Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/42e53f39-0ea0-3d39-bd60-ecf011b056e4.roa
File:                     42e53f39-0ea0-3d39-bd60-ecf011b056e4.roa (raw, json)
Hash identifier:          AdHb+5QUZYslXR9SAtFgaVBksQ6Ho2wrH02zDrHXNFA=
Subject key identifier:   55:80:D1:F4:FB:13:BC:77:B6:E2:6F:E6:32:66:2D:9D:47:58:B3:8D
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584E78FF811AD620B20B2BC68E00
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/42e53f39-0ea0-3d39-bd60-ecf011b056e4.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     1239
IP address blocks:        23.237.126.0/23 maxlen: 23
                          23.237.130.0/23 maxlen: 23
                          23.237.136.0/23 maxlen: 23
                          23.237.138.0/24 maxlen: 24
                          23.237.191.0/24 maxlen: 24
                          23.237.218.0/24 maxlen: 24
                          23.237.244.0/24 maxlen: 24
                          23.237.250.0/24 maxlen: 24
                          50.7.0.0/24 maxlen: 24
                          50.7.8.0/24 maxlen: 24
                          50.7.9.0/24 maxlen: 24
                          50.7.10.0/24 maxlen: 24
                          50.7.11.0/24 maxlen: 24
                          50.7.12.0/24 maxlen: 24
                          50.7.13.0/24 maxlen: 24
                          50.7.15.0/24 maxlen: 24
                          50.7.16.0/24 maxlen: 24
                          50.7.18.0/24 maxlen: 24
                          50.7.19.0/24 maxlen: 24
                          50.7.20.0/24 maxlen: 24
                          50.7.21.0/24 maxlen: 24
                          66.90.124.0/24 maxlen: 24
                          192.240.122.0/24 maxlen: 24
                          198.255.16.0/24 maxlen: 24
                          216.227.131.0/24 maxlen: 24
                          216.227.142.0/23 maxlen: 23
                          216.227.144.0/23 maxlen: 23
                          216.227.146.0/23 maxlen: 23
                          216.227.148.0/23 maxlen: 23
                          216.227.150.0/23 maxlen: 23
                          216.227.152.0/23 maxlen: 23
                          216.227.154.0/23 maxlen: 23
                          216.227.156.0/23 maxlen: 23
                          216.227.160.0/23 maxlen: 23
                          216.227.162.0/24 maxlen: 24
                          216.227.163.0/24 maxlen: 24
                          216.227.164.0/24 maxlen: 24
                          216.227.165.0/24 maxlen: 24
                          216.227.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:81:1a:d6:20:b2:0b:2b:c6:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=c2fe0c76-3728-4579-8bf4-6ace8fbcc403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8d:ff:8f:fd:16:4b:30:41:e3:a0:69:d2:1c:
                    db:4f:72:78:72:94:43:8a:7f:ae:ef:7e:06:32:80:
                    47:24:8e:0b:fe:48:68:ff:e9:18:38:3a:ae:5b:72:
                    9c:3e:e4:59:aa:5b:53:b2:ef:2b:ef:42:d8:d1:04:
                    5d:d0:2d:e6:16:92:36:10:e6:f1:91:09:b4:19:57:
                    e8:6f:50:e9:0d:72:3d:75:2d:27:ab:4d:b3:23:97:
                    f2:73:47:2b:70:28:90:68:8f:fd:96:4d:cd:7d:68:
                    d7:c1:8d:b7:9f:66:45:d3:58:d8:31:8a:09:6e:10:
                    06:d4:20:cd:ba:53:c2:5a:1d:97:d3:fc:14:39:c3:
                    f5:34:07:43:41:d6:fb:db:6b:a5:b9:76:d7:b8:c4:
                    e6:d1:63:11:89:67:fb:ac:b6:c3:c9:c1:c7:3f:e5:
                    97:bd:d6:6b:6c:dd:91:4f:ca:3f:d1:ff:8d:03:01:
                    b1:f5:5a:78:11:2b:7e:76:f7:de:8c:46:89:66:43:
                    b4:90:d5:90:94:9c:7c:f9:d0:dd:37:4d:71:bf:69:
                    47:d2:04:0b:9e:e8:e8:87:87:61:7d:c9:c0:5f:ee:
                    0b:55:56:22:a4:a0:46:d9:96:92:55:a0:0f:70:4a:
                    13:0c:47:7b:a6:bf:8a:35:8e:93:e0:f2:05:ff:5b:
                    5d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:80:D1:F4:FB:13:BC:77:B6:E2:6F:E6:32:66:2D:9D:47:58:B3:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/42e53f39-0ea0-3d39-bd60-ecf011b056e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.126.0/23
                  23.237.130.0/23
                  23.237.136.0-23.237.138.255
                  23.237.191.0/24
                  23.237.218.0/24
                  23.237.244.0/24
                  23.237.250.0/24
                  50.7.0.0/24
                  50.7.8.0-50.7.13.255
                  50.7.15.0-50.7.16.255
                  50.7.18.0-50.7.21.255
                  66.90.124.0/24
                  192.240.122.0/24
                  198.255.16.0/24
                  216.227.131.0/24
                  216.227.142.0-216.227.157.255
                  216.227.160.0-216.227.165.255
                  216.227.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:7c:5d:55:1b:15:7e:b3:96:98:d5:52:a8:b9:62:5d:32:c8:
         f7:f9:a7:b1:42:75:2e:ad:ea:f8:dd:27:5e:52:20:ba:c4:d2:
         8b:1a:85:a5:78:f1:72:56:d2:73:26:03:e0:d2:2e:24:05:53:
         f7:0c:bf:6e:5d:51:71:23:93:36:40:53:45:d5:07:c5:06:b1:
         06:3f:d1:d3:60:fa:16:ff:f5:d4:5c:94:44:12:d0:95:7b:05:
         f6:c2:29:4b:8e:3f:c6:c8:6d:52:00:a6:4c:cc:de:e7:ac:4e:
         ef:2f:57:de:4f:dc:80:64:67:9b:80:af:f1:10:af:46:51:95:
         62:b5:72:13:fc:58:15:45:da:93:d9:7d:1a:64:e0:b3:6e:eb:
         c4:ae:58:15:33:9a:e2:c4:74:01:c2:84:c8:91:f2:60:ab:b8:
         b7:e0:39:8d:6d:23:6a:d0:2c:2c:d1:00:80:e7:88:e8:a6:07:
         24:4f:e7:c9:f1:a2:fa:95:56:68:c6:f0:a8:38:9c:fc:5e:19:
         1f:52:34:51:13:24:69:17:54:94:25:b0:ee:a9:bb:e3:ce:fc:
         80:e4:08:5c:27:48:85:17:5f:48:ca:c0:a4:26:ac:3b:32:ed:
         72:51:e1:dd:81:6b:ae:f6:48:ff:ac:2b:67:39:72:e6:c6:82:
         4b:b6:c0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:10:33 2026 by rpki-client