Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7b58fee1-e3ee-3d52-b877-8a2eafa33e51.roa
File:                     7b58fee1-e3ee-3d52-b877-8a2eafa33e51.roa (raw, json)
Hash identifier:          RpjYGPYr7KvSAD9ZUC9Ig6E6kMEHU7lB6JAtvxsJWFc=
Subject key identifier:   25:CC:E8:CC:29:51:BA:3B:29:5E:C5:40:44:AA:6C:19:AB:CB:D4:7F
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584D98BAABE2F4BA4DA42D6886C0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7b58fee1-e3ee-3d52-b877-8a2eafa33e51.roa
Signing time:             Thu 23 Apr 2026 01:00:24 +0000
ROA not before:           Thu 23 Apr 2026 01:00:24 +0000
ROA not after:            Wed 22 Jul 2026 01:00:24 +0000
asID:                     30058
IP address blocks:        23.237.126.0/23 maxlen: 23
                          23.237.130.0/23 maxlen: 23
                          23.237.136.0/23 maxlen: 23
                          23.237.138.0/24 maxlen: 24
                          23.237.191.0/24 maxlen: 24
                          23.237.218.0/24 maxlen: 24
                          23.237.244.0/24 maxlen: 24
                          23.237.250.0/24 maxlen: 24
                          50.7.0.0/24 maxlen: 24
                          50.7.8.0/24 maxlen: 24
                          50.7.9.0/24 maxlen: 24
                          50.7.10.0/24 maxlen: 24
                          50.7.11.0/24 maxlen: 24
                          50.7.12.0/24 maxlen: 24
                          50.7.13.0/24 maxlen: 24
                          50.7.15.0/24 maxlen: 24
                          50.7.16.0/24 maxlen: 24
                          50.7.18.0/24 maxlen: 24
                          50.7.19.0/24 maxlen: 24
                          50.7.20.0/24 maxlen: 24
                          50.7.21.0/24 maxlen: 24
                          66.90.124.0/24 maxlen: 24
                          192.240.122.0/24 maxlen: 24
                          198.255.16.0/24 maxlen: 24
                          216.227.131.0/24 maxlen: 24
                          216.227.142.0/23 maxlen: 23
                          216.227.144.0/23 maxlen: 23
                          216.227.146.0/23 maxlen: 23
                          216.227.148.0/23 maxlen: 23
                          216.227.150.0/23 maxlen: 23
                          216.227.152.0/23 maxlen: 23
                          216.227.154.0/23 maxlen: 23
                          216.227.156.0/23 maxlen: 23
                          216.227.160.0/23 maxlen: 23
                          216.227.162.0/24 maxlen: 24
                          216.227.163.0/24 maxlen: 24
                          216.227.164.0/24 maxlen: 24
                          216.227.165.0/24 maxlen: 24
                          216.227.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:ba:ab:e2:f4:ba:4d:a4:2d:68:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Apr 23 01:00:24 2026 GMT
            Not After : Jul 22 01:00:24 2026 GMT
        Subject: CN=276061c4-c2df-4d4d-99e0-dbf7f9ce24cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:20:8f:ff:cb:9f:6e:7e:f3:eb:ba:3c:57:bd:
                    08:15:8a:f2:da:98:3b:b2:b8:0e:64:e5:78:00:ca:
                    b4:b6:a8:09:cb:a6:36:e6:8e:96:5c:4e:02:2a:4e:
                    82:80:b8:83:20:e0:f6:2b:34:f7:22:03:e5:51:91:
                    71:c6:84:21:91:a9:65:6d:f8:af:f6:a9:cc:d2:9f:
                    a5:03:8a:53:54:bc:a3:de:66:b9:9a:d8:da:a2:fa:
                    85:71:a4:9d:17:e2:e7:c0:eb:8d:3b:42:f7:97:06:
                    f6:da:89:09:ac:04:00:ee:01:fd:49:d1:b4:c1:60:
                    b9:bd:39:ba:68:aa:24:2e:a3:45:dd:82:c3:14:37:
                    40:ec:f2:80:7c:7e:c1:b2:5f:af:44:e9:f3:33:cd:
                    e4:49:49:d0:f9:d0:cd:9c:97:4f:72:c9:a7:e8:5a:
                    d1:80:72:34:b3:0a:96:3a:cc:c8:ae:6a:83:f6:26:
                    97:46:1f:e1:00:53:75:cb:8f:8d:92:77:e0:42:77:
                    87:38:f1:65:bc:00:ea:86:cb:33:6b:a9:c8:11:3e:
                    25:79:fc:8e:10:6b:7a:ff:5d:4f:b5:41:a3:01:75:
                    f5:31:a1:4d:19:9a:ab:58:67:f8:0a:1c:fe:ec:f2:
                    3b:d5:5e:5d:f4:28:1c:7c:d2:85:6e:95:3c:c0:f0:
                    fa:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CC:E8:CC:29:51:BA:3B:29:5E:C5:40:44:AA:6C:19:AB:CB:D4:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7b58fee1-e3ee-3d52-b877-8a2eafa33e51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.126.0/23
                  23.237.130.0/23
                  23.237.136.0-23.237.138.255
                  23.237.191.0/24
                  23.237.218.0/24
                  23.237.244.0/24
                  23.237.250.0/24
                  50.7.0.0/24
                  50.7.8.0-50.7.13.255
                  50.7.15.0-50.7.16.255
                  50.7.18.0-50.7.21.255
                  66.90.124.0/24
                  192.240.122.0/24
                  198.255.16.0/24
                  216.227.131.0/24
                  216.227.142.0-216.227.157.255
                  216.227.160.0-216.227.165.255
                  216.227.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:7c:49:b2:99:0f:de:57:d7:09:66:d4:da:1d:ee:ac:d1:c9:
         1e:f4:03:7f:1b:dc:36:d7:24:fd:9c:ba:eb:e7:75:6c:32:90:
         61:cb:73:91:65:e2:56:13:38:61:1b:98:f5:f8:66:1a:52:6c:
         3d:2a:31:25:06:71:40:21:d0:ce:d7:74:ba:5a:7a:b1:71:ea:
         93:3f:80:18:3b:42:72:08:1b:b4:54:71:f1:0a:87:30:4c:cf:
         a2:e7:98:73:30:a4:a8:d7:7f:db:7d:d9:70:68:c4:eb:07:f7:
         4f:10:0e:99:00:c3:bf:76:4d:23:e3:68:67:66:c7:aa:fa:53:
         2b:e8:e5:ef:e3:15:1b:73:6b:04:75:13:c8:11:72:65:c9:f4:
         d3:7c:20:3c:73:f5:25:4f:c4:8b:e7:a2:5d:4a:e8:52:bd:d0:
         99:f0:2c:a4:eb:ff:b2:ee:70:dc:f0:af:2a:ad:29:d0:d3:92:
         f9:a5:0b:da:f0:64:c6:97:c7:59:99:6b:59:b8:0e:0c:d9:4c:
         f2:2b:b2:14:b5:2d:ba:e4:d4:0c:67:9d:34:c6:15:ea:e9:3e:
         df:ca:40:b7:b9:b4:b5:18:77:13:50:42:01:8e:86:19:75:04:
         25:68:45:ce:5f:5a:9b:dc:66:c1:ca:34:55:64:bd:d2:4b:4a:
         e8:02:d7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:29:44 2026 by rpki-client