Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/4682e26a-e769-36ce-accb-635b2b21e13b.roa
File:                     4682e26a-e769-36ce-accb-635b2b21e13b.roa (raw, json)
Hash identifier:          dGQAZ/BAsOmS/6b7igAhEGFZRWTtTo8CTCshlJDANJ0=
Subject key identifier:   C7:76:15:7F:D0:21:DA:F6:04:DD:95:F3:D2:53:62:1A:5E:E2:1D:CB
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F497398DA109CAD6DD6CF2E80
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/4682e26a-e769-36ce-accb-635b2b21e13b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30058
IP address blocks:        23.237.184.0/24 maxlen: 24
                          23.237.254.0/24 maxlen: 24
                          23.237.255.0/24 maxlen: 24
                          2001:49f0:d04c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:98:da:10:9c:ad:6d:d6:cf:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7e8c2253-4f90-410f-9a65-08ef40164449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9d:11:73:5a:5e:4f:7e:61:07:17:f8:1f:82:
                    f6:31:91:26:ef:6c:74:ea:63:e4:06:01:e9:0c:26:
                    4d:c3:88:e4:a2:5b:72:2f:e3:54:0e:de:71:0e:70:
                    00:6a:de:63:ba:62:87:4f:d2:4f:9a:c4:8a:c9:17:
                    bd:af:87:a8:29:70:51:40:bb:5f:05:63:e6:c6:83:
                    87:95:e3:2d:25:75:1e:aa:b2:7f:68:fa:11:de:80:
                    cc:92:04:2d:91:20:f1:d0:bf:30:ce:c5:e3:4c:6c:
                    8f:db:57:b3:c9:e0:0e:b0:df:09:ce:aa:07:1d:2f:
                    b2:2e:ea:a4:93:73:1d:61:dd:54:36:33:e6:15:be:
                    10:d5:80:d7:a5:e3:ad:8e:42:d4:32:f2:0e:c2:c2:
                    1f:bb:50:14:4e:65:63:32:cd:ad:df:5a:7c:e1:b6:
                    21:f5:7f:70:f8:d3:e9:61:70:e8:6d:7a:17:99:f5:
                    06:64:d1:96:ea:e5:84:bc:c2:fd:e0:8c:72:51:55:
                    90:22:90:b6:13:3d:47:b3:b0:c2:d3:fe:c1:89:7d:
                    3b:4a:a7:92:6d:c7:78:85:95:82:79:39:61:6a:7c:
                    16:fe:bf:35:d7:0a:65:f0:2d:45:6f:ae:40:59:e2:
                    98:f2:da:a1:24:a9:93:8e:e1:ec:8a:bf:ba:6a:36:
                    89:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:76:15:7F:D0:21:DA:F6:04:DD:95:F3:D2:53:62:1A:5E:E2:1D:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/4682e26a-e769-36ce-accb-635b2b21e13b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.184.0/24
                  23.237.254.0/23
                IPv6:
                  2001:49f0:d04c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:b4:0c:db:ff:c3:9b:b1:f0:85:06:48:33:cf:5c:39:ed:4d:
         e6:04:36:d8:f6:35:0f:5b:ce:7f:c4:ed:cc:0b:1e:c0:c5:38:
         03:65:66:23:f1:d3:4b:df:a8:17:6c:de:73:9d:ef:eb:1d:84:
         28:88:7e:a3:ed:05:a2:07:9a:fc:21:79:32:cb:c9:06:f9:25:
         e5:c8:98:9e:7f:9f:df:fd:62:3f:2b:f4:c6:d1:05:8e:c2:f3:
         e7:97:58:4b:2e:2c:3c:5a:90:8f:d6:51:45:39:03:1e:45:1d:
         8a:ee:07:e1:47:69:c4:68:59:f5:af:d0:91:ae:05:f0:d1:65:
         ab:b1:d0:1f:cb:4e:94:b8:ad:c7:bd:97:46:d8:dd:44:47:93:
         2a:87:92:00:b4:4e:c5:b8:f4:58:11:0b:06:86:eb:cb:9b:e2:
         16:35:aa:1a:03:8e:19:a7:c7:7d:69:8f:c5:e1:33:c8:c1:46:
         18:14:0d:5f:d8:ae:0d:bb:ae:38:6b:61:5e:a6:1f:8d:81:8e:
         e9:be:dc:f9:dd:90:19:80:5b:31:31:10:b2:4a:f4:14:e6:d5:
         22:f1:57:3d:eb:40:a2:26:0e:80:4f:28:2c:0d:c6:fb:80:01:
         82:88:81:61:d5:a0:dd:b6:0f:1d:37:77:9e:ad:7d:6c:94:d0:
         95:0d:55:b2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 26 18:49:01 2026 by rpki-client