Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1f3bab31-0231-3100-91a9-50b51cdce6c5.roa
File:                     1f3bab31-0231-3100-91a9-50b51cdce6c5.roa (raw, json)
Hash identifier:          1sBY9r5QxbeyHWUW5xDo6+o4K5SOSGiwyw3WlF6fwgQ=
Subject key identifier:   81:B6:05:A9:81:B6:11:30:3F:90:0A:36:33:61:39:AC:EC:3F:FE:7C
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F1B624E00FC459AB6785EECC0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1f3bab31-0231-3100-91a9-50b51cdce6c5.roa
Signing time:             Tue 08 Sep 2026 13:00:12 +0000
ROA not before:           Tue 08 Sep 2026 13:00:12 +0000
ROA not after:            Mon 07 Dec 2026 14:00:12 +0000
asID:                     3257
IP address blocks:        23.237.126.0/23 maxlen: 23
                          23.237.130.0/23 maxlen: 23
                          23.237.136.0/23 maxlen: 23
                          23.237.138.0/24 maxlen: 24
                          23.237.191.0/24 maxlen: 24
                          23.237.218.0/24 maxlen: 24
                          23.237.244.0/24 maxlen: 24
                          23.237.250.0/24 maxlen: 24
                          50.7.0.0/24 maxlen: 24
                          50.7.8.0/24 maxlen: 24
                          50.7.9.0/24 maxlen: 24
                          50.7.10.0/24 maxlen: 24
                          50.7.11.0/24 maxlen: 24
                          50.7.12.0/24 maxlen: 24
                          50.7.13.0/24 maxlen: 24
                          50.7.15.0/24 maxlen: 24
                          50.7.16.0/24 maxlen: 24
                          50.7.18.0/24 maxlen: 24
                          50.7.19.0/24 maxlen: 24
                          50.7.20.0/24 maxlen: 24
                          50.7.21.0/24 maxlen: 24
                          66.90.124.0/24 maxlen: 24
                          192.240.122.0/24 maxlen: 24
                          198.255.16.0/24 maxlen: 24
                          216.227.131.0/24 maxlen: 24
                          216.227.142.0/23 maxlen: 23
                          216.227.144.0/23 maxlen: 23
                          216.227.146.0/23 maxlen: 23
                          216.227.148.0/23 maxlen: 23
                          216.227.150.0/23 maxlen: 23
                          216.227.152.0/23 maxlen: 23
                          216.227.154.0/23 maxlen: 23
                          216.227.156.0/23 maxlen: 23
                          216.227.160.0/23 maxlen: 23
                          216.227.162.0/24 maxlen: 24
                          216.227.163.0/24 maxlen: 24
                          216.227.164.0/24 maxlen: 24
                          216.227.165.0/24 maxlen: 24
                          216.227.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:62:4e:00:fc:45:9a:b6:78:5e:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep  8 13:00:12 2026 GMT
            Not After : Dec  7 14:00:12 2026 GMT
        Subject: CN=77e78b3c-146a-4bcb-b365-cb9000f7d20f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:60:da:41:56:28:72:66:2c:dc:30:a9:16:41:
                    d5:f3:29:a4:27:09:01:6a:67:f7:e2:a6:8e:b3:53:
                    40:d1:2a:ff:12:61:b8:d0:33:8b:33:8f:89:27:e4:
                    f4:b5:9b:a8:56:a2:61:54:73:c6:2a:ad:66:86:39:
                    80:9c:a5:09:b3:f0:b1:99:91:14:e3:4a:42:30:28:
                    ee:c1:58:cc:bf:39:4b:e2:e2:03:43:df:3d:cf:b9:
                    58:77:bf:17:05:9d:cf:88:5c:e6:8f:f9:4a:40:4e:
                    9c:7b:85:90:09:a3:89:02:38:e0:2d:55:56:c8:5e:
                    f0:b3:a7:b0:68:76:44:4c:07:11:45:dc:4a:96:d6:
                    18:e5:a3:ce:b5:a1:65:84:71:1f:84:f6:2c:9f:c4:
                    cf:9a:af:f2:4d:0e:06:ef:f6:92:d8:e9:35:d8:e3:
                    a9:9f:14:8d:43:7e:de:f1:3b:92:25:3b:8d:f5:1a:
                    01:80:29:16:e1:fd:43:d1:18:92:c1:fa:d8:58:63:
                    ae:34:81:f7:b8:03:70:07:c5:d3:64:de:6f:29:05:
                    92:8b:39:cb:38:cf:43:f5:cb:c5:d4:2e:e1:1c:ed:
                    75:53:74:84:ac:42:59:d3:c0:9c:fa:d9:49:ac:7f:
                    03:e1:54:13:4f:db:a9:bb:83:94:c1:ee:2c:47:82:
                    2a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B6:05:A9:81:B6:11:30:3F:90:0A:36:33:61:39:AC:EC:3F:FE:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1f3bab31-0231-3100-91a9-50b51cdce6c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.126.0/23
                  23.237.130.0/23
                  23.237.136.0-23.237.138.255
                  23.237.191.0/24
                  23.237.218.0/24
                  23.237.244.0/24
                  23.237.250.0/24
                  50.7.0.0/24
                  50.7.8.0-50.7.13.255
                  50.7.15.0-50.7.16.255
                  50.7.18.0-50.7.21.255
                  66.90.124.0/24
                  192.240.122.0/24
                  198.255.16.0/24
                  216.227.131.0/24
                  216.227.142.0-216.227.157.255
                  216.227.160.0-216.227.165.255
                  216.227.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:4f:51:a7:2a:9c:3a:1d:32:1e:2f:55:5b:c8:1f:f8:d6:2f:
         85:9f:c8:1f:2b:9e:c7:ae:46:34:2b:d5:fc:95:3c:ae:7f:d5:
         20:1e:a0:f4:39:ea:e9:df:a0:30:4d:82:69:62:af:df:2f:40:
         2e:50:91:f4:ff:7d:0f:b6:b6:7c:9d:38:5f:8d:6d:d6:70:d8:
         e5:6c:50:ed:e4:ac:fc:8d:ba:75:59:f2:ae:2d:98:4b:2c:d1:
         b4:d7:79:44:6f:18:f4:20:2d:17:ad:4f:d8:91:d9:ff:83:e6:
         ce:cf:50:dd:a5:96:c9:2d:5b:e0:df:1d:fc:5c:61:34:4f:6d:
         12:b3:82:3d:98:bd:2f:c7:3e:40:34:32:18:14:54:7a:0f:15:
         87:3b:c3:e7:95:39:f5:37:df:9d:66:72:57:7e:14:a0:e7:29:
         63:f3:59:f8:94:1d:61:96:e6:c3:6b:23:ef:6c:2b:ca:1b:89:
         d3:41:7b:b5:74:96:3c:8d:5f:7d:4a:e6:ab:f7:48:4f:fc:9c:
         79:ac:40:e2:a5:f0:c2:73:8a:37:59:be:4a:e8:fe:bb:1c:07:
         fd:b5:bd:7f:51:84:98:e2:ba:c0:fe:95:6a:60:fb:25:58:46:
         ff:5d:f2:4d:9c:03:62:ef:91:98:86:53:42:7c:27:d7:d5:07:
         26:08:58:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:14:49 2026 by rpki-client