Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/9e2d5872-e3e5-3a63-b10c-bfeb7cb3bb5a.roa
File:                     9e2d5872-e3e5-3a63-b10c-bfeb7cb3bb5a.roa (raw, json)
Hash identifier:          2HbdfSqUv4tUgyo4lJHbrwkbylrzl+PSqr41QaVaeIo=
Subject key identifier:   5A:A7:8B:BC:38:08:99:D7:DE:DF:7B:0D:FE:CA:F6:09:A7:21:2A:90
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584D037D1A01031E6DBAE7144F00
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/9e2d5872-e3e5-3a63-b10c-bfeb7cb3bb5a.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     1239
IP address blocks:        50.7.230.0/23 maxlen: 23
                          66.90.101.0/24 maxlen: 24
                          2001:49f0:d0ab::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:1a:01:03:1e:6d:ba:e7:14:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=235c375e-3704-4566-bc05-d9f0798edd1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9e:a2:89:3c:48:a0:2f:f9:56:f5:a7:0e:c0:
                    0e:3a:95:e1:06:f8:04:c0:0b:4f:6e:92:03:43:c7:
                    ee:3e:9b:e6:79:ea:6b:2d:e9:d3:6d:12:b8:a8:26:
                    74:31:5f:9b:bc:a9:51:2a:7d:88:b6:43:16:5e:5e:
                    3c:96:e6:05:bb:0d:14:66:1e:2f:26:0f:5c:e5:05:
                    5d:f6:64:ff:d9:f6:95:41:0a:9c:7a:4e:7b:a1:11:
                    f5:bd:8d:9b:a9:70:24:c8:5f:ac:97:ce:5f:cd:bd:
                    6e:51:40:74:f5:f7:c2:c3:1d:2c:7e:fc:a6:2a:13:
                    28:92:42:50:68:bb:4b:03:ea:11:42:3a:de:97:e4:
                    82:46:28:19:69:3d:9c:80:0a:96:c9:9b:10:0e:a9:
                    5f:78:3f:96:93:79:d2:b4:38:92:e1:59:7c:45:ef:
                    d6:ef:7c:67:25:49:eb:e4:69:39:3c:dd:46:0b:25:
                    a9:83:e0:d1:6d:5e:c0:93:68:4f:ee:b3:ce:e4:27:
                    49:d9:59:09:19:a0:a6:9b:20:81:af:7d:26:81:c0:
                    3d:2c:8e:30:9c:ae:be:a9:98:e6:1c:f5:e4:15:52:
                    df:88:7d:9f:1a:1e:43:9b:13:c7:4b:0b:d0:e1:3c:
                    90:12:21:ee:a6:1e:71:a7:1d:fa:e2:65:40:0c:d8:
                    0f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A7:8B:BC:38:08:99:D7:DE:DF:7B:0D:FE:CA:F6:09:A7:21:2A:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/9e2d5872-e3e5-3a63-b10c-bfeb7cb3bb5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.230.0/23
                  66.90.101.0/24
                IPv6:
                  2001:49f0:d0ab::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:38:40:50:14:2a:39:a9:6d:54:28:71:8e:a1:86:17:cc:5e:
         61:9b:de:69:b2:cb:46:b5:b8:17:7e:5f:7f:37:6f:92:70:86:
         26:f5:50:c7:7a:76:81:72:2c:da:b3:9e:dd:f1:25:88:16:5d:
         84:16:34:6f:8c:28:21:90:39:15:56:93:79:b0:3b:50:83:fa:
         58:bb:0e:ec:71:62:46:53:aa:af:d1:6d:e5:12:94:c0:53:4e:
         3a:3b:4b:66:43:29:1f:35:a5:95:9e:d6:b6:14:c7:e3:b3:3e:
         18:21:33:01:83:ba:89:cc:ce:ab:0e:96:c0:95:06:c6:42:41:
         83:90:55:24:b0:67:90:12:5b:c9:9b:84:af:b6:ff:e9:cb:37:
         f9:e0:e3:f2:25:8e:00:f0:f9:a0:da:fb:c1:2d:29:a2:da:00:
         fa:6e:9d:73:d7:c0:27:68:c7:d5:c5:72:da:a3:a8:a7:9f:1a:
         0f:ae:6d:ce:17:5a:85:dd:6b:af:33:5e:47:88:1f:63:c9:48:
         ad:04:05:61:d8:44:be:03:5d:60:9b:66:9b:8d:70:bc:32:f2:
         7d:db:eb:02:45:b4:3d:41:4a:cc:f6:43:7e:62:e2:8f:40:5c:
         59:c5:31:64:b4:b0:b8:76:07:1a:c1:b7:f7:20:58:b4:e2:94:
         ad:59:13:41
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:24:40 2026 by rpki-client