Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/353441b7-94a6-3393-8c6f-5d9b94d013ec.roa
File:                     353441b7-94a6-3393-8c6f-5d9b94d013ec.roa (raw, json)
Hash identifier:          VKMiE1rK0HKDS7WVTV/5MbkEE0IT7CZmL73PkYIiUww=
Subject key identifier:   C2:5B:7F:01:B8:90:DA:A9:A4:6F:C1:8D:C5:73:FD:32:0D:32:FD:53
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285849F17FD4DC66D5130EB42298C0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/353441b7-94a6-3393-8c6f-5d9b94d013ec.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     174
IP address blocks:        23.237.148.0/23 maxlen: 23
                          23.237.150.0/23 maxlen: 23
                          23.237.152.0/23 maxlen: 23
                          23.237.154.0/23 maxlen: 23
                          23.237.156.0/23 maxlen: 23
                          2001:49f0:d0c4::/48 maxlen: 48
                          2001:49f0:d0c5::/48 maxlen: 48
                          2001:49f0:d0c6::/48 maxlen: 48
                          2001:49f0:d0c7::/48 maxlen: 48
                          2001:49f0:d0c8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:d4:dc:66:d5:13:0e:b4:22:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=e277c973-0b7f-4d73-9aa5-0eabce75ca74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d5:43:54:cc:10:d9:69:0c:51:1e:b2:29:e8:
                    37:76:a4:eb:18:49:d8:14:ce:d2:96:fc:36:c4:39:
                    f2:26:2b:03:9b:26:4b:91:eb:e0:53:fa:7d:6a:59:
                    c5:c3:52:70:51:c2:cc:c2:8a:5c:f9:36:b6:9d:5c:
                    04:6c:9e:66:6d:d5:2c:60:7a:fa:66:cc:66:39:2d:
                    06:ca:e8:ed:aa:33:8c:a9:71:a4:26:45:14:60:7b:
                    05:25:ee:48:e4:80:a0:21:96:98:b6:84:b3:23:02:
                    07:8e:8b:60:fa:25:19:e4:ad:f2:22:0f:02:84:30:
                    57:db:ca:47:90:78:16:95:e0:70:16:4f:bb:ed:8c:
                    c7:c1:b4:91:b3:e1:a5:57:d5:2f:9d:69:76:56:ed:
                    82:2b:3f:35:5f:49:44:45:63:5f:6f:fb:cb:74:70:
                    ca:37:de:c6:1f:c6:01:fd:ab:1c:91:9b:d4:60:e4:
                    00:6a:88:80:a7:6b:b9:28:a1:7a:c1:82:b0:d5:03:
                    38:00:89:2e:b1:03:7c:4b:83:db:cf:67:73:85:e4:
                    6d:ce:1c:eb:3c:4c:8e:af:da:ef:44:2b:12:97:1f:
                    7e:e6:a1:52:3e:7a:8d:60:61:38:c7:53:a6:95:81:
                    94:46:c4:1f:36:a1:35:f8:44:0e:14:b3:f6:56:62:
                    3a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5B:7F:01:B8:90:DA:A9:A4:6F:C1:8D:C5:73:FD:32:0D:32:FD:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/353441b7-94a6-3393-8c6f-5d9b94d013ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.148.0-23.237.157.255
                IPv6:
                  2001:49f0:d0c4::-2001:49f0:d0c8:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:34:06:99:fc:26:91:41:26:8f:b7:03:00:c1:35:d6:2c:1f:
         67:de:a0:21:19:e5:e9:ef:9c:3b:d9:df:74:18:ca:0d:a2:0b:
         5b:cb:da:b0:7b:9b:85:37:78:5b:6d:9b:dd:8d:f0:40:35:ca:
         69:2e:a9:88:bc:71:d3:45:29:f7:a9:47:e7:f3:5b:a5:e8:5b:
         5a:8f:c7:72:44:d4:cb:84:c1:83:d3:02:1e:20:d7:d9:07:d0:
         0e:90:8f:61:7a:6f:08:c8:c7:dc:10:95:aa:87:22:27:39:f7:
         ab:65:b7:c2:53:d2:e9:45:c0:73:b6:d3:16:ad:63:d3:d7:3f:
         64:8d:1a:64:af:88:a9:a2:61:72:c7:d3:81:6b:c5:9b:24:e5:
         ec:9f:54:8a:ce:c9:2f:ac:0e:6f:27:89:3e:18:72:36:28:99:
         74:e2:09:87:6b:ad:cb:12:d4:e4:ec:2e:b5:80:0f:d6:d6:41:
         a7:f1:3c:01:77:88:5c:29:20:29:88:56:2d:00:c0:ae:92:c9:
         a3:b0:17:b1:79:fb:12:c3:b4:85:88:fa:b6:15:12:be:8b:4c:
         da:39:a3:0c:48:22:66:f8:3a:0c:6f:d8:b2:b8:c8:1e:4f:08:
         71:95:93:6b:4d:c3:88:d6:27:bb:1f:6e:01:92:86:1c:36:74:
         aa:e9:f2:a2
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEnxf9TcZtUTDrQimMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
ZTI3N2M5NzMtMGI3Zi00ZDczLTlhYTUtMGVhYmNlNzVjYTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstVDVMwQ2WkMUR6yKeg3dqTrGEnYFM7Slvw2
xDnyJisDmyZLkevgU/p9alnFw1JwUcLMwopc+Ta2nVwEbJ5mbdUsYHr6ZsxmOS0G
yujtqjOMqXGkJkUUYHsFJe5I5ICgIZaYtoSzIwIHjotg+iUZ5K3yIg8ChDBX28pH
kHgWleBwFk+77YzHwbSRs+GlV9UvnWl2Vu2CKz81X0lERWNfb/vLdHDKN97GH8YB
/asckZvUYOQAaoiAp2u5KKF6wYKw1QM4AIkusQN8S4Pbz2dzheRtzhzrPEyOr9rv
RCsSlx9+5qFSPnqNYGE4x1OmlYGURsQfNqE1+EQOFLP2VmI6ZQIDAQABo4IDeTCC
A3UwHQYDVR0OBBYEFMJbfwG4kNqppG/BjcVz/TINMv1TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMzUzNDQxYjctOTRhNi0z
MzkzLThjNmYtNWQ5Yjk0ZDAxM2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAUBAIAATAOMAwDBAIX7ZQD
BAEX7ZwwGgQCAAIwFDASAwcCIAFJ8NDEAwcAIAFJ8NDIMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIs0Bpn8
JpFBJo+3AwDBNdYsH2feoCEZ5envnDvZ33QYyg2iC1vL2rB7m4U3eFttm92N8EA1
ymkuqYi8cdNFKfepR+fzW6XoW1qPx3JE1MuEwYPTAh4g19kH0A6Qj2F6bwjIx9wQ
laqHIic596tlt8JT0ulFwHO20xatY9PXP2SNGmSviKmiYXLH04FrxZsk5eyfVIrO
yS+sDm8niT4YcjYomXTiCYdrrcsS1OTsLrWAD9bWQafxPAF3iFwpICmIVi0AwK6S
yaOwF7F5+xLDtIWI+rYVEr6LTNo5owxIImb4Ogxv2LK4yB5PCHGVk2tNw4jWJ7sf
bgGShhw2dKrp8qI=
-----END CERTIFICATE-----
Generated at Fri Jun 6 11:19:08 2025 by rpki-client