Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/4682e26a-e769-36ce-accb-635b2b21e13b.roa
File:                     4682e26a-e769-36ce-accb-635b2b21e13b.roa (raw, json)
Hash identifier:          YdJnd2OMciPS1EhruKW+Csz4ILDTo9AqthfeZfEI1iY=
Subject key identifier:   E8:4E:D9:CD:D0:F4:81:05:CE:02:10:83:07:01:73:48:BC:10:0F:36
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285849929461BC9554BF5A68AACE40
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/4682e26a-e769-36ce-accb-635b2b21e13b.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     30058
IP address blocks:        23.237.184.0/24 maxlen: 24
                          23.237.254.0/24 maxlen: 24
                          23.237.255.0/24 maxlen: 24
                          2001:49f0:d04c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:61:bc:95:54:bf:5a:68:aa:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=b5b3a08b-fc71-4c39-aeb5-c6f15d76668e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e0:c3:ca:b1:46:d8:aa:97:39:cd:81:33:f8:
                    de:c1:ba:fd:b2:26:9f:1e:15:9b:9e:f8:e7:75:1a:
                    b9:09:72:78:30:23:55:b5:b4:69:b2:07:39:7f:66:
                    6a:04:a7:bc:0d:96:6b:91:21:25:a0:e8:88:b5:5d:
                    d1:08:11:51:0f:26:f4:d3:cb:20:c1:6b:5b:c5:1c:
                    5d:f0:c3:d7:22:af:7a:33:ef:29:b6:17:e9:b9:30:
                    f3:db:c8:38:80:ac:b9:b8:bd:e5:29:04:0a:1b:54:
                    96:84:a4:71:49:75:32:20:8d:6c:8e:ed:f5:8a:ed:
                    0d:9d:c7:97:1f:e1:56:6b:84:d2:28:15:69:76:d6:
                    7c:1c:0b:c2:6e:18:64:3b:84:3d:a3:9e:fa:2e:11:
                    6d:95:d7:29:a4:b4:ca:c7:ca:62:de:3b:61:68:5b:
                    6d:d1:6f:17:78:e1:4a:de:7d:08:0f:db:2c:9e:a8:
                    43:53:7d:42:d9:dc:aa:2f:d2:c7:9c:1e:85:00:20:
                    a3:c8:c6:88:c1:0e:6f:a6:71:08:eb:14:02:6b:9f:
                    5d:3a:f7:fd:82:3a:e0:14:d5:74:fe:17:7c:8c:81:
                    b4:3f:85:17:37:3d:d4:25:df:6a:cb:75:cf:0d:15:
                    0d:d6:2e:7d:c0:c9:3d:33:d2:15:a4:f6:05:35:8e:
                    3c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:4E:D9:CD:D0:F4:81:05:CE:02:10:83:07:01:73:48:BC:10:0F:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/4682e26a-e769-36ce-accb-635b2b21e13b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.184.0/24
                  23.237.254.0/23
                IPv6:
                  2001:49f0:d04c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:10:d3:40:7b:d2:94:71:1f:3f:53:bc:20:37:58:6c:c2:0b:
         3c:f5:1c:9e:dd:1e:c2:f3:e7:91:97:76:ee:d5:fb:04:a1:33:
         d9:4b:b5:0e:08:71:c4:95:59:da:05:9a:ff:5e:f0:ba:45:b8:
         30:e1:b6:d2:b3:60:ef:d1:4a:94:05:7a:d1:1e:52:fe:44:9b:
         6b:6e:ca:82:db:1f:5c:01:e0:0c:71:e5:2d:9b:99:cd:e6:e3:
         93:b3:18:32:8a:48:d8:3f:de:41:24:b5:69:e2:66:44:f3:e7:
         f7:3b:bf:ff:14:22:fe:7d:5e:1e:26:e9:a5:a4:c3:d9:33:0f:
         c0:4e:4f:09:e3:6b:e8:96:49:fe:fd:7e:3b:66:a5:2d:95:45:
         11:db:18:b5:fc:d5:2e:48:ec:ba:e1:a3:8b:a1:b1:a1:9a:a1:
         2c:56:25:7b:e9:4d:10:bf:79:fd:9c:49:b2:da:14:5b:6c:ac:
         65:fe:82:85:58:c1:93:42:fe:a3:b8:ee:21:46:3e:2f:20:d3:
         f9:4b:16:be:e3:a8:b4:fb:78:4d:59:d4:df:83:f6:41:4c:8b:
         ae:c1:f8:33:e2:7c:2d:d8:a3:1d:e9:ce:21:2f:2a:bd:43:d7:
         d3:18:a8:2b:4e:a5:80:07:38:5a:26:3f:0d:14:71:b2:70:a1:
         a6:ab:bd:b1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:32:52 2025 by rpki-client