Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/70af0ead-85cc-31a4-98e8-0be232ccacd6.roa
File:                     70af0ead-85cc-31a4-98e8-0be232ccacd6.roa (raw, json)
Hash identifier:          h2TZR3EI6af8qHHowdeuoZpDGbDPCHXJz5rEBNG5nLg=
Subject key identifier:   79:EB:46:4C:26:D9:40:AF:7A:1E:BA:2B:48:16:91:DF:21:A2:52:CF
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285849F9DFDE5D7FB4F74F3CF06AC0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/70af0ead-85cc-31a4-98e8-0be232ccacd6.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     1239
IP address blocks:        23.237.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:de:5d:7f:b4:f7:4f:3c:f0:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=d0790d4c-7f93-465c-8f85-ed925d5ceb53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:54:9b:6e:23:ae:f4:5d:8f:a3:6a:83:88:eb:
                    44:dc:88:4b:0c:33:c8:12:1b:60:c2:8e:57:cc:aa:
                    eb:1d:a3:5c:96:97:75:00:14:5e:98:cb:6a:e4:a2:
                    39:9a:51:cd:f2:f2:22:7d:6f:49:4a:8f:c5:43:8b:
                    cf:0c:57:4e:f5:03:a4:fb:b9:f0:23:6a:37:2f:1a:
                    43:f7:96:8b:44:49:49:85:c0:99:fa:68:ed:b5:c9:
                    ab:56:c2:3f:cf:f9:a1:02:22:03:4d:c4:a2:41:85:
                    2c:44:b5:f3:e0:9b:d4:4f:11:36:80:1b:36:da:dd:
                    d6:d9:5f:fe:9c:08:20:e7:ee:0e:30:5d:74:ea:49:
                    b8:3b:64:0e:1c:1f:bf:7b:27:23:6a:98:c0:a3:a2:
                    91:bc:7e:37:71:bb:f7:1c:8f:46:d8:e9:16:09:e4:
                    15:11:bb:e4:c2:1d:d9:d3:89:e0:6a:f6:1e:2c:8b:
                    f8:cd:6c:74:c6:b4:14:2d:e7:d4:83:94:a8:f8:1d:
                    08:44:8b:e8:8c:90:77:80:73:61:ac:c5:c8:2a:05:
                    68:4d:27:43:0d:fc:c3:ba:c6:10:75:9c:6c:43:73:
                    db:3b:68:f3:79:88:43:eb:cd:89:93:11:c7:f1:5a:
                    00:27:78:6b:a4:92:04:51:a8:d6:b0:63:22:99:fb:
                    90:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EB:46:4C:26:D9:40:AF:7A:1E:BA:2B:48:16:91:DF:21:A2:52:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/70af0ead-85cc-31a4-98e8-0be232ccacd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:04:27:93:27:b4:40:84:61:ff:e4:dc:be:3d:cd:b0:96:4a:
         bb:41:74:89:f4:a7:5a:91:bd:ff:ce:c5:c4:7e:7f:52:a2:ac:
         1d:9e:de:e1:7d:39:ab:09:c3:2a:cc:4c:6c:9a:03:ae:e4:2d:
         cd:27:24:14:14:c2:f9:b4:68:d6:38:c8:42:02:81:ea:92:aa:
         1c:9f:ab:87:8f:36:20:15:6e:b2:98:82:96:7d:d8:b5:1c:38:
         3f:00:7c:96:30:ef:43:0e:33:d1:7e:79:fb:e9:72:f5:b8:44:
         1e:75:ce:e7:a9:df:ea:3e:e3:67:ae:73:ea:ab:59:d6:27:91:
         29:1c:79:cf:9b:cf:a9:92:75:e1:a8:86:13:76:95:c4:89:ed:
         d5:e1:2f:9d:29:a0:27:30:d0:94:f1:8c:76:a3:c1:0a:6d:fd:
         5a:2a:d4:de:cd:69:46:46:4b:5c:c3:e5:45:8f:06:8b:df:6c:
         28:a4:d4:61:58:bd:21:e8:2a:90:57:33:8e:82:a0:a1:86:7d:
         5e:25:7a:a3:d6:e6:54:5f:c3:52:2f:bc:14:67:4f:87:bb:80:
         34:2e:01:16:f0:ad:47:32:83:79:71:c1:99:c6:71:9a:c4:5f:
         ad:48:7a:73:9d:85:0a:96:ab:7b:a3:61:2f:5c:8f:eb:ad:9d:
         71:a9:50:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 03:46:53 2025 by rpki-client