Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/353441b7-94a6-3393-8c6f-5d9b94d013ec.roa
File:                     353441b7-94a6-3393-8c6f-5d9b94d013ec.roa (raw, json)
Hash identifier:          VyIXJ4i+ABM24bOvJ5n585b0gd3/P3C3LVt5gfIaSGY=
Subject key identifier:   75:D2:4C:86:7D:77:DF:99:E1:12:88:BD:59:80:4E:B8:2E:37:EA:72
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584BB2F7D365601920DEAA18BFC0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/353441b7-94a6-3393-8c6f-5d9b94d013ec.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     174
IP address blocks:        23.237.148.0/23 maxlen: 23
                          23.237.150.0/23 maxlen: 23
                          23.237.152.0/23 maxlen: 23
                          23.237.154.0/23 maxlen: 23
                          23.237.156.0/23 maxlen: 23
                          2001:49f0:d0c4::/48 maxlen: 48
                          2001:49f0:d0c5::/48 maxlen: 48
                          2001:49f0:d0c6::/48 maxlen: 48
                          2001:49f0:d0c7::/48 maxlen: 48
                          2001:49f0:d0c8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:d3:65:60:19:20:de:aa:18:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=58679204-33d2-4b32-b426-bc360e22332e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:06:6e:1f:ef:5c:78:6c:75:95:4b:cd:66:23:
                    43:c1:6a:90:9b:03:28:c9:16:25:de:63:96:7f:c1:
                    5e:e3:60:9d:24:20:95:d9:35:8d:ce:1e:d6:d6:1b:
                    e6:3f:9a:10:8d:19:18:9c:a9:3d:4c:05:7d:c6:47:
                    ca:64:38:b9:13:36:91:a7:cc:c7:42:02:af:f7:ff:
                    71:d5:dc:59:b0:4c:ee:16:27:a1:b8:52:71:4e:7e:
                    e6:b2:65:23:2a:26:27:03:f3:7b:95:74:7c:9e:54:
                    90:b1:dc:0a:33:ae:53:a8:e8:0c:65:ab:2e:5d:1b:
                    79:2d:e0:f9:b0:aa:49:9f:5a:3b:9e:ec:b9:f6:1c:
                    26:af:cf:bf:fc:91:0e:19:42:84:8b:4d:7f:2a:49:
                    7d:e4:d2:4d:66:b5:a7:f0:f1:32:64:13:b3:09:34:
                    74:6b:ec:e8:25:cd:13:88:90:6b:75:2b:0c:a0:4c:
                    60:84:67:85:ab:b7:b4:44:b1:e1:a6:af:0d:22:3c:
                    05:89:61:99:28:01:97:32:8d:49:77:e8:89:d2:eb:
                    6c:aa:68:07:f5:c1:d6:c7:04:94:3c:c0:e6:43:e3:
                    18:d8:a0:a2:b7:7c:a5:eb:c8:6e:aa:10:29:39:85:
                    91:6e:50:44:60:e3:09:2c:e6:34:77:80:0e:67:7f:
                    6d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D2:4C:86:7D:77:DF:99:E1:12:88:BD:59:80:4E:B8:2E:37:EA:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/353441b7-94a6-3393-8c6f-5d9b94d013ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.148.0-23.237.157.255
                IPv6:
                  2001:49f0:d0c4::-2001:49f0:d0c8:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:e1:e4:02:2f:c9:8a:99:16:9f:0d:23:de:16:82:01:bb:33:
         20:1e:79:84:5f:39:b3:5d:f8:13:72:e5:cf:fe:58:52:54:e7:
         a1:c3:42:bf:15:a9:ab:20:c0:aa:fd:42:41:28:63:d0:60:11:
         9a:ca:c8:95:7d:a2:6a:a8:83:4b:a7:ff:1d:34:59:cf:f9:d7:
         98:86:cf:bb:9a:02:58:4b:76:c1:01:02:02:00:e6:7c:a8:1a:
         c7:c4:14:1e:4b:79:8f:f1:74:12:b5:25:48:f6:0e:af:57:60:
         26:c2:4d:af:68:ba:9c:8e:73:94:14:2c:84:fc:79:8c:52:37:
         cc:c4:5f:02:e6:61:c0:e4:67:05:7f:d6:7a:44:5a:99:6b:c6:
         d4:61:b2:70:42:a1:fb:e6:31:91:2c:a5:a8:87:f2:25:02:fa:
         93:37:d7:d5:7b:59:12:13:bf:ac:04:00:af:f9:13:8e:1f:c0:
         ba:0c:c4:a0:91:11:e8:1b:25:4d:0d:4d:09:a6:76:26:bc:81:
         20:82:b2:cd:64:b5:99:e4:8d:ba:29:22:74:f0:5b:79:a0:97:
         89:cd:17:d6:6f:cb:01:0d:eb:99:87:53:a0:8c:86:1f:6c:de:
         b2:13:d8:6b:6e:59:77:ef:26:7d:85:b5:16:1f:96:9d:6a:b9:
         f2:51:46:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 17 04:24:21 2025 by rpki-client