Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/2cd7744b-370f-371d-9b01-0334b9c10fe9.roa
File:                     2cd7744b-370f-371d-9b01-0334b9c10fe9.roa (raw, json)
Hash identifier:          ZJXC5jI7q5t1R95zi9uBnhp8blDzabIMrtiQMR29EzU=
Subject key identifier:   B0:37:99:9A:0C:B2:25:AB:97:B9:E2:60:76:09:B7:35:C7:7D:FF:EC
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285849151158115B94BD74DBE9E080
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/2cd7744b-370f-371d-9b01-0334b9c10fe9.roa
Signing time:             Wed 05 Mar 2025 02:00:40 +0000
ROA not before:           Wed 05 Mar 2025 02:00:40 +0000
ROA not after:            Tue 03 Jun 2025 01:00:40 +0000
asID:                     1239
IP address blocks:        23.237.2.0/23 maxlen: 23
                          23.237.4.0/23 maxlen: 23
                          2001:49f0:d069::/48 maxlen: 48
                          2001:49f0:d06a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:15:11:58:11:5b:94:bd:74:db:e9:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Mar  5 02:00:40 2025 GMT
            Not After : Jun  3 01:00:40 2025 GMT
        Subject: CN=914d95d7-9a46-4504-87ad-60b0937710e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4a:83:4b:2c:26:11:c2:2b:93:81:5a:fb:5b:
                    fd:c7:98:d9:9b:29:e3:af:69:e8:06:ce:28:ff:f3:
                    da:74:6d:93:fb:b4:cf:7d:ff:aa:35:ad:12:ea:af:
                    fb:82:47:da:52:09:4f:a1:2e:84:8b:a8:ee:62:6f:
                    36:20:9c:be:80:8e:8f:48:65:2d:e6:e3:f6:79:38:
                    2c:36:2a:18:7a:4d:15:e6:7a:d6:54:e2:d0:85:19:
                    9a:33:03:b8:a2:2d:49:f1:ba:90:c7:16:67:62:a0:
                    e6:c3:0b:88:0f:48:b8:eb:70:5b:7c:eb:ac:a2:7f:
                    30:2c:fe:a4:3b:69:69:35:66:48:e6:b0:e7:06:72:
                    a1:ee:46:b2:0f:7c:97:be:4c:ff:17:8a:2d:62:5a:
                    61:e5:e3:c5:b8:c4:4f:89:0c:87:0c:97:82:c3:b8:
                    21:96:de:f8:c0:52:4c:99:fa:f0:b3:12:a8:88:e1:
                    f0:8f:95:9e:58:e9:c3:ac:c1:d1:9d:f6:2c:59:90:
                    cc:07:f9:65:78:d6:c2:c3:4d:d6:bb:99:71:55:e2:
                    a4:a1:f0:4a:98:58:a0:7d:35:a5:ef:e2:47:f2:af:
                    82:20:ed:d9:f5:d9:43:e3:19:53:ad:0f:d1:dc:a9:
                    c1:ca:6d:28:c6:5f:74:23:11:7b:46:c6:7f:b0:d9:
                    95:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:37:99:9A:0C:B2:25:AB:97:B9:E2:60:76:09:B7:35:C7:7D:FF:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/2cd7744b-370f-371d-9b01-0334b9c10fe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.2.0-23.237.5.255
                IPv6:
                  2001:49f0:d069::-2001:49f0:d06a:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:ce:60:c8:b9:21:9e:ba:aa:fe:5f:87:07:49:c1:c8:41:79:
         97:67:46:70:d6:1f:d6:4f:9a:ce:77:f6:bf:0d:1b:64:f6:7f:
         e0:41:3c:a8:80:73:be:cb:ea:71:12:4f:3c:d0:fb:3e:28:88:
         73:d1:b9:10:14:d7:f9:b9:7f:b1:32:86:11:22:53:15:18:6a:
         84:7d:54:b4:0d:48:b8:2b:34:05:9d:8f:c8:86:e3:5e:45:b6:
         0f:da:95:bb:0d:73:11:3c:48:26:9d:3b:20:37:74:77:ca:64:
         18:8c:76:ed:18:4b:b4:10:ac:be:85:c0:4e:76:17:ae:fd:90:
         a8:95:8b:26:6c:6d:3d:a9:5e:8a:6f:a3:22:4a:11:dc:7b:cd:
         2d:f5:75:0d:1a:3b:8c:3e:8e:13:d2:ba:49:d4:68:ad:dd:56:
         d9:32:5a:6c:f7:ad:41:d6:20:21:f1:17:75:37:a2:cf:5f:55:
         59:52:12:c4:4d:8c:a5:2d:0a:18:9f:f9:61:88:e2:8f:51:15:
         10:b4:67:98:0c:8b:7c:d3:c8:4b:11:2d:1d:12:a1:30:87:be:
         cb:f5:c7:15:d3:ca:13:62:76:ef:03:fa:65:47:4a:4f:53:8b:
         a0:02:1d:9f:8c:c4:03:27:e6:6b:1b:bb:a2:9c:0f:e5:3c:de:
         18:7c:6f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:01:01 2025 by rpki-client