsJP4M1Xpmo=
Subject key identifier:   79:AC:79:C1:A8:C8:10:99:64:62:88:53:77:73:4F:EE:AA:87:43:75
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584D8EF589E08FB7FFFFED511300
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f1675267-9cfa-39aa-adfb-425d746e3821.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     1239
IP address blocks:        23.237.162.0/23 maxlen: 24
                          23.237.247.0/24 maxlen: 24
                          50.7.49.0/24 maxlen: 24
                          216.227.133.0/24 maxlen: 24
                          2001:49f0:d0d1::/48 maxlen: 48
                          2001:49f0:d122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:89:e0:8f:b7:ff:ff:ed:51:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=0cec67ea-d9f8-4020-b7b0-f777ae8e2796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:6f:64:70:d5:a7:00:67:ab:14:42:f1:85:91:
                    32:ad:98:00:99:a6:20:de:58:ef:c8:90:f4:81:66:
                    6f:40:12:70:07:d5:95:a8:a3:e1:a1:82:ff:35:07:
                    be:36:2d:8c:5a:43:cd:2a:3f:c3:01:41:42:d7:88:
                    cf:84:ce:3f:b9:24:88:26:17:a7:33:62:c1:91:e5:
                    e6:2b:83:45:d0:74:3d:0d:d9:a2:07:de:74:fe:d0:
                    72:bc:c7:b7:56:29:9a:97:f8:de:0a:67:2f:31:c2:
                    fd:d2:f5:37:2e:cc:53:e2:83:1b:96:78:22:00:3f:
                    11:b8:20:ef:dc:6d:04:9a:f5:44:0c:98:dd:d7:3c:
                    5a:cd:c0:32:19:36:0b:f0:90:bf:7e:a7:f4:4b:b8:
                    b4:af:e2:bc:65:1e:98:17:4b:8b:6e:ba:d5:31:e4:
                    45:e0:1d:f3:c5:7e:90:08:07:b6:d8:42:59:6b:0b:
                    42:90:c1:50:9b:55:30:bb:57:f8:7b:c3:e0:bc:54:
                    13:39:25:c6:41:4a:c6:26:d5:f4:aa:7c:66:f9:3c:
                    d7:86:4c:30:34:13:db:f6:3f:fd:51:56:7b:b1:a2:
                    d8:bd:07:69:8b:3d:a6:87:e5:f3:2a:f5:38:6a:62:
                    9e:d3:11:b7:80:96:1f:01:9f:05:71:8b:03:c7:58:
                    3a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AC:79:C1:A8:C8:10:99:64:62:88:53:77:73:4F:EE:AA:87:43:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f1675267-9cfa-39aa-adfb-425d746e3821.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.162.0/23
                  23.237.247.0/24
                  50.7.49.0/24
                  216.227.133.0/24
                IPv6:
                  2001:49f0:d0d1::/48
                  2001:49f0:d122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:23:47:76:d0:5d:dc:7a:ec:09:46:a3:f8:ef:dd:d5:62:92:
         f3:89:3d:6b:8d:b5:52:fe:ed:47:19:91:13:8a:1c:ca:27:08:
         a5:4d:7b:f5:d1:42:16:66:ee:25:81:25:0c:1b:66:ac:ab:e1:
         11:a0:a3:30:ac:26:9c:55:0a:66:b3:5a:5f:27:33:1f:52:53:
         83:0c:07:25:8e:61:c6:68:3a:6a:10:b1:f7:51:0c:24:72:12:
         41:ac:40:c6:29:7d:27:7d:09:bd:36:d3:03:14:ed:a1:83:aa:
         87:d0:50:44:cf:8d:5e:48:98:1c:b3:23:3e:cb:cf:c8:dc:ab:
         a7:a8:02:93:83:9d:ec:17:98:9d:05:9f:9a:c1:03:e8:d2:d0:
         aa:fb:06:c6:da:76:b3:22:4d:20:01:d0:8e:6c:00:93:e8:26:
         1d:dc:f7:08:f0:cc:6c:34:59:37:68:93:83:d3:2c:b6:89:45:
         f0:db:e2:64:e1:2f:24:12:5f:16:c3:12:65:d7:cc:d1:54:40:
         54:cd:1f:7f:19:1f:4f:89:79:80:5f:7b:b0:2d:d5:89:7d:5e:
         68:ff:48:0e:13:1e:11:53:28:1d:30:06:97:70:e5:71:ed:e3:
         8f:b0:01:e2:eb:2d:da:d3:b8:cb:fe:cc:d2:ab:86:b7:b8:cd:
         94:6e:ec:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 07:12:58 2026 by rpki-client