Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/988ba759-c83d-3353-9d4a-0e247ab819ff.roa
File: 988ba759-c83d-3353-9d4a-0e247ab819ff.roa (raw, json)
Hash identifier: yBaCQsikYGEEC7ASORw1zmsm6QBu9F3tsQNBwPNKJZc=
Subject key identifier: 51:22:B2:1B:14:C8:24:32:33:7C:C5:F5:98:AD:1F:8D:3E:FC:5B:FD
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F4328584AC8765B10F60E33E204940620
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/988ba759-c83d-3353-9d4a-0e247ab819ff.roa
Signing time: Fri 08 Aug 2025 01:00:33 +0000
ROA not before: Fri 08 Aug 2025 01:00:33 +0000
ROA not after: Thu 06 Nov 2025 02:00:33 +0000
asID: 1239
IP address blocks: 23.237.31.0/24 maxlen: 24
23.237.32.0/23 maxlen: 23
23.237.34.0/23 maxlen: 23
23.237.36.0/23 maxlen: 23
23.237.38.0/23 maxlen: 23
23.237.40.0/24 maxlen: 24
23.237.42.0/23 maxlen: 23
23.237.44.0/23 maxlen: 23
23.237.50.0/23 maxlen: 23
23.237.54.0/23 maxlen: 23
23.237.56.0/23 maxlen: 23
23.237.60.0/23 maxlen: 23
23.237.64.0/23 maxlen: 23
23.237.66.0/23 maxlen: 23
23.237.72.0/23 maxlen: 23
23.237.80.0/23 maxlen: 23
23.237.84.0/23 maxlen: 23
23.237.94.0/23 maxlen: 23
23.237.106.0/23 maxlen: 23
23.237.108.0/23 maxlen: 23
23.237.110.0/23 maxlen: 23
23.237.112.0/23 maxlen: 23
23.237.114.0/23 maxlen: 23
23.237.118.0/23 maxlen: 23
23.237.176.0/23 maxlen: 23
23.237.178.0/23 maxlen: 23
23.237.182.0/23 maxlen: 23
23.237.186.0/24 maxlen: 24
23.237.188.0/23 maxlen: 23
23.237.196.0/23 maxlen: 23
23.237.200.0/23 maxlen: 23
23.237.205.0/24 maxlen: 24
23.237.206.0/24 maxlen: 24
23.237.212.0/24 maxlen: 24
23.237.213.0/24 maxlen: 24
23.237.214.0/24 maxlen: 24
23.237.216.0/24 maxlen: 24
23.237.219.0/24 maxlen: 24
23.237.220.0/23 maxlen: 23
23.237.222.0/23 maxlen: 23
23.237.224.0/23 maxlen: 23
23.237.226.0/23 maxlen: 23
23.237.228.0/23 maxlen: 23
23.237.231.0/24 maxlen: 24
23.237.232.0/23 maxlen: 23
23.237.234.0/23 maxlen: 23
23.237.236.0/23 maxlen: 23
23.237.238.0/24 maxlen: 24
23.237.242.0/24 maxlen: 24
23.237.243.0/24 maxlen: 24
23.237.246.0/24 maxlen: 24
23.237.254.0/23 maxlen: 23
50.7.96.0/22 maxlen: 22
50.7.100.0/24 maxlen: 24
50.7.101.0/24 maxlen: 24
50.7.102.0/24 maxlen: 24
50.7.103.0/24 maxlen: 24
50.7.104.0/22 maxlen: 22
50.7.108.0/24 maxlen: 24
50.7.109.0/24 maxlen: 24
50.7.110.0/24 maxlen: 24
50.7.111.0/24 maxlen: 24
50.7.118.0/23 maxlen: 23
50.7.229.0/24 maxlen: 24
192.240.108.0/22 maxlen: 22
192.240.116.0/24 maxlen: 24
192.240.120.0/23 maxlen: 23
192.240.123.0/24 maxlen: 24
192.240.124.0/22 maxlen: 22
198.255.4.0/22 maxlen: 22
198.255.12.0/22 maxlen: 22
198.255.46.0/23 maxlen: 23
198.255.66.0/23 maxlen: 23
198.255.68.0/23 maxlen: 23
198.255.70.0/23 maxlen: 23
198.255.72.0/23 maxlen: 23
198.255.74.0/24 maxlen: 24
198.255.75.0/24 maxlen: 24
198.255.85.0/24 maxlen: 24
198.255.102.0/24 maxlen: 24
198.255.103.0/24 maxlen: 24
198.255.120.0/24 maxlen: 24
198.255.126.0/24 maxlen: 24
198.255.127.0/24 maxlen: 24
2001:49f0:d137::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:c8:76:5b:10:f6:0e:33:e2:04:94:06:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Aug 8 01:00:33 2025 GMT
Not After : Nov 6 02:00:33 2025 GMT
Subject: CN=877edda4-7ec0-4935-a577-efa313d35200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5c:ec:52:b0:02:c1:8a:2f:39:50:a5:a0:dc:
04:e0:a9:ed:0a:d7:99:5d:b1:5c:a6:ca:0b:0f:e4:
db:2b:85:8a:60:57:ba:71:0c:9a:99:b1:6f:cd:9d:
62:d2:bf:6e:bc:50:50:86:7f:58:e8:27:cf:33:31:
15:43:ee:e5:24:cd:28:6a:2b:64:aa:52:ca:65:69:
0f:ec:6a:8e:e9:87:30:77:d8:90:07:e5:78:72:7c:
43:a1:c3:14:3c:7d:89:77:7a:c4:32:12:75:9e:fd:
28:1e:a7:41:e3:2e:2d:30:82:ba:65:88:2b:78:f9:
86:42:dc:65:6d:65:f1:59:6c:d8:06:34:dc:a0:cd:
e4:c2:91:39:ad:bd:04:57:65:73:52:4c:01:e1:2b:
24:af:90:09:15:96:cc:6c:8f:e8:f6:b5:42:d6:50:
5a:c7:30:d7:86:1e:c5:22:b7:47:9d:19:0e:55:6c:
ac:bd:d9:a1:a1:c3:ff:60:4d:6b:24:df:f8:1f:8d:
2d:ed:53:0f:fd:df:99:8e:b3:da:98:86:65:f8:a0:
00:1c:2e:7a:c0:e7:01:96:0d:89:a9:e5:c9:b7:b3:
2e:12:6e:99:a6:79:06:94:8c:96:35:a1:14:ae:9c:
2c:ac:02:55:5f:76:7c:6f:b0:09:cd:cb:d9:de:ef:
29:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:22:B2:1B:14:C8:24:32:33:7C:C5:F5:98:AD:1F:8D:3E:FC:5B:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/988ba759-c83d-3353-9d4a-0e247ab819ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
23.237.31.0-23.237.40.255
23.237.42.0-23.237.45.255
23.237.50.0/23
23.237.54.0-23.237.57.255
23.237.60.0/23
23.237.64.0/22
23.237.72.0/23
23.237.80.0/23
23.237.84.0/23
23.237.94.0/23
23.237.106.0-23.237.115.255
23.237.118.0/23
23.237.176.0/22
23.237.182.0/23
23.237.186.0/24
23.237.188.0/23
23.237.196.0/23
23.237.200.0/23
23.237.205.0-23.237.206.255
23.237.212.0-23.237.214.255
23.237.216.0/24
23.237.219.0-23.237.229.255
23.237.231.0-23.237.238.255
23.237.242.0/23
23.237.246.0/24
23.237.254.0/23
50.7.96.0/20
50.7.118.0/23
50.7.229.0/24
192.240.108.0/22
192.240.116.0/24
192.240.120.0/23
192.240.123.0-192.240.127.255
198.255.4.0/22
198.255.12.0/22
198.255.46.0/23
198.255.66.0-198.255.75.255
198.255.85.0/24
198.255.102.0/23
198.255.120.0/24
198.255.126.0/23
IPv6:
2001:49f0:d137::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:59:e1:4b:07:fd:57:46:87:b0:fc:3d:cc:da:c0:e9:b4:33:
c1:f0:61:1b:0f:a7:93:6f:a5:a1:60:c0:a9:ff:db:cc:9c:35:
e4:88:e0:1d:47:6b:f5:83:89:84:ce:76:13:84:ac:e8:8b:95:
09:3f:d4:13:66:bc:d8:e1:2f:a4:ed:8e:be:b7:f0:87:74:b1:
7d:5b:ae:c1:06:d7:42:a9:aa:7c:69:5b:c9:bf:23:8c:b4:32:
e0:f9:26:ae:2f:6f:e7:38:e2:b3:ca:b9:63:02:1f:c9:d2:a3:
05:7c:ec:23:bd:82:45:05:3a:78:a4:53:b7:5c:4a:73:f4:42:
23:ae:dd:d2:c1:c5:ce:55:49:e4:ac:04:df:7d:45:17:ac:a5:
79:9e:98:6a:af:fd:ca:71:80:3e:2c:b8:05:b1:10:e6:92:db:
0a:94:47:5a:33:b9:68:42:8e:7e:24:b7:cb:71:db:9f:a9:a9:
59:db:73:cd:bf:2f:39:42:6b:8b:e7:73:71:47:8e:a6:71:da:
a8:69:aa:e9:73:67:d5:b8:9a:f9:e8:10:f6:2e:a9:33:2a:fc:
45:b9:95:99:55:f1:dc:f7:e0:70:c5:1d:77:52:47:45:21:68:
6d:7b:e3:a1:5f:31:4e:f6:f9:f9:87:65:ca:53:92:78:4b:f5:
bf:ec:4f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:45:54 2025 by rpki-client