Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7e2579b9-7f76-34c6-bb4b-2f51a690df2f.roa
File:                     7e2579b9-7f76-34c6-bb4b-2f51a690df2f.roa (raw, json)
Hash identifier:          au0vs+fM2okqK60rKNxfHhEeE9wuVLnlNxDWzyxGdfw=
Subject key identifier:   28:5A:9E:04:4F:35:AB:03:4A:AA:20:39:7F:C3:6B:DE:5F:61:4D:9C
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584AD5065ECF1932E1E1709B7300
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7e2579b9-7f76-34c6-bb4b-2f51a690df2f.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     174
IP address blocks:        23.237.2.0/23 maxlen: 23
                          23.237.4.0/23 maxlen: 23
                          2001:49f0:d069::/48 maxlen: 48
                          2001:49f0:d06a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:5e:cf:19:32:e1:e1:70:9b:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=0105af1a-6d28-4401-b27d-260f8872425a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b3:c4:dc:d1:6f:4c:0a:e3:ba:2a:67:c0:bc:
                    b4:0d:dd:26:b3:c7:fe:d1:ff:c3:40:72:64:38:24:
                    c5:bc:46:90:25:3d:6d:17:dc:c8:2d:e0:a0:23:4a:
                    3f:07:74:09:b8:c2:e6:90:ba:1f:c9:6c:fd:fd:99:
                    15:2e:97:1f:48:22:89:5e:7d:d0:b2:5d:fa:65:21:
                    f5:2a:05:5d:52:e4:6d:9f:e5:62:39:0f:eb:f8:40:
                    39:97:c0:e5:d7:af:b6:34:81:61:d7:e9:dc:5d:16:
                    77:3e:ce:ff:04:66:09:fc:8b:0b:f9:ac:27:e4:a8:
                    a1:19:c4:eb:05:db:a3:86:58:41:b6:ee:93:d7:2f:
                    ae:5a:ef:ad:e4:89:9a:4e:8e:0c:ab:d8:96:8f:c3:
                    0b:8c:a4:0d:1b:e2:fa:3c:06:35:e6:32:a5:e0:da:
                    9a:6b:a2:3c:99:92:98:1d:1f:4a:25:80:28:53:be:
                    b3:0a:d4:a8:f4:6d:18:d7:4e:e0:6d:ed:e8:6c:59:
                    aa:12:10:46:18:6f:61:5c:0f:03:bd:10:58:b2:83:
                    dd:ad:0a:2c:a2:8e:9f:ee:2d:43:ee:82:a8:a5:7b:
                    ce:dc:23:ac:bf:69:66:55:a6:ef:4e:3c:68:0c:9a:
                    db:35:2a:ad:68:6f:4a:7e:97:4c:69:e2:f4:63:98:
                    a4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5A:9E:04:4F:35:AB:03:4A:AA:20:39:7F:C3:6B:DE:5F:61:4D:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7e2579b9-7f76-34c6-bb4b-2f51a690df2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.2.0-23.237.5.255
                IPv6:
                  2001:49f0:d069::-2001:49f0:d06a:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:d4:f9:1d:99:a1:f2:63:c9:eb:06:03:bf:f8:fc:f7:f0:7d:
         15:45:b4:30:0b:4b:fa:45:33:22:ef:bc:93:c5:5f:b9:38:95:
         a6:74:39:93:d3:67:d1:2d:56:66:c6:41:af:40:69:4c:45:55:
         23:ed:da:1d:bf:ca:5b:0e:5d:5d:c4:0e:e5:8e:19:a1:69:a1:
         7d:25:8c:a6:d3:d7:fd:44:a7:7d:ac:53:d0:ff:7b:13:a4:fa:
         b2:81:54:ac:18:71:d2:85:b2:a1:7b:4c:ed:98:56:b7:19:07:
         82:0b:88:12:9f:c0:d1:33:0c:c6:19:62:fa:c6:d3:a6:73:87:
         4a:c8:87:6e:2d:37:de:58:83:8c:ec:61:4b:de:1d:16:12:f3:
         3b:d3:1d:cf:1a:5f:b1:8d:49:d0:37:cf:04:b8:4a:ba:1a:5d:
         3a:11:5f:8d:e8:56:dc:da:d8:17:23:a1:52:33:64:c5:ce:1e:
         94:da:f0:99:4b:83:fe:29:e3:ac:7a:c1:1c:2a:a7:cc:7c:16:
         1e:b1:a5:00:a7:24:40:d4:ce:61:ec:76:87:ae:20:5c:fd:b6:
         cf:01:c6:ac:e2:7a:89:ae:f0:66:dd:34:b3:dc:2a:39:af:9d:
         8d:40:95:16:60:9a:d1:52:a3:84:99:fa:77:0b:20:5f:75:eb:
         31:c8:a4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:11:13 2025 by rpki-client