Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/70af0ead-85cc-31a4-98e8-0be232ccacd6.roa
File:                     70af0ead-85cc-31a4-98e8-0be232ccacd6.roa (raw, json)
Hash identifier:          m3A5DeOs5VBQoz5oLWZh+IRjA+3M7lU88nLnRfXDAas=
Subject key identifier:   2C:34:5F:BD:E6:CB:80:0D:3A:AD:B1:80:62:3E:A8:05:86:14:95:AF
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584EFF777DEC5B4A03F11967DC80
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/70af0ead-85cc-31a4-98e8-0be232ccacd6.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     1239
IP address blocks:        23.237.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:7d:ec:5b:4a:03:f1:19:67:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=6c6d1aae-b14e-432e-ba40-9b05fdcdd545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:01:3b:be:7c:bc:8f:12:e8:6e:31:97:68:3c:
                    d5:be:56:40:2c:a7:78:65:01:a0:50:47:fc:f9:9b:
                    54:2c:36:0f:c9:74:32:97:4d:35:58:c8:16:bb:77:
                    c2:61:4a:6b:7f:8d:b3:57:8d:25:d4:af:d6:84:82:
                    20:df:73:e8:99:4f:52:39:9c:1f:4e:da:9a:46:3a:
                    f7:46:80:98:79:c2:a2:0c:78:46:84:c6:b6:a9:9c:
                    b4:35:d4:5d:35:fb:fe:f5:5e:a5:60:49:f2:2d:3b:
                    64:5d:ac:5a:88:58:20:86:f6:92:5a:c3:97:b2:53:
                    70:5f:e4:fb:e5:c5:f9:3d:a1:5f:12:ca:22:e4:88:
                    56:d2:2e:4f:14:6e:6a:d9:03:02:c3:52:eb:d7:67:
                    f5:b4:c5:e1:d5:fb:c4:a7:45:b5:e6:64:24:2b:93:
                    ca:da:b0:b0:27:19:46:2a:3c:bd:17:68:9e:74:3f:
                    5c:15:c2:e7:a4:da:44:ff:e0:d1:b8:a0:c5:46:55:
                    07:19:2b:ea:f6:a0:51:4e:c1:ec:a1:59:29:9e:16:
                    67:6a:2b:1d:f5:5d:06:bc:8b:80:12:f1:8c:30:94:
                    c2:2d:04:b9:1b:24:ab:aa:ad:f7:af:9d:78:f8:af:
                    17:4d:26:75:8c:6f:57:c7:28:43:a6:28:45:63:0d:
                    e8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:34:5F:BD:E6:CB:80:0D:3A:AD:B1:80:62:3E:A8:05:86:14:95:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/70af0ead-85cc-31a4-98e8-0be232ccacd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:84:ac:a7:d6:be:0b:d4:c4:b0:c7:9a:50:98:00:e6:99:54:
         85:02:1b:a3:3b:86:f1:d6:bf:3e:ef:02:5d:f1:a4:9d:8a:a5:
         78:bf:e5:e5:02:d9:98:f0:b8:7c:0f:68:78:19:13:13:c2:8b:
         48:87:c9:e1:67:ed:6d:98:f6:b6:bd:ad:5c:2a:28:4c:3d:0d:
         a8:9f:a8:80:98:83:b6:c2:37:2d:71:f8:85:29:0d:fe:8e:81:
         e9:df:0b:a2:24:fc:24:ed:fb:02:29:01:07:50:ba:8d:61:dc:
         f7:aa:0c:24:29:b1:2e:96:b3:a0:5a:30:ef:11:32:0b:41:de:
         15:8b:73:ed:7f:4f:bd:da:be:04:cf:14:28:56:38:db:ba:b4:
         1d:0e:cd:06:b3:1b:a8:97:90:a1:94:91:38:54:6b:4f:8b:f3:
         4e:dc:d6:58:06:6b:e5:23:b6:27:d7:28:42:5e:17:8a:df:43:
         2d:57:90:83:ef:09:58:6e:fc:21:6b:5a:82:e8:ce:b3:40:ea:
         07:23:b7:1f:2c:fc:3a:12:9e:ae:ee:9c:73:df:a5:24:0d:8a:
         52:e6:ad:66:8c:d8:c7:e7:22:0f:96:30:7d:6d:7e:e3:93:63:
         7d:da:cf:19:db:a8:6f:1f:1f:45:f9:01:bb:01:b6:0b:7a:01:
         a2:9e:30:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:33:55 2026 by rpki-client