Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/314d290e-501d-3552-a856-2dd6c3c44348.roa
File:                     314d290e-501d-3552-a856-2dd6c3c44348.roa (raw, json)
Hash identifier:          DEo1CpUTutaT294MLG8cFDvupPqj+ldclBOZHqnFekg=
Subject key identifier:   F1:EF:B5:48:E1:8C:57:CB:7C:63:C4:C0:E1:A6:EF:66:ED:76:89:60
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584A17300D68CE0B7F8A384CBBA0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/314d290e-501d-3552-a856-2dd6c3c44348.roa
Signing time:             Thu 05 Jun 2025 13:01:03 +0000
ROA not before:           Thu 05 Jun 2025 13:01:03 +0000
ROA not after:            Wed 03 Sep 2025 13:01:03 +0000
asID:                     7922
IP address blocks:        23.237.126.0/23 maxlen: 23
                          23.237.130.0/23 maxlen: 23
                          23.237.136.0/23 maxlen: 23
                          23.237.138.0/24 maxlen: 24
                          23.237.191.0/24 maxlen: 24
                          23.237.218.0/24 maxlen: 24
                          23.237.244.0/24 maxlen: 24
                          23.237.250.0/24 maxlen: 24
                          50.7.0.0/24 maxlen: 24
                          50.7.8.0/24 maxlen: 24
                          50.7.9.0/24 maxlen: 24
                          50.7.10.0/24 maxlen: 24
                          50.7.11.0/24 maxlen: 24
                          50.7.12.0/24 maxlen: 24
                          50.7.13.0/24 maxlen: 24
                          50.7.15.0/24 maxlen: 24
                          50.7.16.0/24 maxlen: 24
                          50.7.18.0/24 maxlen: 24
                          50.7.19.0/24 maxlen: 24
                          50.7.20.0/24 maxlen: 24
                          50.7.21.0/24 maxlen: 24
                          66.90.124.0/24 maxlen: 24
                          192.240.122.0/24 maxlen: 24
                          198.255.16.0/24 maxlen: 24
                          216.227.131.0/24 maxlen: 24
                          216.227.142.0/23 maxlen: 23
                          216.227.144.0/23 maxlen: 23
                          216.227.146.0/23 maxlen: 23
                          216.227.148.0/23 maxlen: 23
                          216.227.150.0/23 maxlen: 23
                          216.227.152.0/23 maxlen: 23
                          216.227.154.0/23 maxlen: 23
                          216.227.156.0/23 maxlen: 23
                          216.227.160.0/23 maxlen: 23
                          216.227.162.0/24 maxlen: 24
                          216.227.163.0/24 maxlen: 24
                          216.227.164.0/24 maxlen: 24
                          216.227.165.0/24 maxlen: 24
                          216.227.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:30:0d:68:ce:0b:7f:8a:38:4c:bb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jun  5 13:01:03 2025 GMT
            Not After : Sep  3 13:01:03 2025 GMT
        Subject: CN=5afbd48f-2128-4014-91e2-8719339ab475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bd:ac:de:e4:94:41:b3:50:28:11:07:dd:f9:
                    63:1b:15:64:e6:a5:5d:b9:cc:1d:c9:50:a4:fa:91:
                    06:d3:7c:4b:c8:4a:21:e8:ef:4a:5b:7c:d9:8b:6f:
                    42:8a:e4:f5:38:dd:ec:1e:c4:93:95:91:cf:3e:64:
                    34:72:dc:4e:bb:87:d9:e1:34:92:bc:9d:7f:c5:a3:
                    16:ae:95:8d:62:b1:fc:c9:9f:ac:67:f4:c8:60:8e:
                    f8:a9:e0:5f:6a:18:a5:27:c5:77:b0:68:16:5e:6f:
                    fe:2c:17:e6:c7:e6:32:63:3a:75:47:c7:dc:02:09:
                    ca:f5:dd:7b:d4:e2:be:dc:ee:cf:bf:00:f2:85:d5:
                    27:14:00:92:f7:d5:e6:7e:8e:8e:0a:9f:e0:4e:9f:
                    be:2f:62:93:74:12:19:ec:35:f7:c1:9c:5d:af:aa:
                    0b:67:17:56:78:6c:fb:88:d5:28:ee:01:bf:09:48:
                    8e:8c:89:3a:f0:c4:e9:b9:4c:8a:bc:7e:f0:64:04:
                    f9:41:81:4e:ea:4f:a6:98:9a:62:fc:56:66:26:1e:
                    03:cc:3e:35:25:6e:54:17:03:85:63:13:a6:46:17:
                    06:96:67:50:c8:a5:51:50:0b:7e:ad:48:28:d6:ff:
                    19:0d:e1:80:0b:a6:77:98:b3:f9:52:86:10:90:f1:
                    92:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:EF:B5:48:E1:8C:57:CB:7C:63:C4:C0:E1:A6:EF:66:ED:76:89:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/314d290e-501d-3552-a856-2dd6c3c44348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.126.0/23
                  23.237.130.0/23
                  23.237.136.0-23.237.138.255
                  23.237.191.0/24
                  23.237.218.0/24
                  23.237.244.0/24
                  23.237.250.0/24
                  50.7.0.0/24
                  50.7.8.0-50.7.13.255
                  50.7.15.0-50.7.16.255
                  50.7.18.0-50.7.21.255
                  66.90.124.0/24
                  192.240.122.0/24
                  198.255.16.0/24
                  216.227.131.0/24
                  216.227.142.0-216.227.157.255
                  216.227.160.0-216.227.165.255
                  216.227.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:91:99:ee:56:20:cd:b7:7c:3e:84:a5:d7:85:50:fb:7f:93:
         82:a2:a3:b1:28:bc:0b:6b:e2:35:10:c2:47:17:88:d9:3b:a1:
         68:7e:04:4e:95:07:ea:01:c9:e7:73:89:37:2e:fc:3d:31:e6:
         0a:9a:4b:43:2f:2b:f9:6e:6b:1e:ae:fc:85:89:d8:b6:c2:63:
         77:ba:16:cf:4b:ac:a4:db:41:27:35:15:0a:6c:f6:88:49:44:
         8e:ab:b5:16:c1:b0:f0:c4:92:ef:ab:77:2c:fb:99:4a:14:b8:
         60:91:fc:24:d2:ca:bb:f3:1a:9e:2d:ae:d8:b4:44:81:c8:0f:
         a0:f4:ab:3b:16:81:4a:42:c7:a5:69:72:15:e1:e4:42:10:07:
         47:94:5f:02:8c:0c:e6:3a:71:81:08:2f:90:1b:cf:d0:8f:fb:
         3b:3f:ad:b3:65:07:9b:8f:62:b2:eb:46:e3:b0:cd:0a:21:6e:
         7e:49:1f:f8:6b:8c:5a:ff:d0:70:2a:de:8a:a4:d0:aa:c4:2c:
         2d:29:e2:4a:30:0f:8d:96:3c:9c:ef:19:57:ec:d1:00:64:1f:
         38:c5:f0:0a:71:30:5f:21:29:7f:44:79:fb:ab:71:07:de:05:
         37:d0:e9:a1:d2:e3:fc:7b:42:fe:d8:26:62:9e:d0:ee:74:b1:
         d9:3c:df:9a
-----BEGIN CERTIFICATE-----
MIIG3jCCBcagAwIBAgIUAQ0Mn0MoWEoXMA1ozgt/ijhMu6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk
NWFmYmQ0OGYtMjEyOC00MDE0LTkxZTItODcxOTMzOWFiNDc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0L2s3uSUQbNQKBEH3fljGxVk5qVducwdyVCk
+pEG03xLyEoh6O9KW3zZi29CiuT1ON3sHsSTlZHPPmQ0ctxOu4fZ4TSSvJ1/xaMW
rpWNYrH8yZ+sZ/TIYI74qeBfahilJ8V3sGgWXm/+LBfmx+YyYzp1R8fcAgnK9d17
1OK+3O7PvwDyhdUnFACS99Xmfo6OCp/gTp++L2KTdBIZ7DX3wZxdr6oLZxdWeGz7
iNUo7gG/CUiOjIk68MTpuUyKvH7wZAT5QYFO6k+mmJpi/FZmJh4DzD41JW5UFwOF
YxOmRhcGlmdQyKVRUAt+rUgo1v8ZDeGAC6Z3mLP5UoYQkPGSfwIDAQABo4ID8DCC
A+wwHQYDVR0OBBYEFPHvtUjhjFfLfGPEwOGm72btdolgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMzE0ZDI5MGUtNTAxZC0z
NTUyLWE4NTYtMmRkNmMzYzQ0MzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMIG5BggrBgEFBQcBBwEB/wSBqTCBpjCBowQCAAEwgZwDBAEX
7X4DBAEX7YIwDAMEAxftiAMEABftigMEABftvwMEABft2gMEABft9AMEABft+gME
ADIHADAMAwQDMgcIAwQBMgcMMAwDBAAyBw8DBAAyBxAwDAMEATIHEgMEATIHFAME
AEJafAMEAMDwegMEAMb/EAMEANjjgzAMAwQB2OOOAwQB2OOcMAwDBAXY46ADBAHY
46QDBADY478wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB
FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN
BgkqhkiG9w0BAQsFAAOCAQEAS5GZ7lYgzbd8PoSl14VQ+3+TgqKjsSi8C2viNRDC
RxeI2TuhaH4ETpUH6gHJ53OJNy78PTHmCppLQy8r+W5rHq78hYnYtsJjd7oWz0us
pNtBJzUVCmz2iElEjqu1FsGw8MSS76t3LPuZShS4YJH8JNLKu/Mani2u2LREgcgP
oPSrOxaBSkLHpWlyFeHkQhAHR5RfAowM5jpxgQgvkBvP0I/7Oz+ts2UHm49isutG
47DNCiFufkkf+GuMWv/QcCreiqTQqsQsLSniSjAPjZY8nO8ZV+zRAGQfOMXwCnEw
XyEpf0R5+6txB94FN9DpodLj/HtC/tgmYp7Q7nSx2Tzfmg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 16:11:11 2025 by rpki-client