Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/19c34cba-7e1b-3a52-bbce-812367f7fc40.roa
File:                     19c34cba-7e1b-3a52-bbce-812367f7fc40.roa (raw, json)
Hash identifier:          bjiHI9oqFL8YSjXN9jR7vtJKRMlEDTANtqY73WZHNts=
Subject key identifier:   6C:8B:58:1F:0C:CE:E8:C9:77:3D:73:DD:98:AA:62:67:6C:E7:A2:BD
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584A0C057967E107866BEB590100
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/19c34cba-7e1b-3a52-bbce-812367f7fc40.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     174
IP address blocks:        23.237.162.0/23 maxlen: 24
                          23.237.247.0/24 maxlen: 24
                          50.7.49.0/24 maxlen: 24
                          216.227.133.0/24 maxlen: 24
                          2001:49f0:d0d1::/48 maxlen: 48
                          2001:49f0:d122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:79:67:e1:07:86:6b:eb:59:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=96495008-1422-41f8-bb8c-48f7c70ae616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5d:79:f3:06:dd:9a:6b:58:68:9c:14:21:d1:
                    4e:6f:10:a7:70:da:54:74:ac:2e:b8:71:50:dc:54:
                    91:5e:83:5d:d9:26:46:12:18:d7:33:f3:e2:32:12:
                    e0:ab:15:d9:29:d4:90:f2:a6:98:18:ac:08:f9:85:
                    2a:27:67:bb:a4:74:ff:91:df:54:21:2d:53:49:30:
                    89:ee:2c:fb:08:41:47:85:02:e7:13:d1:b9:b4:e5:
                    c3:47:c4:7f:61:1d:ad:de:9b:e6:fb:ad:6e:34:3b:
                    5c:2c:28:28:18:ef:32:bf:c3:f8:e8:d0:b7:df:03:
                    ee:04:b9:91:3e:6d:28:d7:ac:db:d5:6b:ad:50:50:
                    6c:6d:9e:89:ae:08:ed:4e:46:7d:9c:1c:2d:44:8e:
                    29:a8:29:35:6b:09:cb:03:f6:5a:b9:b7:ab:9d:df:
                    6a:3f:a9:35:ad:f4:b0:dc:4f:b4:dd:a9:40:ad:b8:
                    d2:9c:07:e5:a7:66:67:14:fe:9b:ee:19:91:60:4b:
                    fd:66:86:e4:3a:8d:60:89:69:45:b1:87:02:00:97:
                    be:3d:3f:17:3f:c4:18:e9:d0:0e:c1:5b:13:ca:8e:
                    9e:d4:4a:e9:2e:e2:c9:6e:55:25:a5:e1:49:b2:3c:
                    31:15:f0:67:ea:0a:ff:c8:95:cc:40:67:31:1a:e9:
                    fe:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8B:58:1F:0C:CE:E8:C9:77:3D:73:DD:98:AA:62:67:6C:E7:A2:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/19c34cba-7e1b-3a52-bbce-812367f7fc40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.162.0/23
                  23.237.247.0/24
                  50.7.49.0/24
                  216.227.133.0/24
                IPv6:
                  2001:49f0:d0d1::/48
                  2001:49f0:d122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:a6:9c:0d:fa:32:66:af:6c:cc:e6:52:d1:5f:d5:2e:d5:0b:
         e4:a5:52:a3:b2:e8:af:60:6d:53:db:7f:08:e3:61:dd:29:fa:
         82:c3:e1:7f:bd:14:da:a5:52:64:59:91:fe:ba:e6:cd:8d:17:
         bc:de:22:92:ac:28:50:9a:bf:4f:8a:a0:75:8a:09:06:f7:c4:
         9f:c4:c6:e0:96:ae:c5:7a:26:cc:0d:a4:ea:24:91:fd:32:2b:
         23:fc:45:1d:93:db:32:c4:c3:9c:76:26:ec:59:d8:86:19:fa:
         8e:2c:02:ef:31:74:0b:42:e8:68:46:f8:18:7c:e3:28:a8:74:
         2d:d4:06:eb:ea:fa:f4:90:a4:19:e4:a1:24:e9:44:8a:c2:db:
         fd:54:7e:ab:0a:2b:ac:97:1a:53:8c:e6:da:f5:09:74:e5:46:
         6d:3d:cd:cf:b0:1b:e7:0e:d9:44:3a:c4:70:ad:f6:e9:1a:a6:
         17:85:78:29:6b:bf:87:36:61:b8:89:b3:a7:b9:4d:2f:c1:e2:
         b7:59:ba:ed:1e:58:33:d3:b1:11:69:e5:76:31:77:7c:61:8d:
         e8:65:ee:01:05:1e:fd:4c:59:e1:7b:d7:85:72:04:a5:3a:98:
         4a:0c:fd:98:55:e8:22:bb:ca:ff:17:da:f1:63:fc:69:f1:27:
         1f:ad:5b:90
-----BEGIN CERTIFICATE-----
MIIGbzCCBVegAwIBAgIUAQ0Mn0MoWEoMBXln4QeGa+tZAQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
OTY0OTUwMDgtMTQyMi00MWY4LWJiOGMtNDhmN2M3MGFlNjE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV158wbdmmtYaJwUIdFObxCncNpUdKwuuHFQ
3FSRXoNd2SZGEhjXM/PiMhLgqxXZKdSQ8qaYGKwI+YUqJ2e7pHT/kd9UIS1TSTCJ
7iz7CEFHhQLnE9G5tOXDR8R/YR2t3pvm+61uNDtcLCgoGO8yv8P46NC33wPuBLmR
Pm0o16zb1WutUFBsbZ6JrgjtTkZ9nBwtRI4pqCk1awnLA/Zaubernd9qP6k1rfSw
3E+03alArbjSnAflp2ZnFP6b7hmRYEv9ZobkOo1giWlFsYcCAJe+PT8XP8QY6dAO
wVsTyo6e1ErpLuLJblUlpeFJsjwxFfBn6gr/yJXMQGcxGun+4wIDAQABo4IDgTCC
A30wHQYDVR0OBBYEFGyLWB8MzujJdz1z3ZiqYmds56K9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMTljMzRjYmEtN2UxYi0z
YTUyLWJiY2UtODEyMzY3ZjdmYzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMEsGCCsGAQUFBwEHAQH/BDwwOjAeBAIAATAYAwQBF+2iAwQA
F+33AwQAMgcxAwQA2OOFMBgEAgACMBIDBwAgAUnw0NEDBwAgAUnw0SIwVAYDVR0g
AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h
cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC
AQEAPKacDfoyZq9szOZS0V/VLtUL5KVSo7Lor2BtU9t/CONh3Sn6gsPhf70U2qVS
ZFmR/rrmzY0XvN4ikqwoUJq/T4qgdYoJBvfEn8TG4JauxXomzA2k6iSR/TIrI/xF
HZPbMsTDnHYm7FnYhhn6jiwC7zF0C0LoaEb4GHzjKKh0LdQG6+r69JCkGeShJOlE
isLb/VR+qworrJcaU4zm2vUJdOVGbT3Nz7Ab5w7ZRDrEcK326RqmF4V4KWu/hzZh
uImzp7lNL8Hit1m67R5YM9OxEWnldjF3fGGN6GXuAQUe/UxZ4XvXhXIEpTqYSgz9
mFXoIrvK/xfa8WP8afEnH61bkA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:23:23 2025 by rpki-client