Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e1afafb7-f3d0-359a-8f46-6fc8bc9b11e1.roa
File:                     e1afafb7-f3d0-359a-8f46-6fc8bc9b11e1.roa (raw, json)
Hash identifier:          1HZo6oUv3v8BfoCZ57ZXog9/GPUe9B37sOTZp4Ms0OQ=
Subject key identifier:   F8:C5:72:63:6B:2F:DD:3C:2F:59:CA:46:F2:40:DF:DB:4D:A5:B7:BA
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584DADAAE331E8DF2B194EFDEC78
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e1afafb7-f3d0-359a-8f46-6fc8bc9b11e1.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     30058
IP address blocks:        23.237.53.0/24 maxlen: 24
                          23.237.58.0/24 maxlen: 24
                          23.237.76.0/23 maxlen: 24
                          23.237.86.0/23 maxlen: 24
                          23.237.192.0/23 maxlen: 24
                          23.237.230.0/24 maxlen: 24
                          23.237.240.0/24 maxlen: 24
                          50.7.68.0/22 maxlen: 24
                          192.240.96.0/23 maxlen: 24
                          198.255.2.0/24 maxlen: 24
                          198.255.20.0/23 maxlen: 24
                          198.255.76.0/23 maxlen: 24
                          198.255.78.0/23 maxlen: 24
                          198.255.80.0/23 maxlen: 24
                          198.255.82.0/23 maxlen: 24
                          198.255.125.0/24 maxlen: 24
                          2001:49f0:d025::/48 maxlen: 48
                          2001:49f0:d050::/48 maxlen: 48
                          2001:49f0:d051::/48 maxlen: 48
                          2001:49f0:d052::/48 maxlen: 48
                          2001:49f0:d053::/48 maxlen: 48
                          2001:49f0:d054::/48 maxlen: 48
                          2001:49f0:d099::/48 maxlen: 48
                          2001:49f0:d0df::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:e3:31:e8:df:2b:19:4e:fd:ec:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=e9a53241-5257-477a-a77f-f1185867dcba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:96:65:da:6c:6b:87:88:50:0f:cb:d3:77:53:
                    cb:25:18:4c:63:98:bc:22:fa:6d:aa:1e:56:62:a6:
                    e6:ba:d4:59:11:ee:fe:3a:7d:20:00:66:72:0a:19:
                    ab:58:fc:03:f8:fb:7e:c8:fb:2f:66:e6:79:cb:d0:
                    12:6b:67:31:f6:55:39:a0:99:a3:75:2a:56:6f:3b:
                    9f:b2:33:2a:d6:cf:4f:e0:4b:bd:7a:0c:ad:fc:06:
                    bd:fc:9c:5d:62:01:0c:31:b2:dd:c3:16:ca:47:ee:
                    f7:ad:0d:9a:55:9d:46:05:5c:29:d7:f2:ba:16:33:
                    1f:db:9f:26:ca:fc:a4:f1:36:2c:ee:11:db:6f:be:
                    12:44:5d:50:b8:0b:ea:7e:e4:a1:fb:99:17:dd:2f:
                    e6:1b:3a:fb:88:c3:3a:51:cd:4a:3c:23:25:0c:f2:
                    0f:fe:b7:8b:6e:82:1f:be:2a:e2:34:a1:ce:fe:bf:
                    63:5e:02:d1:22:5a:b1:be:5d:0c:5c:47:0e:68:e3:
                    97:4d:28:7c:88:69:96:d2:30:04:97:3a:39:89:14:
                    d5:37:00:d6:87:1a:53:47:43:e2:a8:ab:f4:8e:79:
                    98:59:5b:1b:f5:2d:8c:a7:bf:c8:d7:22:f8:82:5b:
                    8e:85:00:ec:bf:b2:98:fb:6c:35:78:a0:2a:45:4b:
                    67:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C5:72:63:6B:2F:DD:3C:2F:59:CA:46:F2:40:DF:DB:4D:A5:B7:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e1afafb7-f3d0-359a-8f46-6fc8bc9b11e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.53.0/24
                  23.237.58.0/24
                  23.237.76.0/23
                  23.237.86.0/23
                  23.237.192.0/23
                  23.237.230.0/24
                  23.237.240.0/24
                  50.7.68.0/22
                  192.240.96.0/23
                  198.255.2.0/24
                  198.255.20.0/23
                  198.255.76.0-198.255.83.255
                  198.255.125.0/24
                IPv6:
                  2001:49f0:d025::/48
                  2001:49f0:d050::-2001:49f0:d054:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d099::/48
                  2001:49f0:d0df::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:73:01:b1:2a:91:b8:d6:1e:75:ca:d3:f1:18:2e:07:ee:64:
         29:18:30:b6:f0:ba:51:50:fb:d0:f0:0f:0a:bd:fc:11:19:ae:
         87:41:7f:b0:65:fc:73:f7:a4:21:77:b1:29:fc:5a:a3:96:fc:
         8c:44:1f:64:66:ee:b8:1e:e6:af:a9:cb:92:a7:d6:f1:79:ea:
         d2:e3:4a:49:a5:5c:0f:3e:ac:07:c9:96:19:04:cc:0d:2d:a0:
         be:8f:01:86:0d:27:60:1c:29:b6:c3:d5:2a:d1:5b:94:2f:be:
         d3:f1:6d:6f:55:67:ab:fe:06:d6:f1:ea:77:80:45:e3:c0:54:
         f2:ac:4d:b1:14:73:58:a2:74:e2:53:a1:d5:43:79:a7:e3:f7:
         14:d5:2b:45:2b:48:bf:b3:3b:9c:8d:3e:26:92:f8:f9:4b:d8:
         86:bd:be:10:53:22:1a:a4:fe:74:a3:d8:50:68:dc:ce:d2:b8:
         0f:fa:98:22:5e:f2:e3:f8:10:f6:08:57:32:a0:50:3e:d1:10:
         96:aa:f7:f5:79:df:5e:ff:32:80:36:91:c9:b2:aa:6a:0c:1d:
         aa:ab:5e:fb:22:ae:b4:9d:74:28:7c:a9:8a:b0:53:3a:a3:e3:
         d3:f0:fd:92:11:b4:27:a1:7e:e9:b7:ba:98:dd:58:5e:e0:55:
         71:e9:35:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:54:34 2026 by rpki-client