Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/2cd7744b-370f-371d-9b01-0334b9c10fe9.roa
File:                     2cd7744b-370f-371d-9b01-0334b9c10fe9.roa (raw, json)
Hash identifier:          JdBznRpCxm/y3ai8i5gMc2tTBjf4lwogUt39ilFOCII=
Subject key identifier:   CE:AA:D2:74:A3:57:85:4E:F8:F1:4D:4A:C6:DA:53:93:BA:4D:69:14
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584AD5065EEBD6C45DBF62071180
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/2cd7744b-370f-371d-9b01-0334b9c10fe9.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     1239
IP address blocks:        23.237.2.0/23 maxlen: 23
                          23.237.4.0/23 maxlen: 23
                          2001:49f0:d069::/48 maxlen: 48
                          2001:49f0:d06a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:5e:eb:d6:c4:5d:bf:62:07:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=f6e190ff-e656-4540-91f7-84f89cf4e051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ea:0e:5d:21:0b:36:f8:e9:47:a0:2f:5e:3d:
                    47:60:fb:25:4f:61:a6:06:05:f0:16:f6:42:8b:56:
                    7a:d0:32:d7:1a:50:b2:93:c6:f7:2d:29:64:de:6e:
                    3d:46:9d:23:87:0e:fa:cd:8f:ef:e6:11:28:e0:65:
                    8f:19:e8:ce:66:6f:ed:fa:28:91:00:b6:bd:d8:86:
                    e0:b8:37:48:fe:dd:a0:c8:c2:17:53:7d:7d:6c:05:
                    24:a0:a0:0b:d3:05:34:bc:73:aa:d6:13:63:eb:63:
                    44:9e:e4:f5:b7:7a:b6:6b:bd:f7:d4:c9:f0:92:d7:
                    0e:f4:80:7d:4c:78:76:eb:5b:f8:2d:33:dd:33:c6:
                    9b:ce:ea:89:03:91:71:48:f2:5f:48:2c:56:a2:27:
                    6e:29:ac:d1:a3:73:ce:91:10:cb:66:fb:52:b0:be:
                    eb:7f:c5:2e:c0:d2:e5:cf:7c:09:72:13:a5:d8:91:
                    64:e6:f7:9f:20:f9:de:09:ad:23:f4:54:87:43:a5:
                    78:c8:78:3d:1a:19:b8:34:eb:fa:3f:c1:c5:d9:56:
                    25:ad:b6:a6:96:dc:c9:12:7e:8d:49:98:f6:da:5a:
                    42:2d:03:6a:b2:52:6a:0a:ca:66:3e:40:fc:1e:3f:
                    99:28:58:64:ad:f7:80:88:6b:08:99:6d:8f:2c:3e:
                    71:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AA:D2:74:A3:57:85:4E:F8:F1:4D:4A:C6:DA:53:93:BA:4D:69:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/2cd7744b-370f-371d-9b01-0334b9c10fe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.2.0-23.237.5.255
                IPv6:
                  2001:49f0:d069::-2001:49f0:d06a:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:63:bc:d0:6f:50:31:38:0a:92:4c:d0:24:cd:27:4d:e6:de:
         58:ac:ab:7b:ea:1d:6c:9f:28:48:fa:c9:34:13:c4:60:8e:81:
         8d:d0:8c:ff:4f:0c:3e:48:37:32:26:2a:bf:40:f4:c0:6f:39:
         62:b7:64:e0:a3:e5:0a:6a:fd:67:13:fc:cb:39:6a:bd:e7:af:
         3d:37:71:a4:44:a6:53:ca:31:11:a7:a0:0e:ae:10:62:61:2a:
         4b:48:18:c9:b0:37:90:e6:e3:66:cc:4b:60:5e:a7:17:8f:5f:
         95:13:11:09:b1:2a:b6:5f:46:51:7f:d3:9c:5d:8b:1b:c8:9c:
         ef:75:67:f6:13:94:a5:35:78:cb:03:72:f9:1c:59:08:bd:db:
         10:6a:00:9e:d7:20:5c:dd:bb:ab:3b:55:03:43:82:36:80:8b:
         22:89:e2:6b:fd:f7:34:21:0b:3c:d5:34:1f:0f:0a:67:04:92:
         2a:08:3e:e4:9d:60:6d:81:c8:e2:80:c8:8b:cc:4b:2c:85:b0:
         07:4e:20:ae:d1:7b:cb:9a:a4:28:f4:90:50:0a:28:37:59:ac:
         6f:b3:6c:bb:b8:b6:5c:0f:1a:0c:9c:88:58:4a:a9:14:3f:90:
         12:6b:50:0d:c5:8f:9d:d2:b9:2d:b2:cf:3d:f4:83:f3:62:c9:
         17:23:4d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:45:50 2025 by rpki-client