Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7f4f6a20-105d-3c39-8fac-0f2eb159e841.roa
File:                     7f4f6a20-105d-3c39-8fac-0f2eb159e841.roa (raw, json)
Hash identifier:          5T/R5nbF+o3qIEXX56mlTtpArZ6r3g08lxkYTNRpO3Y=
Subject key identifier:   0C:68:7E:D7:9D:F3:72:E5:D2:50:38:00:57:E5:6F:13:85:00:CA:2A
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584A23C01494929ECC926C02C760
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7f4f6a20-105d-3c39-8fac-0f2eb159e841.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     174
IP address blocks:        23.237.47.0/24 maxlen: 24
                          23.237.62.0/24 maxlen: 24
                          23.237.78.0/23 maxlen: 24
                          23.237.88.0/23 maxlen: 24
                          23.237.144.0/24 maxlen: 24
                          23.237.145.0/24 maxlen: 24
                          23.237.146.0/24 maxlen: 24
                          23.237.160.0/23 maxlen: 24
                          23.237.202.0/23 maxlen: 24
                          23.237.251.0/24 maxlen: 24
                          23.237.252.0/24 maxlen: 24
                          50.7.64.0/22 maxlen: 24
                          192.240.98.0/23 maxlen: 24
                          192.240.112.0/22 maxlen: 24
                          192.240.118.0/23 maxlen: 24
                          198.255.22.0/23 maxlen: 24
                          198.255.124.0/24 maxlen: 24
                          216.227.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:14:94:92:9e:cc:92:6c:02:c7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=7e931058-88e4-478e-9e08-4e38363fecfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7c:44:e3:29:2f:45:d3:cf:44:36:58:55:ba:
                    b0:6c:8e:8c:17:b5:60:17:54:1b:b1:db:be:dc:17:
                    b7:9a:22:ae:bf:5c:58:eb:4b:ac:9d:21:8c:17:28:
                    db:27:e7:cf:58:60:ab:07:d4:97:d9:ad:51:79:3b:
                    20:03:b8:09:f5:55:65:07:c0:e6:0d:2e:52:d7:81:
                    98:fa:21:c7:d8:c7:4c:5e:ad:16:6b:17:9f:22:78:
                    a1:bb:72:21:cb:1d:a5:4a:93:87:23:ea:c7:9c:b0:
                    32:1b:4c:68:ca:4b:9e:c8:86:13:5f:ef:df:37:28:
                    d5:a4:d8:4e:74:9f:d1:e2:1d:97:4b:11:b2:19:da:
                    0c:b0:61:81:66:98:8e:a1:77:80:5b:3d:7a:c7:68:
                    2f:a5:23:c4:c5:a4:b7:cb:9e:45:63:54:58:36:d5:
                    f6:ec:cd:aa:8a:96:66:59:56:ce:b9:23:f0:0a:5c:
                    fb:c5:48:a3:64:58:70:df:d2:7b:f6:00:72:6c:d1:
                    7e:a6:9d:44:33:3c:d7:49:56:af:8d:7e:b1:dd:b0:
                    dc:32:99:82:cf:d0:be:c0:ed:e7:42:53:a7:ca:09:
                    ae:be:9f:f2:72:70:99:2a:a3:32:c1:4a:e8:cc:ae:
                    7d:b2:af:c6:c0:8f:b4:e0:4a:01:c7:1c:c6:28:47:
                    24:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:68:7E:D7:9D:F3:72:E5:D2:50:38:00:57:E5:6F:13:85:00:CA:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7f4f6a20-105d-3c39-8fac-0f2eb159e841.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.47.0/24
                  23.237.62.0/24
                  23.237.78.0/23
                  23.237.88.0/23
                  23.237.144.0-23.237.146.255
                  23.237.160.0/23
                  23.237.202.0/23
                  23.237.251.0-23.237.252.255
                  50.7.64.0/22
                  192.240.98.0/23
                  192.240.112.0/22
                  192.240.118.0/23
                  198.255.22.0/23
                  198.255.124.0/24
                  216.227.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:79:0b:86:1d:9d:3b:0e:a7:5c:10:b3:af:30:a1:c9:38:af:
         bf:eb:28:ed:51:9d:90:be:4f:dc:bc:94:bb:85:db:c4:0a:84:
         dc:7f:ba:ec:7e:cf:ae:0c:71:29:1b:2c:77:71:3d:24:63:21:
         91:d5:21:3a:0b:18:62:8f:3f:68:e2:27:f4:0f:0f:ba:49:41:
         56:9d:51:2f:40:e4:27:59:ac:18:d6:86:c3:b6:6c:cb:54:cd:
         bb:d7:e6:4d:49:69:2b:79:d6:ad:30:ac:ee:7c:dc:bb:9a:1c:
         ee:ae:b2:e1:03:76:9f:39:20:99:e3:a7:90:fb:ae:3d:a5:65:
         51:e0:1a:99:fe:e3:03:aa:de:f3:a3:17:31:21:f2:aa:67:95:
         22:7f:2d:4d:ac:63:ae:51:6f:83:50:57:09:fb:e9:b0:8f:1d:
         86:ed:98:90:26:e0:42:dc:c1:18:0c:07:8e:24:1f:e0:9c:89:
         aa:3e:a5:87:47:9a:4b:ce:7e:1d:2b:9f:03:78:06:a3:57:4c:
         39:99:20:51:74:10:92:c6:f7:e7:a9:fe:27:09:a8:7c:03:ba:
         df:54:32:3d:90:21:af:5d:d1:27:7a:48:00:00:2c:4e:70:b2:
         51:e8:ac:6b:ee:01:e5:d7:02:92:a5:57:b1:c8:72:ee:b7:fa:
         f8:04:85:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:42:14 2025 by rpki-client