Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0f36614f-7384-3969-ad8c-c08b6f61b802.roa
File:                     0f36614f-7384-3969-ad8c-c08b6f61b802.roa (raw, json)
Hash identifier:          ZTVC5QAi8lHAbFtOEAlzXog42da4yBIRSX2UI2FVtA0=
Subject key identifier:   4C:B0:D7:4E:22:78:17:76:D8:2A:08:27:79:E9:33:05:B9:97:32:CA
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584AD5065F1736165656FCB45680
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0f36614f-7384-3969-ad8c-c08b6f61b802.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     30058
IP address blocks:        23.237.2.0/23 maxlen: 23
                          23.237.4.0/23 maxlen: 23
                          2001:49f0:d069::/48 maxlen: 48
                          2001:49f0:d06a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:5f:17:36:16:56:56:fc:b4:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=51a72afd-e423-4cbb-be86-4b06ae291a5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:27:9d:f7:44:1b:86:39:c1:cf:35:26:7d:f6:
                    cd:cb:2b:89:a6:9a:22:69:cd:ec:a6:25:82:47:0c:
                    16:f9:ac:7b:68:19:3c:98:73:ce:88:98:db:c2:af:
                    06:84:59:fe:2b:34:72:a2:ac:7a:da:57:53:a1:a4:
                    f4:cb:44:51:a0:c6:e1:38:12:1e:f2:c1:f3:29:46:
                    50:bd:3f:f3:f0:5d:99:bd:34:31:92:48:fe:aa:cf:
                    b7:ab:f6:4b:aa:38:1f:ab:b7:8b:24:62:ee:62:46:
                    c6:a4:e2:a0:8a:47:bd:07:19:70:2f:d0:d7:6c:08:
                    e3:70:66:76:af:9d:1c:d9:c9:fc:e5:5f:22:41:79:
                    84:f9:fe:df:b3:92:e5:2e:12:21:69:ea:e2:67:8d:
                    eb:4b:58:49:fd:5c:8e:7e:3f:a6:a2:85:10:d7:81:
                    d2:fb:72:6e:38:4a:dd:1b:c7:c0:36:8d:7e:f7:82:
                    a8:31:e2:6b:58:28:99:de:07:b3:02:cf:f4:02:7c:
                    72:38:b6:33:0b:e7:a9:27:f2:89:94:15:c4:a3:f0:
                    2b:91:2d:29:3d:29:7f:59:bd:29:1a:f6:67:de:60:
                    57:1a:96:48:d1:8e:d2:9c:cb:91:17:cb:80:74:b1:
                    7b:e8:85:49:5f:ac:c3:fe:b8:67:7a:9b:da:87:75:
                    1a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B0:D7:4E:22:78:17:76:D8:2A:08:27:79:E9:33:05:B9:97:32:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0f36614f-7384-3969-ad8c-c08b6f61b802.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.2.0-23.237.5.255
                IPv6:
                  2001:49f0:d069::-2001:49f0:d06a:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:6f:20:0b:65:66:ed:75:61:89:4a:7b:10:55:48:b7:2e:d7:
         c0:e6:f1:26:7f:df:73:2c:45:78:c5:50:d6:c9:ef:fd:73:4b:
         f6:4f:c1:38:86:e0:b9:4f:e1:6e:6e:13:6d:04:2b:2f:a1:d8:
         9c:04:57:33:e0:96:c0:04:1d:58:f2:98:d9:9d:7c:0c:ce:b4:
         45:11:5a:a1:05:c9:4a:9e:4a:f6:89:4a:c4:3d:91:a3:a5:c0:
         bc:42:93:a7:9d:2e:83:5e:b8:17:fe:a4:5d:37:71:d5:81:7b:
         dc:23:c8:30:97:b1:95:2c:28:f2:03:04:c6:c7:40:c7:a8:e3:
         07:d6:06:2d:79:59:a1:3b:81:19:96:db:d4:4b:eb:3a:47:07:
         70:8a:20:b1:39:ff:93:58:1d:73:49:1c:ed:08:31:22:23:7d:
         d0:46:9c:1e:ad:b2:56:2a:cf:7e:b4:ac:b1:62:ee:23:5e:73:
         07:d8:69:5d:6a:71:58:1b:ca:24:45:4b:90:62:ce:75:97:16:
         96:dd:cb:ed:6d:08:d9:0c:1c:76:69:21:37:79:84:e1:a7:92:
         74:e0:22:43:c1:3a:12:d6:7c:22:a6:d3:6e:68:18:c6:88:82:
         d9:00:ef:b0:91:1b:27:0b:bc:4b:c1:59:9c:10:b6:00:6d:63:
         73:8f:c6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:46:25 2025 by rpki-client