Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0ce79eca-51dc-3095-9dac-a9480e409e13.roa
File:                     0ce79eca-51dc-3095-9dac-a9480e409e13.roa (raw, json)
Hash identifier:          pywDf1EFu3kMmTQLzvR9ZDX3PZK3Hqet5G+peSVh26s=
Subject key identifier:   09:06:97:07:1C:CF:98:20:01:02:B3:96:19:67:96:DD:4B:21:D1:37
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584E86F4FDD2C352B2567785F080
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0ce79eca-51dc-3095-9dac-a9480e409e13.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     1239
IP address blocks:        23.237.47.0/24 maxlen: 24
                          23.237.62.0/24 maxlen: 24
                          23.237.78.0/23 maxlen: 24
                          23.237.88.0/23 maxlen: 24
                          23.237.144.0/24 maxlen: 24
                          23.237.145.0/24 maxlen: 24
                          23.237.146.0/24 maxlen: 24
                          23.237.160.0/23 maxlen: 24
                          23.237.202.0/23 maxlen: 24
                          23.237.251.0/24 maxlen: 24
                          23.237.252.0/24 maxlen: 24
                          50.7.64.0/22 maxlen: 24
                          192.240.98.0/23 maxlen: 24
                          192.240.112.0/22 maxlen: 24
                          192.240.118.0/23 maxlen: 24
                          198.255.22.0/23 maxlen: 24
                          198.255.124.0/24 maxlen: 24
                          216.227.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:fd:d2:c3:52:b2:56:77:85:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=5e15db24-9fef-4b45-9921-c3b2762c1f66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1b:10:e1:8c:33:4b:ff:e0:dc:36:bc:54:7a:
                    89:3a:fc:a4:d7:37:f8:00:0c:e2:69:dd:6b:64:c6:
                    ee:38:7c:e5:b0:6c:1f:e3:a7:ad:e2:8d:d5:ee:9f:
                    d2:f8:75:f0:be:b2:47:b2:5d:fc:b6:09:91:c9:57:
                    31:7f:19:6c:d0:84:81:6f:0a:b0:19:ef:dd:c3:3b:
                    e6:b6:d2:4e:73:99:ff:7b:9b:03:71:07:9b:90:a9:
                    c9:14:ee:b0:a4:67:90:b7:a5:37:8c:5d:1f:4d:ca:
                    cb:b2:44:13:05:72:9e:71:86:e3:d7:ef:69:40:62:
                    1c:cc:75:2c:c5:54:bd:1f:76:01:e8:da:ee:a3:11:
                    d7:93:15:64:17:5a:a7:85:04:fa:a4:d8:8d:f3:7e:
                    d1:ec:6d:3d:2a:c0:63:2f:35:12:e0:3a:ef:67:cf:
                    36:40:bf:0d:cf:b6:50:7a:24:79:18:bd:9d:26:79:
                    d1:23:b9:e9:53:11:49:28:0f:74:9e:e2:69:60:21:
                    45:fc:55:86:0e:95:c6:9a:8a:88:20:f6:66:5c:72:
                    8e:5e:bc:5f:20:b6:c8:56:a6:e8:5d:fb:02:38:99:
                    e7:8d:91:44:9f:90:83:62:46:96:06:d7:52:24:c2:
                    7b:b4:07:87:2d:d3:ca:53:28:6b:f2:db:24:b4:66:
                    86:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:06:97:07:1C:CF:98:20:01:02:B3:96:19:67:96:DD:4B:21:D1:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0ce79eca-51dc-3095-9dac-a9480e409e13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.47.0/24
                  23.237.62.0/24
                  23.237.78.0/23
                  23.237.88.0/23
                  23.237.144.0-23.237.146.255
                  23.237.160.0/23
                  23.237.202.0/23
                  23.237.251.0-23.237.252.255
                  50.7.64.0/22
                  192.240.98.0/23
                  192.240.112.0/22
                  192.240.118.0/23
                  198.255.22.0/23
                  198.255.124.0/24
                  216.227.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:4f:d5:01:5d:db:a5:d9:08:00:84:c0:6c:61:9b:02:15:05:
         71:83:5d:73:cc:3b:5f:2c:32:35:33:61:9f:79:26:6c:65:52:
         05:44:e8:97:bf:4c:97:fd:35:6b:44:ec:39:8b:06:54:57:e0:
         33:02:94:99:c4:e1:93:96:ae:13:c9:f0:f0:8f:a9:7d:37:0a:
         ca:60:c1:8c:29:66:ba:aa:8e:26:6d:15:cd:ff:68:f6:27:6c:
         35:29:ff:58:f0:a6:47:d6:f1:af:a8:a1:14:35:0d:f0:6e:31:
         f4:53:72:e1:8d:8b:76:5a:aa:4b:9a:a8:fa:23:08:92:77:eb:
         35:03:f0:c0:ea:76:27:d8:46:80:b5:70:da:db:9b:a1:fd:a8:
         26:33:02:40:dd:a0:75:87:17:e6:40:05:3f:92:13:6e:21:a0:
         7d:83:b9:de:bf:53:64:41:85:38:83:71:54:02:7b:1d:f5:18:
         37:59:c9:ce:5f:41:3f:e5:b3:f0:86:e9:0c:62:31:dd:94:2a:
         a6:9b:8d:ea:5a:a3:77:85:28:c2:67:d4:f0:99:20:ad:78:e6:
         96:c9:73:a7:f7:42:8b:36:9b:2b:d6:b0:3e:8a:16:52:2d:e3:
         ec:38:40:a4:2e:ae:a8:8e:df:04:b9:3d:8d:b9:9a:6a:7d:ac:
         a5:60:02:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:11:22 2026 by rpki-client