Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b16561df-fa72-3884-966f-db2939a4dd38.roa
File: b16561df-fa72-3884-966f-db2939a4dd38.roa (raw, json)
Hash identifier: dDYFuSPLsQ65ZrZGL28/QCk5lJgXVC0aar0sXnCfcoo=
Subject key identifier: D4:7A:6D:07:E9:06:4D:44:12:97:3D:87:E4:C0:4B:D1:E9:1F:CF:76
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F4328584BA9327436BC3260AC16877400
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b16561df-fa72-3884-966f-db2939a4dd38.roa
Signing time: Mon 27 Oct 2025 13:00:38 +0000
ROA not before: Mon 27 Oct 2025 13:00:38 +0000
ROA not after: Sun 25 Jan 2026 14:00:38 +0000
asID: 174
IP address blocks: 23.237.31.0/24 maxlen: 24
23.237.32.0/23 maxlen: 23
23.237.34.0/23 maxlen: 23
23.237.36.0/23 maxlen: 23
23.237.38.0/23 maxlen: 23
23.237.40.0/24 maxlen: 24
23.237.42.0/23 maxlen: 23
23.237.44.0/23 maxlen: 23
23.237.50.0/23 maxlen: 23
23.237.54.0/23 maxlen: 23
23.237.56.0/23 maxlen: 23
23.237.60.0/23 maxlen: 23
23.237.64.0/23 maxlen: 23
23.237.66.0/23 maxlen: 23
23.237.72.0/23 maxlen: 23
23.237.80.0/23 maxlen: 23
23.237.84.0/23 maxlen: 23
23.237.94.0/23 maxlen: 23
23.237.106.0/23 maxlen: 23
23.237.108.0/23 maxlen: 23
23.237.110.0/23 maxlen: 23
23.237.112.0/23 maxlen: 23
23.237.114.0/23 maxlen: 23
23.237.118.0/23 maxlen: 23
23.237.176.0/23 maxlen: 23
23.237.178.0/23 maxlen: 23
23.237.182.0/23 maxlen: 23
23.237.186.0/24 maxlen: 24
23.237.188.0/23 maxlen: 23
23.237.196.0/23 maxlen: 23
23.237.200.0/23 maxlen: 23
23.237.205.0/24 maxlen: 24
23.237.206.0/24 maxlen: 24
23.237.212.0/24 maxlen: 24
23.237.213.0/24 maxlen: 24
23.237.214.0/24 maxlen: 24
23.237.216.0/24 maxlen: 24
23.237.219.0/24 maxlen: 24
23.237.220.0/23 maxlen: 23
23.237.222.0/23 maxlen: 23
23.237.224.0/23 maxlen: 23
23.237.226.0/23 maxlen: 23
23.237.228.0/23 maxlen: 23
23.237.231.0/24 maxlen: 24
23.237.232.0/23 maxlen: 23
23.237.234.0/23 maxlen: 23
23.237.236.0/23 maxlen: 23
23.237.238.0/24 maxlen: 24
23.237.242.0/24 maxlen: 24
23.237.243.0/24 maxlen: 24
23.237.246.0/24 maxlen: 24
23.237.254.0/23 maxlen: 23
50.7.96.0/22 maxlen: 22
50.7.100.0/24 maxlen: 24
50.7.101.0/24 maxlen: 24
50.7.102.0/24 maxlen: 24
50.7.103.0/24 maxlen: 24
50.7.104.0/22 maxlen: 22
50.7.108.0/24 maxlen: 24
50.7.109.0/24 maxlen: 24
50.7.110.0/24 maxlen: 24
50.7.111.0/24 maxlen: 24
50.7.118.0/23 maxlen: 23
50.7.229.0/24 maxlen: 24
192.240.108.0/22 maxlen: 22
192.240.116.0/24 maxlen: 24
192.240.120.0/23 maxlen: 23
192.240.123.0/24 maxlen: 24
192.240.124.0/22 maxlen: 22
198.255.4.0/22 maxlen: 22
198.255.12.0/22 maxlen: 22
198.255.46.0/23 maxlen: 23
198.255.66.0/23 maxlen: 23
198.255.68.0/23 maxlen: 23
198.255.70.0/23 maxlen: 23
198.255.72.0/23 maxlen: 23
198.255.74.0/24 maxlen: 24
198.255.75.0/24 maxlen: 24
198.255.85.0/24 maxlen: 24
198.255.102.0/24 maxlen: 24
198.255.103.0/24 maxlen: 24
198.255.120.0/24 maxlen: 24
198.255.126.0/24 maxlen: 24
198.255.127.0/24 maxlen: 24
2001:49f0:d137::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:a9:32:74:36:bc:32:60:ac:16:87:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Oct 27 13:00:38 2025 GMT
Not After : Jan 25 14:00:38 2026 GMT
Subject: CN=56dbc6e4-8d32-45cc-b931-0eae239ddf6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:93:32:ad:58:30:46:4e:0b:fc:a4:4f:71:a3:
97:62:1f:82:19:cf:f9:d7:bf:e5:bd:c2:69:fb:b5:
ba:af:c0:07:31:f4:6a:7f:3e:9d:c0:be:37:d9:c3:
82:5b:20:54:c5:f6:7b:b0:f5:ab:16:8a:18:3e:1d:
73:27:2b:25:d0:a1:22:71:0c:40:f4:d1:68:f3:49:
d4:ec:73:16:54:cd:d7:62:08:06:ca:70:b9:f4:18:
84:34:71:d1:98:d6:15:a3:49:53:66:5a:05:38:66:
1c:fd:8f:53:47:9e:31:84:14:87:67:b2:1c:de:fd:
dc:77:f4:22:29:07:73:dd:5c:0f:45:85:c2:26:74:
d8:64:7b:54:33:d4:65:53:57:a6:8e:0a:ec:e9:4f:
01:49:d1:e1:10:c2:e1:7c:97:f2:7c:c1:06:f0:bd:
38:f1:1a:99:10:61:66:78:9a:6c:67:ce:c9:27:f2:
87:88:b9:d0:8e:d6:36:4e:8b:de:fb:ac:51:fa:ad:
5a:60:d1:54:fe:f3:dd:c9:eb:1e:50:7d:24:a6:4e:
26:e4:05:ae:ad:ae:2b:73:ad:1f:90:2c:14:df:95:
56:75:6c:a9:03:91:d0:37:1e:01:13:86:bf:3c:8c:
16:a3:89:31:2e:d9:7e:5f:64:4b:3d:7b:c6:96:cf:
a3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7A:6D:07:E9:06:4D:44:12:97:3D:87:E4:C0:4B:D1:E9:1F:CF:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b16561df-fa72-3884-966f-db2939a4dd38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
23.237.31.0-23.237.40.255
23.237.42.0-23.237.45.255
23.237.50.0/23
23.237.54.0-23.237.57.255
23.237.60.0/23
23.237.64.0/22
23.237.72.0/23
23.237.80.0/23
23.237.84.0/23
23.237.94.0/23
23.237.106.0-23.237.115.255
23.237.118.0/23
23.237.176.0/22
23.237.182.0/23
23.237.186.0/24
23.237.188.0/23
23.237.196.0/23
23.237.200.0/23
23.237.205.0-23.237.206.255
23.237.212.0-23.237.214.255
23.237.216.0/24
23.237.219.0-23.237.229.255
23.237.231.0-23.237.238.255
23.237.242.0/23
23.237.246.0/24
23.237.254.0/23
50.7.96.0/20
50.7.118.0/23
50.7.229.0/24
192.240.108.0/22
192.240.116.0/24
192.240.120.0/23
192.240.123.0-192.240.127.255
198.255.4.0/22
198.255.12.0/22
198.255.46.0/23
198.255.66.0-198.255.75.255
198.255.85.0/24
198.255.102.0/23
198.255.120.0/24
198.255.126.0/23
IPv6:
2001:49f0:d137::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:3f:14:b2:1c:cf:4b:99:a4:59:a0:e1:cf:1f:c1:a7:7d:68:
12:e9:08:01:b0:9a:5d:be:2a:5f:ae:60:2c:7f:33:ae:2d:cb:
fd:e9:8e:74:a7:ae:89:46:97:6e:6b:f1:80:47:c2:77:73:0e:
f2:ac:b8:d9:62:11:88:d6:e9:23:ad:de:1a:cc:85:f3:22:d7:
73:7d:c0:3a:cb:eb:35:0f:89:c8:b5:6f:37:12:5c:9a:fb:9b:
ef:a1:65:18:77:2d:99:6c:1e:58:85:28:27:d4:20:51:9c:be:
df:1c:e1:33:77:c2:6d:8e:a1:60:00:4b:5e:94:00:55:84:72:
e7:82:76:f6:28:46:d9:7b:55:84:27:f9:89:c0:80:76:98:4b:
b1:65:52:e6:a8:12:6b:b3:19:df:ff:35:32:c7:be:9f:c9:01:
df:4d:50:f1:b6:08:0a:91:f7:16:62:87:28:62:6c:ee:83:67:
cf:95:28:25:13:2c:86:d3:92:44:cc:7b:00:41:28:7a:42:50:
e9:2a:1f:82:f3:72:0e:64:65:8e:af:6c:43:45:71:8f:4b:c8:
c5:ca:5a:c3:73:b4:b2:b7:23:28:0f:f9:12:35:63:a0:4c:35:
48:9e:95:6f:95:27:55:b7:21:d7:cf:e5:f7:be:7e:49:07:8e:
55:f8:92:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:45:17 2025 by rpki-client