Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7b58fee1-e3ee-3d52-b877-8a2eafa33e51.roa
File:                     7b58fee1-e3ee-3d52-b877-8a2eafa33e51.roa (raw, json)
Hash identifier:          qnkNVO8sCz5OJoo7hbTm2GaOyBR3ILXtFvIY0EJJNfg=
Subject key identifier:   91:0C:54:B5:AB:61:7C:D7:AC:87:3A:F1:33:A1:5F:48:E7:57:4A:91
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F1B624E358FB3DF87EF3D2EC0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7b58fee1-e3ee-3d52-b877-8a2eafa33e51.roa
Signing time:             Tue 08 Sep 2026 13:00:12 +0000
ROA not before:           Tue 08 Sep 2026 13:00:12 +0000
ROA not after:            Mon 07 Dec 2026 14:00:12 +0000
asID:                     30058
IP address blocks:        23.237.126.0/23 maxlen: 23
                          23.237.130.0/23 maxlen: 23
                          23.237.136.0/23 maxlen: 23
                          23.237.138.0/24 maxlen: 24
                          23.237.191.0/24 maxlen: 24
                          23.237.218.0/24 maxlen: 24
                          23.237.244.0/24 maxlen: 24
                          23.237.250.0/24 maxlen: 24
                          50.7.0.0/24 maxlen: 24
                          50.7.8.0/24 maxlen: 24
                          50.7.9.0/24 maxlen: 24
                          50.7.10.0/24 maxlen: 24
                          50.7.11.0/24 maxlen: 24
                          50.7.12.0/24 maxlen: 24
                          50.7.13.0/24 maxlen: 24
                          50.7.15.0/24 maxlen: 24
                          50.7.16.0/24 maxlen: 24
                          50.7.18.0/24 maxlen: 24
                          50.7.19.0/24 maxlen: 24
                          50.7.20.0/24 maxlen: 24
                          50.7.21.0/24 maxlen: 24
                          66.90.124.0/24 maxlen: 24
                          192.240.122.0/24 maxlen: 24
                          198.255.16.0/24 maxlen: 24
                          216.227.131.0/24 maxlen: 24
                          216.227.142.0/23 maxlen: 23
                          216.227.144.0/23 maxlen: 23
                          216.227.146.0/23 maxlen: 23
                          216.227.148.0/23 maxlen: 23
                          216.227.150.0/23 maxlen: 23
                          216.227.152.0/23 maxlen: 23
                          216.227.154.0/23 maxlen: 23
                          216.227.156.0/23 maxlen: 23
                          216.227.160.0/23 maxlen: 23
                          216.227.162.0/24 maxlen: 24
                          216.227.163.0/24 maxlen: 24
                          216.227.164.0/24 maxlen: 24
                          216.227.165.0/24 maxlen: 24
                          216.227.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:62:4e:35:8f:b3:df:87:ef:3d:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep  8 13:00:12 2026 GMT
            Not After : Dec  7 14:00:12 2026 GMT
        Subject: CN=4a0002cd-ebfa-4abc-a91d-1f1bd86c83a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:44:03:7c:c3:ef:a2:3c:fd:fe:1e:3e:e0:80:
                    32:b2:92:46:df:98:6c:3e:4a:0f:77:7a:f2:f8:3f:
                    14:ec:71:06:5b:05:54:75:78:b0:e7:2b:f3:32:db:
                    8c:0a:20:11:da:f1:42:6e:7a:c4:13:ed:0d:ef:d9:
                    2d:09:8a:61:99:eb:a7:e3:6d:60:7c:3d:ae:cd:b9:
                    3d:0a:8f:27:7b:ee:3a:25:08:0e:bc:ff:40:45:bb:
                    03:1c:4f:6b:1b:7a:e0:2a:fd:13:0c:59:2b:b2:6d:
                    ad:2d:c3:88:a9:cd:9e:25:89:a0:4c:67:b3:4d:b1:
                    16:0a:04:47:f5:a6:a6:cc:6d:2e:00:7e:cf:4d:6f:
                    94:8c:5b:25:fa:e7:d2:a8:dd:22:3b:7f:97:2a:40:
                    1d:f3:71:de:3b:e5:a2:cd:bb:05:40:c9:9d:7d:b4:
                    95:d3:2b:96:5d:df:c5:07:fd:8c:a2:d6:ee:ab:66:
                    6d:1a:4e:fc:b9:ea:64:d1:7e:97:cb:66:70:e3:b3:
                    7a:50:8a:4b:22:e1:23:fc:8e:12:95:24:03:b3:dd:
                    59:b1:bf:ed:55:51:e9:90:fb:5e:63:11:33:8a:c2:
                    fd:45:16:10:23:9c:62:d5:9b:5b:9e:78:62:b0:c8:
                    5b:0a:59:a6:ae:f3:29:94:31:60:bf:d7:93:91:57:
                    99:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0C:54:B5:AB:61:7C:D7:AC:87:3A:F1:33:A1:5F:48:E7:57:4A:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7b58fee1-e3ee-3d52-b877-8a2eafa33e51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.126.0/23
                  23.237.130.0/23
                  23.237.136.0-23.237.138.255
                  23.237.191.0/24
                  23.237.218.0/24
                  23.237.244.0/24
                  23.237.250.0/24
                  50.7.0.0/24
                  50.7.8.0-50.7.13.255
                  50.7.15.0-50.7.16.255
                  50.7.18.0-50.7.21.255
                  66.90.124.0/24
                  192.240.122.0/24
                  198.255.16.0/24
                  216.227.131.0/24
                  216.227.142.0-216.227.157.255
                  216.227.160.0-216.227.165.255
                  216.227.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:df:42:55:35:79:85:d0:93:a3:73:41:46:81:a8:eb:ad:f5:
         80:c2:20:51:a1:42:18:96:f8:a1:76:9d:d0:2b:f7:c8:7e:b7:
         cf:c5:82:85:3e:fa:1c:aa:bf:41:92:32:38:79:4b:19:03:7e:
         0e:ba:ec:6c:37:1f:86:bb:cc:cb:30:2e:c7:69:d3:c9:2d:dd:
         c8:af:b5:df:ab:3c:4b:c0:98:93:33:16:1f:61:1f:af:96:45:
         cb:2a:55:9e:b7:97:12:b7:88:e0:ba:c6:8f:dc:e8:c2:e2:60:
         7a:e0:97:b5:9f:8f:95:da:b3:ae:3f:63:fc:37:67:7a:15:cd:
         8e:49:95:5e:e1:42:8e:06:cc:ab:1c:76:47:de:0d:24:aa:32:
         e3:66:e3:82:f7:01:c6:40:85:fa:37:58:ab:b5:f8:16:42:87:
         8b:1c:22:e9:26:a2:ca:64:fd:f6:74:93:01:38:ae:de:4c:07:
         66:9e:2c:6d:fe:2d:17:2f:84:1f:24:15:df:67:fb:9a:94:98:
         0d:3c:ab:05:9a:d6:36:65:26:be:46:f1:f4:74:12:a9:38:d0:
         4e:b8:c0:07:a6:29:c3:b6:b4:58:d8:b4:a0:37:ee:4d:c0:50:
         31:20:ef:00:51:34:de:75:7b:5e:c7:d5:49:6f:72:c0:ba:cc:
         58:c4:ce:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:11:37 2026 by rpki-client