Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/20efb6fb-1edd-3db8-83b8-b797e412637a.roa
File:                     20efb6fb-1edd-3db8-83b8-b797e412637a.roa (raw, json)
Hash identifier:          wVKXmvI3UtaAG6OrfK3nBFIh9p75kSAUcp0sr1PeWKM=
Subject key identifier:   D1:B5:DA:C6:7F:5D:16:A5:0C:F8:45:6F:8C:79:E8:63:32:41:99:35
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285849F17FD4FFAB3CDD2CDF134280
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/20efb6fb-1edd-3db8-83b8-b797e412637a.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     30058
IP address blocks:        23.237.148.0/23 maxlen: 23
                          23.237.150.0/23 maxlen: 23
                          23.237.152.0/23 maxlen: 23
                          23.237.154.0/23 maxlen: 23
                          23.237.156.0/23 maxlen: 23
                          2001:49f0:d0c4::/48 maxlen: 48
                          2001:49f0:d0c5::/48 maxlen: 48
                          2001:49f0:d0c6::/48 maxlen: 48
                          2001:49f0:d0c7::/48 maxlen: 48
                          2001:49f0:d0c8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:d4:ff:ab:3c:dd:2c:df:13:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=1e60f010-baa5-483b-a84c-fc53136ec06b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:51:de:ea:9b:59:d6:ed:51:64:4d:fa:04:38:
                    8f:73:e6:ce:b9:ed:86:25:24:31:7f:a3:1d:f7:80:
                    cf:44:ab:7f:69:09:66:b3:17:81:a8:27:d3:cd:6e:
                    21:cf:95:97:95:fe:76:98:29:64:c4:1b:f0:fb:ff:
                    11:01:11:56:a0:c9:b6:f1:bf:50:27:07:b1:51:ca:
                    6a:6d:35:b2:18:00:a0:84:17:81:60:f4:06:3f:03:
                    5a:2c:de:e8:84:ca:4f:35:f7:99:25:eb:e6:2e:2c:
                    f8:29:61:c2:0d:59:c1:62:bf:fe:57:c0:ae:ac:e2:
                    cf:f1:73:c5:15:52:8a:64:30:44:d7:c6:9e:28:22:
                    b2:10:29:54:cc:0f:a1:06:a8:e3:da:13:8a:c9:54:
                    4a:c8:a3:9d:f6:0a:65:a7:e9:a7:4b:6c:12:12:e7:
                    de:92:ae:57:d0:e2:dd:ea:b9:4b:9d:ba:29:03:7c:
                    78:56:9d:d4:93:c8:8b:f5:6f:e3:6d:16:9c:8e:1e:
                    81:63:65:af:e7:86:e3:2b:d1:19:35:85:73:2b:2a:
                    19:92:ae:e8:32:82:bb:9f:de:46:c2:89:17:b1:5a:
                    bb:a2:1a:cd:6a:ed:40:5e:c1:b6:6d:74:90:14:35:
                    a2:26:fe:71:b0:d0:de:cb:d9:ac:26:eb:ab:8a:57:
                    2a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B5:DA:C6:7F:5D:16:A5:0C:F8:45:6F:8C:79:E8:63:32:41:99:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/20efb6fb-1edd-3db8-83b8-b797e412637a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.148.0-23.237.157.255
                IPv6:
                  2001:49f0:d0c4::-2001:49f0:d0c8:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:96:8b:88:3a:f2:51:ae:27:0c:94:d3:ab:e7:9e:08:c7:fb:
         17:3e:2f:6b:8f:ac:c0:80:85:8d:ea:af:4f:bb:14:da:5c:3d:
         44:c4:63:e9:fb:cb:19:12:e0:0b:83:0b:21:d3:29:65:37:47:
         0a:ac:b1:d3:7a:64:e5:2c:e0:ab:c4:23:c4:bb:d3:d9:06:a6:
         90:14:26:67:09:d8:db:d3:5c:ae:34:9e:bf:9f:75:56:b5:bb:
         08:62:9a:d9:0a:d5:93:95:34:86:02:86:f9:95:ae:91:89:6a:
         23:62:f3:23:aa:63:eb:72:a7:73:2c:fa:5f:24:76:a3:98:5e:
         22:74:f7:4e:20:69:aa:b1:b2:48:85:09:76:63:72:71:0e:6c:
         a1:77:ec:cf:ed:fd:0e:56:81:00:43:4e:1f:12:4e:3b:41:72:
         96:12:46:05:9b:7e:8a:b8:20:d2:ae:56:b5:c6:41:1d:2e:f5:
         26:1b:88:fb:80:14:96:d6:12:29:3b:6a:2a:04:5d:3c:07:7b:
         1f:c0:9d:c9:71:53:4f:86:14:fb:2c:2d:55:32:a8:73:7f:cd:
         62:68:f2:1a:ad:67:ab:7b:61:89:ed:59:cd:d2:5a:4d:b2:c5:
         79:b9:92:f7:8a:70:1b:de:19:3c:7d:22:1b:63:aa:68:dd:d2:
         b8:3c:8c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:39:14 2025 by rpki-client