Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c3f5e61d-4a03-375b-80aa-73d6d5db706f.roa
File:                     c3f5e61d-4a03-375b-80aa-73d6d5db706f.roa (raw, json)
Hash identifier:          b0zTjbJ3Q7bMgNju6bUqcV1APpg8kagfW1fsjtVmwFk=
Subject key identifier:   9A:34:53:82:18:47:C4:34:AD:67:FC:0F:ED:E6:E2:18:5E:70:05:01
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584BB2F7D37741678631F4A1F248
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c3f5e61d-4a03-375b-80aa-73d6d5db706f.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     1239
IP address blocks:        23.237.148.0/23 maxlen: 23
                          23.237.150.0/23 maxlen: 23
                          23.237.152.0/23 maxlen: 23
                          23.237.154.0/23 maxlen: 23
                          23.237.156.0/23 maxlen: 23
                          2001:49f0:d0c4::/48 maxlen: 48
                          2001:49f0:d0c5::/48 maxlen: 48
                          2001:49f0:d0c6::/48 maxlen: 48
                          2001:49f0:d0c7::/48 maxlen: 48
                          2001:49f0:d0c8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:d3:77:41:67:86:31:f4:a1:f2:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=fa07a663-ab7a-4cfe-86ea-2e37535e9866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bd:bd:3f:fd:73:bc:21:71:71:00:96:b1:56:
                    a5:d6:55:de:7c:b8:a4:96:34:07:35:0d:2c:94:33:
                    8d:b4:43:e0:0c:0b:3c:ab:e0:42:32:85:dd:a3:db:
                    3e:57:95:02:16:70:6b:51:3d:a3:31:fe:4f:16:c8:
                    d9:33:f8:8f:47:c4:5f:4c:be:72:22:39:09:e6:17:
                    ca:d9:dc:ba:3c:c1:77:ad:30:ea:c5:43:ff:4e:70:
                    70:e5:87:82:2d:7b:96:18:11:8c:2d:fd:a5:ee:f8:
                    2c:5b:6b:8b:16:21:6c:5a:69:f6:96:47:cb:71:3c:
                    93:27:8f:b2:9a:00:f3:43:dd:98:48:07:15:54:39:
                    d4:f1:4d:47:5e:6e:21:ca:4e:35:c0:05:c8:c8:d6:
                    f5:18:7d:b2:00:aa:b6:b2:2b:05:60:7a:07:db:2b:
                    a8:1d:5b:77:3a:56:ee:6d:32:e2:b6:3f:42:3b:22:
                    ef:98:c9:fe:7c:8a:d6:55:44:18:86:b9:3d:b2:46:
                    03:56:aa:67:7a:cc:95:96:46:e8:1c:61:96:a7:90:
                    8c:aa:eb:22:d9:5c:0f:83:d5:8d:81:7a:9e:d7:ed:
                    f7:b2:25:7a:8c:f6:3a:f3:d5:1b:f3:00:8b:37:8a:
                    05:41:18:be:88:4b:58:f0:05:77:5e:04:03:e4:45:
                    3d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:34:53:82:18:47:C4:34:AD:67:FC:0F:ED:E6:E2:18:5E:70:05:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c3f5e61d-4a03-375b-80aa-73d6d5db706f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.148.0-23.237.157.255
                IPv6:
                  2001:49f0:d0c4::-2001:49f0:d0c8:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:3a:e1:ae:28:27:7f:8a:8f:ba:e4:85:2e:67:e9:79:97:b0:
         0d:0b:f9:e9:ad:0b:c3:36:dc:b5:c1:d9:7c:24:4b:25:4d:70:
         84:88:e0:27:f3:5b:1e:24:21:3d:73:d5:4b:0c:24:41:18:ba:
         e5:e2:7b:38:c9:48:79:3b:de:28:ce:20:b0:07:e2:6c:d0:b6:
         74:33:06:47:c0:bb:e7:17:71:57:51:21:d6:4e:b6:8d:4b:76:
         b5:5f:3a:07:10:8b:49:bf:76:1e:10:d3:ac:b3:c2:cc:76:89:
         25:7f:43:f6:a4:5a:cc:9b:15:1c:4e:f1:5b:72:5b:e0:f9:bf:
         94:79:a6:60:d0:27:e9:e2:b7:82:33:a6:cf:01:cf:4f:4d:a2:
         b2:74:3d:cf:d6:4e:8c:7f:17:11:f0:43:81:92:09:a9:2e:88:
         3e:0c:36:cb:69:84:41:d7:9e:d0:e7:13:4e:c7:a7:d5:da:fa:
         03:f0:41:1a:e0:0c:cb:d5:8b:fd:5e:34:68:c5:84:19:f9:9a:
         50:12:a0:ae:8e:09:5b:d7:ce:83:3e:50:1f:3d:a9:16:93:83:
         d3:2c:5a:ed:3d:e4:85:ea:8f:0a:99:13:7e:42:49:7c:90:c2:
         ee:e4:80:0e:aa:3c:1c:7f:c0:75:68:93:f4:cb:ba:e9:81:75:
         eb:3a:45:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:57:01 2025 by rpki-client