Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/803bed0a-475f-324e-bc7f-69bc32ff4a33.roa
File:                     803bed0a-475f-324e-bc7f-69bc32ff4a33.roa (raw, json)
Hash identifier:          DB1aRUS3GhKi5erNexN5Xoen8TrVIjjnbRo5n9NDZQU=
Subject key identifier:   7E:D9:7F:89:47:B1:8B:E9:5E:39:3B:0D:7D:DA:C4:F5:03:AF:D7:87
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F374D26F61A94B84F9ACBEF00
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/803bed0a-475f-324e-bc7f-69bc32ff4a33.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     174
IP address blocks:        23.237.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:26:f6:1a:94:b8:4f:9a:cb:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=0e9a326b-b1ab-41cd-8087-8148c06b1b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:8a:ec:38:4b:06:c1:a6:80:d5:3f:30:97:49:
                    74:9d:a2:7e:c1:54:8d:2d:ce:9a:e1:18:ee:8d:be:
                    7d:40:8a:ce:64:f6:52:35:d8:a5:2c:48:5a:d8:8f:
                    82:60:86:af:f8:7b:f8:08:90:d2:82:50:cc:45:e4:
                    be:a2:c1:a0:70:a1:72:8d:3e:a3:ee:06:36:aa:f8:
                    c9:c2:92:dd:48:c3:25:57:70:5e:7f:40:9f:f4:25:
                    87:98:6b:44:b5:a6:8d:c9:e3:cd:cb:69:ed:52:95:
                    09:7d:3f:39:83:6f:06:6d:97:3e:e8:9b:2d:ef:77:
                    c2:ec:18:9d:10:fb:e7:66:cf:7c:b3:6c:6f:73:22:
                    8d:e1:c7:7d:3e:53:fc:3a:b6:6d:09:eb:99:00:97:
                    ff:6c:1b:c2:a7:ac:61:ed:ab:d8:ca:76:db:d3:ba:
                    57:27:9a:ea:57:9e:ad:34:07:64:72:04:49:66:f8:
                    2f:43:fd:57:96:23:2c:53:72:09:ca:a9:4b:0b:bf:
                    2d:fe:4c:e6:7f:3e:42:8e:fb:47:8c:61:df:7f:19:
                    00:fb:c1:dc:6b:8e:65:5d:ad:80:c4:64:fc:9c:d5:
                    1e:bb:7e:9f:08:41:7c:fd:de:68:55:30:c7:6d:43:
                    59:42:78:c3:c5:b0:5e:8f:7e:1a:41:60:f3:e4:fb:
                    b2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D9:7F:89:47:B1:8B:E9:5E:39:3B:0D:7D:DA:C4:F5:03:AF:D7:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/803bed0a-475f-324e-bc7f-69bc32ff4a33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:02:63:56:36:18:a6:92:f4:d8:58:02:50:a8:56:24:6a:f8:
         6a:35:4c:b2:53:24:9b:2e:63:b4:f2:00:19:3a:4f:83:b0:8c:
         a3:e3:88:d2:6b:1d:f9:3d:5d:3f:2a:19:70:15:38:57:96:0a:
         75:22:7d:d0:f4:4b:65:3a:3f:60:0f:a0:10:af:20:fd:1e:bb:
         36:92:02:57:68:14:7b:4c:57:6a:7c:bc:1e:12:ba:b5:ce:5c:
         22:eb:d3:a6:e5:80:e9:51:a1:1d:40:88:b6:0b:f7:dc:b8:10:
         71:7a:19:7a:eb:b8:b0:75:8c:d8:38:00:01:26:cd:b9:71:6b:
         ec:01:2c:f3:81:14:bc:15:98:5f:1b:27:b7:8f:b8:9d:95:22:
         bc:22:3a:53:a7:a2:14:5d:2b:9b:ef:01:51:da:ea:ce:f8:ea:
         7c:5d:2a:0b:e4:94:49:ab:f8:09:39:92:06:a3:a7:b6:9d:12:
         86:25:ac:e3:56:8d:87:e7:26:03:83:5a:54:93:20:57:41:dd:
         d7:13:03:8f:73:02:20:23:e5:03:90:1b:94:d3:92:5b:90:e0:
         1a:b4:e1:ca:5c:cf:b1:fc:d4:f1:67:cb:6c:b4:f2:1a:0f:e9:
         2b:88:7d:47:77:e1:65:6d:d8:3d:33:54:0c:49:a7:0e:b9:91:
         79:b7:10:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:53:24 2026 by rpki-client