Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f1675267-9cfa-39aa-adfb-425d746e3821.roa
File:                     f1675267-9cfa-39aa-adfb-425d746e3821.roa (raw, json)
Hash identifier:          bGJHzXhW7Q5CThMMGh6z1mjmHC2oOQW6TCQO6GYkehA=
Subject key identifier:   4D:4B:97:4E:F2:40:ED:95:58:4C:59:5C:D0:65:F1:84:D0:36:84:63
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F119D1B484E72487721228A00
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f1675267-9cfa-39aa-adfb-425d746e3821.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     1239
IP address blocks:        23.237.162.0/23 maxlen: 24
                          23.237.247.0/24 maxlen: 24
                          50.7.49.0/24 maxlen: 24
                          216.227.133.0/24 maxlen: 24
                          2001:49f0:d0d1::/48 maxlen: 48
                          2001:49f0:d122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:1b:48:4e:72:48:77:21:22:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=bcf5f4d7-a0bf-465d-8bbd-ba91cd1baa9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:59:d2:1a:4e:d9:35:04:14:99:2e:ed:09:4f:
                    70:57:2b:8a:30:5f:e5:ae:c9:3a:29:65:37:71:40:
                    7a:5e:4f:9d:4a:34:a2:c1:6c:2f:2f:b3:80:9c:14:
                    46:02:8d:08:86:fc:de:f2:d0:87:87:dd:6c:6f:00:
                    7f:65:26:dd:3a:11:df:28:0b:45:5c:02:a3:73:f8:
                    58:e5:39:ee:b0:f0:f6:0c:d9:8e:51:18:ae:4a:53:
                    cb:49:32:e0:02:a3:7f:35:85:68:ad:67:84:ef:55:
                    b7:ca:8d:7e:44:5c:21:f3:c9:5a:ed:a6:66:a6:12:
                    90:5e:cb:11:ba:56:05:73:29:41:28:9f:05:49:1b:
                    fc:c6:2d:d8:8a:dd:79:ab:16:26:b8:4b:cf:4e:17:
                    a3:f7:d1:e2:6f:7d:a8:e1:4e:bc:41:4f:32:89:5b:
                    40:53:a7:4c:38:32:67:33:8a:92:a6:aa:fc:18:9d:
                    f5:a9:92:64:c6:04:29:14:27:e4:e0:11:92:47:ef:
                    c2:be:34:36:ca:50:d0:a5:ad:95:f2:4a:0e:9d:10:
                    02:c3:78:93:eb:e3:4a:17:ac:44:3e:3d:48:54:c0:
                    e2:c7:4e:25:5e:ec:cd:9a:33:23:10:1c:43:9f:84:
                    7d:7e:e7:97:03:f9:ab:66:95:3c:37:e5:67:ef:0d:
                    c3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4B:97:4E:F2:40:ED:95:58:4C:59:5C:D0:65:F1:84:D0:36:84:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f1675267-9cfa-39aa-adfb-425d746e3821.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.162.0/23
                  23.237.247.0/24
                  50.7.49.0/24
                  216.227.133.0/24
                IPv6:
                  2001:49f0:d0d1::/48
                  2001:49f0:d122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:0e:21:0b:c5:ac:b7:93:60:08:e7:46:34:69:d3:40:55:d4:
         20:c5:5a:29:5f:04:46:46:e7:fd:aa:fe:9c:b5:59:97:55:d5:
         f6:2a:52:92:7f:04:2f:4e:e4:42:3a:2d:57:89:c3:84:ed:c4:
         79:08:7c:f0:27:4c:e7:a7:1a:08:a7:f4:0d:5f:6e:92:8a:3b:
         bb:3f:11:86:45:07:da:59:11:42:28:d2:15:d1:be:40:35:3b:
         9d:af:9a:25:94:f8:70:9f:02:ee:91:ea:2f:9a:e1:4c:56:09:
         e0:b5:56:40:f0:27:00:66:43:0a:10:ed:41:29:d8:11:99:89:
         70:33:f8:3c:9d:61:69:14:e8:8e:0b:ab:62:6a:b6:69:ff:7c:
         04:b7:ea:f8:88:ee:93:49:c4:95:10:d5:92:c4:2e:85:3a:9c:
         6a:20:27:9a:51:97:b9:04:e1:d3:c4:7b:13:d9:24:13:de:c9:
         6c:8d:a8:f5:00:0e:4c:02:44:42:8d:05:89:12:7b:be:b3:f1:
         ee:34:80:b1:b8:93:d7:d3:98:08:6a:d6:22:c2:8e:28:1f:05:
         30:7b:97:a3:28:84:ff:b3:65:65:06:8c:a9:02:34:7f:c9:a8:
         d8:62:10:14:d2:22:63:83:77:f1:d3:36:bd:b8:86:2e:3c:6f:
         7f:96:4d:66
-----BEGIN CERTIFICATE-----
MIIGbzCCBVegAwIBAgIUAQ0Mn0MoWE8RnRtITnJIdyEiigAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
YmNmNWY0ZDctYTBiZi00NjVkLThiYmQtYmE5MWNkMWJhYTljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1nSGk7ZNQQUmS7tCU9wVyuKMF/lrsk6KWU3
cUB6Xk+dSjSiwWwvL7OAnBRGAo0Ihvze8tCHh91sbwB/ZSbdOhHfKAtFXAKjc/hY
5TnusPD2DNmOURiuSlPLSTLgAqN/NYVorWeE71W3yo1+RFwh88la7aZmphKQXssR
ulYFcylBKJ8FSRv8xi3Yit15qxYmuEvPThej99Hib32o4U68QU8yiVtAU6dMODJn
M4qSpqr8GJ31qZJkxgQpFCfk4BGSR+/CvjQ2ylDQpa2V8koOnRACw3iT6+NKF6xE
Pj1IVMDix04lXuzNmjMjEBxDn4R9fueXA/mrZpU8N+Vn7w3DKQIDAQABo4IDgTCC
A30wHQYDVR0OBBYEFE1Ll07yQO2VWExZXNBl8YTQNoRjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZjE2NzUyNjctOWNmYS0z
OWFhLWFkZmItNDI1ZDc0NmUzODIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMEsGCCsGAQUFBwEHAQH/BDwwOjAeBAIAATAYAwQBF+2iAwQA
F+33AwQAMgcxAwQA2OOFMBgEAgACMBIDBwAgAUnw0NEDBwAgAUnw0SIwVAYDVR0g
AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h
cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC
AQEAYw4hC8Wst5NgCOdGNGnTQFXUIMVaKV8ERkbn/ar+nLVZl1XV9ipSkn8EL07k
QjotV4nDhO3EeQh88CdM56caCKf0DV9ukoo7uz8RhkUH2lkRQijSFdG+QDU7na+a
JZT4cJ8C7pHqL5rhTFYJ4LVWQPAnAGZDChDtQSnYEZmJcDP4PJ1haRTojgurYmq2
af98BLfq+Ijuk0nElRDVksQuhTqcaiAnmlGXuQTh08R7E9kkE97JbI2o9QAOTAJE
Qo0FiRJ7vrPx7jSAsbiT19OYCGrWIsKOKB8FMHuXoyiE/7NlZQaMqQI0f8mo2GIQ
FNIiY4N38dM2vbiGLjxvf5ZNZg==
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:59:17 2026 by rpki-client