Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8e3362fe-7a1d-3626-a66b-f6755df4bbeb.roa
File:                     8e3362fe-7a1d-3626-a66b-f6755df4bbeb.roa (raw, json)
Hash identifier:          23Fyobwo8c+Xl7QHDwK8O1YGHYlFck9U/NPdsRrc8Zg=
Subject key identifier:   6E:62:79:E0:DB:FD:91:1D:03:60:42:99:1D:93:33:12:C9:A5:C5:11
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584A331AEF95B9F3671CBFA62800
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8e3362fe-7a1d-3626-a66b-f6755df4bbeb.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     30058
IP address blocks:        23.237.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:ef:95:b9:f3:67:1c:bf:a6:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=946f7790-3d5a-47b7-94ca-a62b874f8d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:58:fa:db:8b:31:9f:b1:92:5f:e1:84:9c:7f:
                    73:13:73:28:1a:20:8e:30:22:55:f9:ac:08:8a:4b:
                    41:b3:bc:73:26:5d:05:80:48:48:d7:72:6f:aa:ab:
                    30:ac:76:76:d3:16:c4:c1:0a:93:fb:04:4a:97:37:
                    64:22:19:b6:2a:42:81:61:92:69:e7:0e:e8:49:46:
                    89:19:77:f1:5c:73:9a:a9:3d:c1:cb:64:6d:41:69:
                    78:8e:c2:37:8a:18:77:5e:4d:14:05:da:fa:2f:f1:
                    c4:54:57:0f:1a:54:a5:4d:41:1e:93:79:15:af:f0:
                    16:ad:b4:f7:f4:5d:9a:04:c6:15:31:92:af:e9:82:
                    24:49:69:1c:c4:eb:a2:6a:29:5f:6c:3f:b2:05:07:
                    15:18:fd:11:81:6c:2b:7f:50:b2:68:ff:96:d8:57:
                    92:3e:b4:44:7b:fc:21:00:39:28:50:6d:ad:bb:eb:
                    02:a9:c1:a0:32:3e:5e:45:a5:ca:9e:e3:d9:2b:6b:
                    9e:7b:10:77:72:92:4e:03:03:e8:2d:f7:da:05:32:
                    a4:06:74:5c:18:dc:ae:18:3b:e8:69:19:c5:0a:7e:
                    c9:de:e1:a0:e2:7a:0f:a7:b1:35:c8:40:54:4f:64:
                    af:83:01:8a:5c:d2:29:9c:a9:41:00:73:c2:d8:8f:
                    c9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:62:79:E0:DB:FD:91:1D:03:60:42:99:1D:93:33:12:C9:A5:C5:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8e3362fe-7a1d-3626-a66b-f6755df4bbeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:b7:b1:96:02:8c:89:1f:f5:28:d5:a5:f0:fb:bb:9d:00:05:
         68:f9:85:b4:87:ab:3f:6b:ea:63:91:17:72:bb:df:79:5e:a3:
         cb:d7:13:0f:20:68:29:0c:19:42:9b:5d:ec:6a:19:ef:20:f3:
         5f:c7:1f:22:cc:5b:d8:d5:fe:ec:d4:6e:5d:c7:c3:2a:60:7f:
         f2:06:bb:4a:47:6b:74:55:2d:3a:b3:9d:63:86:9c:51:c9:d0:
         cf:81:69:cd:62:cc:30:7d:1b:75:19:6a:b1:04:b9:e9:d7:93:
         fe:67:c9:90:6c:6d:3c:58:1f:42:43:57:d4:b4:6a:0b:d6:5e:
         56:f3:0e:77:52:ac:38:df:44:97:a7:09:c3:a7:ee:7e:33:75:
         50:ae:41:24:46:88:54:ce:50:29:d5:86:25:38:6d:a9:72:30:
         16:18:65:da:95:7d:0f:61:5b:3b:f2:86:67:12:ee:48:3e:5a:
         50:9b:6f:4d:d8:21:99:51:28:cc:4e:81:36:c3:93:84:54:96:
         26:df:69:8a:19:3e:c5:34:cb:3f:8d:06:c9:cb:95:56:22:d1:
         4f:2c:e2:4b:26:a4:e1:d2:1f:23:50:da:30:48:84:1f:c9:b3:
         56:20:5b:43:af:9f:2c:c7:07:5b:35:43:91:ed:8f:ba:85:04:
         63:b7:dd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:08:23 2025 by rpki-client