Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1a058e05-5d24-38e1-8868-0e2b4b598073.roa
File:                     1a058e05-5d24-38e1-8868-0e2b4b598073.roa (raw, json)
Hash identifier:          tU8fedc1zqxjdptlGCv/uUTU10WQAX+87zy+D/2BE/g=
Subject key identifier:   AA:2D:C8:E8:33:BC:E9:10:CC:95:91:90:39:20:D2:8B:84:68:55:C2
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584D7F9A891C1FF2EA40E2572880
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1a058e05-5d24-38e1-8868-0e2b4b598073.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     1239
IP address blocks:        23.237.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:89:1c:1f:f2:ea:40:e2:57:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=4339c178-d192-4c75-9a70-634b38932255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:da:ce:b8:10:19:be:5a:75:2a:b0:43:55:99:
                    a0:07:58:ef:ec:ae:1e:52:9b:85:d0:a9:bd:ac:54:
                    9f:2d:9d:53:a0:10:98:fd:40:fa:2c:1a:b7:1e:43:
                    ae:93:a2:02:73:c6:98:6e:f2:ae:a9:93:b9:81:e1:
                    da:e1:d5:59:f8:b2:21:ba:fc:96:09:a8:e6:46:7e:
                    f3:10:d6:89:8a:f8:24:36:6e:cc:d2:af:ce:98:3c:
                    7c:c4:dd:90:29:62:fe:24:71:83:00:a2:62:64:79:
                    b5:d3:ae:c1:34:1d:0f:92:d5:5b:49:72:5a:b0:21:
                    ec:84:06:21:0f:f3:a5:6e:74:fd:0e:26:8d:d3:55:
                    ca:66:7a:21:e7:6c:4a:3a:8c:e1:b8:f6:48:80:a7:
                    b2:2b:5f:ad:8e:ea:ca:e6:d8:c1:87:bb:da:27:ce:
                    90:78:3e:cb:11:20:bd:2d:31:07:13:65:13:40:0a:
                    7c:fd:ec:78:72:5f:d4:80:db:01:dc:6f:13:44:47:
                    3e:bd:9f:98:9b:52:3f:bd:86:0e:15:d5:ca:e7:19:
                    c1:1b:43:f3:03:48:46:8d:59:49:73:93:80:65:04:
                    2e:35:41:52:14:f3:a2:b2:98:48:3a:0c:38:f1:40:
                    ba:6a:62:00:bb:ea:ca:c7:78:54:0e:d2:d7:99:b5:
                    b9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2D:C8:E8:33:BC:E9:10:CC:95:91:90:39:20:D2:8B:84:68:55:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1a058e05-5d24-38e1-8868-0e2b4b598073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:71:ce:19:ca:4d:57:2b:93:7c:1a:66:82:81:1f:1f:ab:de:
         b6:88:38:ea:13:69:bf:7f:06:f7:78:51:63:6e:96:0e:e5:21:
         05:e4:c1:a2:46:66:61:92:fc:1e:75:83:65:56:af:f2:34:98:
         2f:da:91:bf:db:1a:69:c3:b6:2b:61:51:a0:b9:06:70:48:85:
         93:26:4c:3a:04:92:20:c1:34:01:f5:ee:00:65:ca:da:5a:c8:
         6c:29:fb:bb:41:e5:31:a7:28:16:0e:f4:71:40:b2:b4:1a:77:
         d0:f4:f8:7e:45:6d:bf:cb:be:47:3b:5e:7a:f9:9d:98:02:3d:
         a7:d7:d7:d5:e3:35:bd:0b:2b:24:78:f3:dd:75:63:08:d4:67:
         f7:a9:62:78:a1:fa:50:10:dc:24:64:61:c1:16:10:50:90:e5:
         76:d5:cf:c1:2c:cf:65:95:23:d3:16:b2:17:af:76:3e:6f:83:
         b2:00:67:0d:8a:9a:52:9d:ad:aa:03:32:0b:f0:50:e2:eb:2d:
         70:1b:dc:4e:18:ce:73:7c:a7:27:ed:b6:a8:3f:45:64:7f:d2:
         68:ce:49:1f:13:6c:86:6d:8f:a6:b3:80:fd:29:42:17:b4:f1:
         47:12:7e:8b:12:08:9b:31:d7:4f:00:48:66:6e:69:f1:e7:bf:
         d0:84:05:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:43:21 2026 by rpki-client