Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/9bdd0cf2-396a-3cb0-9cbf-2d8e18e53347.roa
File:                     9bdd0cf2-396a-3cb0-9cbf-2d8e18e53347.roa (raw, json)
Hash identifier:          LTXUOlT6UjptujL6TbCELQp5/f1CA+GRc+5qMUmXP5w=
Subject key identifier:   4E:34:44:00:73:DB:66:88:D7:88:35:2A:B5:31:C4:9A:68:DD:09:31
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F4987F5D674D90A96DFF15B80
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/9bdd0cf2-396a-3cb0-9cbf-2d8e18e53347.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30058
IP address blocks:        23.237.18.0/23 maxlen: 24
                          23.237.20.0/22 maxlen: 24
                          23.237.26.0/23 maxlen: 24
                          23.237.253.0/24 maxlen: 24
                          198.255.117.0/24 maxlen: 24
                          198.255.118.0/24 maxlen: 24
                          198.255.119.0/24 maxlen: 24
                          198.255.123.0/24 maxlen: 24
                          2001:49f0:a06b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:f5:d6:74:d9:0a:96:df:f1:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4f45c265-8cf7-4e4b-b59a-8af7e85b4a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6e:8b:db:10:8b:4d:23:6e:00:ed:c7:0a:c7:
                    a1:ad:99:cb:0a:d8:1a:38:e3:cb:2c:ef:60:9e:f0:
                    1a:e9:16:6a:10:07:88:83:b4:fb:c0:c5:c3:3a:70:
                    61:f4:c8:44:6b:67:69:75:ac:0d:ba:6a:3f:1f:70:
                    33:87:8c:4f:2c:5f:51:28:f8:d4:08:9a:d7:57:3a:
                    b4:b8:9b:d8:0f:ea:0f:67:69:78:79:42:6d:ba:07:
                    af:39:56:a0:3a:9e:8b:13:dd:01:39:a0:cb:f3:0b:
                    6f:68:51:15:91:f9:9f:13:78:a6:51:eb:05:56:3f:
                    b4:8c:d7:90:4c:46:a6:8a:d4:ac:bc:3c:13:02:2e:
                    c9:26:f9:8e:83:b9:7e:84:8d:51:10:69:d9:c3:d1:
                    ec:53:c0:3a:2c:8c:58:9f:5b:96:e0:37:a0:94:7f:
                    34:26:61:28:de:dc:3b:00:68:2c:78:36:31:a4:a0:
                    46:46:4a:62:eb:e4:f7:64:1d:4b:e6:ce:4b:df:ac:
                    2f:3b:5d:3b:45:b5:8d:10:71:78:6e:97:8d:f0:96:
                    4e:bf:63:c0:30:c9:04:a0:ab:8e:60:90:0f:50:cc:
                    06:62:38:86:3c:86:5d:94:54:2e:7f:c2:50:0c:d6:
                    d5:08:95:fc:69:36:b4:71:d3:20:51:4e:e7:45:39:
                    04:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:34:44:00:73:DB:66:88:D7:88:35:2A:B5:31:C4:9A:68:DD:09:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/9bdd0cf2-396a-3cb0-9cbf-2d8e18e53347.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.18.0-23.237.23.255
                  23.237.26.0/23
                  23.237.253.0/24
                  198.255.117.0-198.255.119.255
                  198.255.123.0/24
                IPv6:
                  2001:49f0:a06b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:41:b1:14:35:96:e7:7f:52:2c:db:fc:5d:fe:b3:b4:7f:f3:
         3a:58:c2:9a:68:87:38:4e:51:f3:31:bd:02:13:e2:f6:bf:0d:
         19:e2:e3:45:89:89:e7:2a:38:34:fe:ef:0f:a7:a8:18:a3:d3:
         dd:5e:ae:ac:f0:75:2b:dd:f3:69:1e:b2:4c:d5:a7:1d:60:13:
         ca:80:90:f0:f5:3e:73:af:ba:41:ed:2c:5e:92:26:b2:2e:cb:
         0a:15:5d:ad:76:42:45:45:fa:70:5c:2a:45:69:a6:23:fb:f4:
         ae:6e:b9:c4:ac:41:d1:b4:c6:f7:b3:48:c3:e1:a9:c4:88:91:
         ea:b2:25:3f:2b:7b:fc:be:4b:44:a4:4e:fd:fc:6d:a8:ed:8b:
         ff:37:4b:15:b9:ff:86:d4:40:c8:44:d3:de:9b:db:bc:cf:fc:
         7f:f9:b4:13:66:e1:b0:1b:e3:68:fd:f5:76:3d:64:fc:8b:1a:
         07:59:a5:2c:22:bb:e7:8d:85:f2:53:8d:06:01:53:53:63:73:
         48:80:29:3b:e1:ed:d5:a6:f8:0b:b6:e2:42:20:2a:13:0c:49:
         77:f9:72:0d:34:ac:71:57:5d:fa:c6:56:62:0f:43:31:3d:94:
         5c:86:47:a9:80:33:59:eb:b8:cc:9d:8f:18:3b:4e:2e:82:c8:
         6c:20:2f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:11:14 2026 by rpki-client