Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8bae2104-002c-3732-af7e-f26123198ae6.roa
File:                     8bae2104-002c-3732-af7e-f26123198ae6.roa (raw, json)
Hash identifier:          gd8MsQowU2yPjeJmfCFqXWZZNfpFvtlAXbbn3l0Mvq4=
Subject key identifier:   1A:03:4D:73:C7:E9:2E:3D:FA:33:C6:C4:33:19:35:83:6B:FA:A1:09
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584D8EF589F8EDF56CAA8219D5C0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8bae2104-002c-3732-af7e-f26123198ae6.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     174
IP address blocks:        23.237.74.0/23 maxlen: 24
                          23.237.82.0/23 maxlen: 24
                          23.237.158.0/23 maxlen: 24
                          23.237.208.0/24 maxlen: 24
                          50.7.72.0/22 maxlen: 24
                          192.240.100.0/23 maxlen: 24
                          198.255.121.0/24 maxlen: 24
                          2001:49f0:d002::/48 maxlen: 48
                          2001:49f0:d048::/48 maxlen: 48
                          2001:49f0:d090::/48 maxlen: 48
                          2001:49f0:d0c9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:89:f8:ed:f5:6c:aa:82:19:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=3fb0d07e-20f4-4e69-a87f-ee24b04f96b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:31:10:d3:be:4d:42:30:04:f0:38:32:d1:da:
                    a8:2c:64:ea:31:e3:33:99:15:25:15:d1:ec:8f:87:
                    40:d2:39:e8:09:4a:77:da:41:cb:ae:9e:03:c7:c9:
                    60:07:f9:cc:f2:b9:66:55:d7:60:19:df:66:f7:18:
                    c8:8d:d0:db:0f:35:74:aa:e0:88:6c:1a:ae:e2:33:
                    c4:a0:c4:2e:90:9f:69:e9:13:80:5c:9a:a4:d9:d1:
                    17:da:f0:31:e6:50:48:3f:ff:c8:17:c8:2a:33:ce:
                    7a:bb:4e:77:24:60:f2:19:ad:93:05:ce:c6:78:42:
                    7c:c2:a2:93:33:17:83:b6:f5:53:13:a3:6f:1b:97:
                    15:5d:7f:88:4e:8b:e9:f4:e7:0b:bf:ed:85:6a:f5:
                    06:30:30:e9:2d:2f:c7:05:17:33:a6:d0:58:51:df:
                    9e:d2:79:2b:fd:50:b1:af:70:10:88:5d:88:05:23:
                    f8:23:5b:d6:fe:34:56:10:6d:f7:ce:d6:ad:98:ad:
                    c1:bc:75:72:5b:cc:4a:ac:57:07:26:e5:51:59:43:
                    f6:91:2d:04:ba:b7:d7:c1:69:87:27:40:94:dc:c6:
                    aa:a4:6e:6b:cf:24:b0:c0:ef:11:c8:07:2d:a0:24:
                    ad:96:f8:9e:2c:62:bf:42:d8:4e:d1:88:f2:07:89:
                    d8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:03:4D:73:C7:E9:2E:3D:FA:33:C6:C4:33:19:35:83:6B:FA:A1:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8bae2104-002c-3732-af7e-f26123198ae6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.74.0/23
                  23.237.82.0/23
                  23.237.158.0/23
                  23.237.208.0/24
                  50.7.72.0/22
                  192.240.100.0/23
                  198.255.121.0/24
                IPv6:
                  2001:49f0:d002::/48
                  2001:49f0:d048::/48
                  2001:49f0:d090::/48
                  2001:49f0:d0c9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:09:80:b2:a4:2a:8a:2f:96:77:ca:38:e8:4b:db:8f:00:b8:
         a1:b0:4d:1b:ab:e7:c6:73:87:da:c3:86:92:77:07:27:35:7e:
         f2:e6:2b:e3:c7:9f:f3:cb:13:31:b6:df:dd:2b:e0:de:6a:65:
         6d:2d:40:06:4d:0e:05:7b:a8:9d:d4:f0:85:42:44:b4:ad:49:
         1b:ab:8d:63:fa:34:94:f2:b8:e6:af:29:fe:e4:ae:d4:09:71:
         da:c2:c8:37:04:d1:0d:1f:2e:c7:ae:04:91:0b:25:f0:3d:01:
         75:55:c8:83:7a:8d:53:12:11:bd:a1:10:3e:1a:b0:ed:33:8b:
         64:bc:56:5a:22:8e:9d:e4:ba:62:d3:9c:82:1e:48:0c:b7:37:
         ed:39:4b:54:d8:e3:c6:55:dd:e5:df:22:45:fe:1e:05:61:f4:
         da:65:ff:47:44:63:f8:d8:66:42:92:2c:47:63:c2:b3:95:05:
         4e:d1:65:b6:08:7e:a8:ba:28:40:49:9e:fe:4a:bb:c0:be:47:
         cd:ed:93:d0:bd:42:b0:e7:a3:10:41:c2:72:2f:8c:43:f8:a0:
         be:f8:d4:76:7b:1e:15:f5:73:42:04:0d:41:01:07:36:c6:2d:
         47:9d:2d:35:14:38:dc:5b:9f:0f:95:aa:00:01:a0:58:b5:f0:
         11:54:0c:35
-----BEGIN CERTIFICATE-----
MIIGkzCCBXugAwIBAgIUAQ0Mn0MoWE2O9Yn47fVsqoIZ1cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
M2ZiMGQwN2UtMjBmNC00ZTY5LWE4N2YtZWUyNGIwNGY5NmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jEQ075NQjAE8Dgy0dqoLGTqMeMzmRUlFdHs
j4dA0jnoCUp32kHLrp4Dx8lgB/nM8rlmVddgGd9m9xjIjdDbDzV0quCIbBqu4jPE
oMQukJ9p6ROAXJqk2dEX2vAx5lBIP//IF8gqM856u053JGDyGa2TBc7GeEJ8wqKT
MxeDtvVTE6NvG5cVXX+ITovp9OcLv+2FavUGMDDpLS/HBRczptBYUd+e0nkr/VCx
r3AQiF2IBSP4I1vW/jRWEG33ztatmK3BvHVyW8xKrFcHJuVRWUP2kS0EurfXwWmH
J0CU3MaqpG5rzySwwO8RyActoCStlvieLGK/QthO0YjyB4nYUQIDAQABo4IDpTCC
A6EwHQYDVR0OBBYEFBoDTXPH6S49+jPGxDMZNYNr+qEJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvOGJhZTIxMDQtMDAyYy0z
NzMyLWFmN2UtZjI2MTIzMTk4YWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMG8GCCsGAQUFBwEHAQH/BGAwXjAwBAIAATAqAwQBF+1KAwQB
F+1SAwQBF+2eAwQAF+3QAwQCMgdIAwQBwPBkAwQAxv95MCoEAgACMCQDBwAgAUnw
0AIDBwAgAUnw0EgDBwAgAUnw0JADBwAgAUnw0MkwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAzQmAsqQqii+W
d8o46EvbjwC4obBNG6vnxnOH2sOGkncHJzV+8uYr48ef88sTMbbf3Svg3mplbS1A
Bk0OBXuondTwhUJEtK1JG6uNY/o0lPK45q8p/uSu1Alx2sLINwTRDR8ux64EkQsl
8D0BdVXIg3qNUxIRvaEQPhqw7TOLZLxWWiKOneS6YtOcgh5IDLc37TlLVNjjxlXd
5d8iRf4eBWH02mX/R0Rj+NhmQpIsR2PCs5UFTtFltgh+qLooQEme/kq7wL5Hze2T
0L1CsOejEEHCci+MQ/igvvjUdnseFfVzQgQNQQEHNsYtR50tNRQ43FufD5WqAAGg
WLXwEVQMNQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:33:34 2026 by rpki-client