Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/34c364f0-8747-3749-8143-576393db47b5.roa
File:                     34c364f0-8747-3749-8143-576393db47b5.roa (raw, json)
Hash identifier:          JSgRJAwItPQlMArvJ93Z+d316uk/rmrpfAH7dBpeiXw=
Subject key identifier:   66:9D:EF:BB:41:58:69:72:73:06:8E:61:F7:43:A3:BE:C2:40:A5:FD
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584B13D6C71E76A8BF94FFC492A0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/34c364f0-8747-3749-8143-576393db47b5.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     7922
IP address blocks:        23.237.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:c7:1e:76:a8:bf:94:ff:c4:92:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=33b3ebab-8b9c-4add-b85a-d380db59c12a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:68:01:38:a7:49:e8:b0:58:d7:3e:c0:e1:1f:
                    fc:70:04:ed:d6:70:8d:88:46:ee:65:b3:20:a1:7e:
                    b3:0d:38:c0:1d:12:13:1d:73:fe:ac:00:2c:36:86:
                    15:85:7f:2c:83:38:1d:94:42:97:2d:e2:9c:b1:8c:
                    85:df:74:62:77:c2:64:08:84:7e:0d:58:61:e0:99:
                    23:6d:9a:8e:be:39:5b:e2:39:24:df:f9:67:73:dc:
                    d4:73:e9:54:79:86:b9:ac:55:af:d7:4f:1e:38:c4:
                    6a:f8:7a:ef:08:8d:2d:72:8c:f8:a6:4b:64:73:87:
                    ca:73:d1:95:65:60:8e:f0:b9:f5:f5:4f:08:98:10:
                    60:9e:be:18:78:44:4a:85:72:c5:dc:fb:bb:df:17:
                    c4:07:f1:e8:8d:82:32:47:5f:62:66:a9:ab:7e:6a:
                    16:b1:f0:8d:28:46:d2:b2:d6:44:f1:8f:24:df:74:
                    c1:c3:10:fe:6e:5a:26:f8:44:31:90:f9:b3:51:65:
                    09:1e:c2:44:6a:06:10:57:24:d9:dc:f9:69:c9:96:
                    cd:fc:0e:ff:74:96:33:c7:25:05:5f:61:29:2a:78:
                    43:66:29:2a:95:a2:1a:0f:df:28:06:a1:ad:28:f2:
                    64:fb:e8:89:29:0b:bb:72:87:c6:22:e8:d3:83:bd:
                    9b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9D:EF:BB:41:58:69:72:73:06:8E:61:F7:43:A3:BE:C2:40:A5:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/34c364f0-8747-3749-8143-576393db47b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:1c:ae:5b:3b:b9:72:13:10:91:55:84:1c:e2:ef:e7:7f:60:
         9b:a3:37:70:95:39:f9:a6:c9:59:d5:ec:10:f6:47:dd:d0:f8:
         20:8c:e8:65:1c:86:e6:24:4e:c8:e3:55:68:65:1a:42:fe:f5:
         c7:a7:33:e7:24:a1:01:9d:a0:7c:63:13:8f:2d:85:33:1f:73:
         88:ce:8e:0a:c7:f6:e6:be:fe:bf:90:e6:f0:43:e8:8a:37:c8:
         b6:7f:6a:e2:d8:cd:c9:d4:4d:c1:9f:26:d1:2d:59:50:40:85:
         62:9f:ee:1f:3f:81:ec:96:8a:8b:ce:80:7e:57:0d:1f:30:50:
         e3:2c:31:1f:af:d9:cc:03:c9:93:1c:c3:fa:db:9e:b8:ef:56:
         d0:41:38:48:77:e3:a1:ba:b9:54:f1:74:77:97:86:6c:f2:5e:
         15:dd:f6:e2:dd:40:75:69:16:f3:ab:39:03:6a:58:5f:01:9f:
         75:62:80:fc:c7:45:7c:e6:35:d7:7a:ea:3f:d5:c5:56:78:8d:
         73:87:b9:e1:be:2f:f9:10:3a:7c:cb:af:4b:01:d2:e0:f1:20:
         0d:72:a5:d8:e9:70:f2:5a:1e:97:ba:ba:57:70:6c:6c:a9:aa:
         aa:fe:bf:0e:ef:b3:ab:cb:fd:12:7f:09:49:8f:9b:a6:58:30:
         a4:d7:f3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 03:54:44 2025 by rpki-client