Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/739ab26e-0527-3580-881d-8e557b779203.roa
File:                     739ab26e-0527-3580-881d-8e557b779203.roa (raw, json)
Hash identifier:          wPMcWjv9frYtSqoILl1sY9iDKiiyzQOtYFU1kMYVNsE=
Subject key identifier:   23:DA:25:9C:16:FF:4C:E6:66:B3:13:11:D0:A2:7F:FE:6A:73:86:CF
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285849FCAA7B3FE5C2A387AABFA500
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/739ab26e-0527-3580-881d-8e557b779203.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     174
IP address blocks:        23.237.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:7b:3f:e5:c2:a3:87:aa:bf:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=82bb772e-3373-4ecf-8794-0f281a1ebd8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:85:47:68:9c:e5:f4:50:96:04:a0:5d:da:28:
                    7e:e8:13:22:92:9a:7e:f1:b8:7b:ae:d5:23:0d:a8:
                    14:ba:12:af:ca:37:9e:fd:1c:98:62:ad:9e:d3:55:
                    71:68:7f:ac:c8:44:9e:8b:db:25:6d:15:38:49:2e:
                    9a:61:5f:8a:7d:8e:d2:c6:ed:14:ca:d9:9c:b2:a8:
                    5a:3f:2f:37:1a:02:2f:43:5a:c8:1a:13:a4:f1:d7:
                    ca:1c:f7:2c:d2:ba:a2:1d:f0:02:ec:26:9f:dc:12:
                    0f:6c:89:dd:f7:22:33:fe:7e:88:22:ac:8d:1c:b1:
                    84:d4:64:b2:4b:ec:44:4e:28:f8:27:72:5a:c6:8a:
                    b4:91:a5:23:2e:72:dc:e9:1a:66:9a:e0:db:12:ed:
                    6f:d3:80:98:46:e7:86:65:7a:d6:56:86:79:04:2b:
                    df:9e:cb:31:d4:fe:2c:cf:af:1d:e8:51:1e:ae:7b:
                    0e:37:53:de:36:fe:36:b5:20:10:af:f3:d4:f3:19:
                    e3:ef:aa:b8:d6:23:35:56:fd:51:b8:6e:44:ab:e7:
                    0b:fb:76:74:5a:2d:8b:39:b4:c6:20:92:79:b9:cf:
                    13:aa:2b:9e:c4:82:a9:96:05:d9:97:59:83:e2:54:
                    2e:25:45:81:30:23:45:b2:b8:44:c9:91:fb:55:2d:
                    2d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:DA:25:9C:16:FF:4C:E6:66:B3:13:11:D0:A2:7F:FE:6A:73:86:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/739ab26e-0527-3580-881d-8e557b779203.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:3b:e8:86:8f:73:54:e6:90:3b:3d:1b:56:81:59:55:96:f8:
         83:f4:7d:4f:09:dc:72:a1:64:c8:69:6b:db:92:c7:f0:63:61:
         3f:a8:6a:f5:a3:c7:1f:7c:fe:86:8a:d4:fb:c9:93:08:d7:69:
         ba:dd:1a:5a:47:24:2a:99:45:66:02:e6:3c:ed:bb:ad:66:e7:
         58:e3:fa:49:a4:9c:97:15:be:32:cc:e9:79:fc:4e:98:a6:63:
         b1:c8:3e:06:e8:ac:8a:93:7a:13:3b:b2:ea:4e:d7:a0:37:5f:
         81:35:38:2b:48:33:4d:57:63:53:22:e3:f4:03:ce:28:c3:10:
         3b:d8:e1:70:8e:cc:42:40:b2:fd:0c:a1:47:5d:01:5f:26:d8:
         ca:86:f5:bb:47:db:7c:1c:70:16:82:fe:7c:e1:cf:0e:70:88:
         ed:d5:e9:31:0f:be:85:24:49:40:f3:e1:d3:59:cb:e1:a3:74:
         c8:95:d5:91:4a:1b:f6:84:f9:52:fc:f4:c1:59:6e:69:df:ba:
         f6:25:c4:1c:b7:f2:36:bb:6a:1e:bb:ac:c4:10:20:9c:41:d9:
         76:dd:fb:fd:f2:85:69:f5:62:53:36:f0:f9:e4:17:17:ea:ed:
         b1:65:bc:fe:1a:64:aa:f9:ba:26:d1:a9:15:2a:d1:5d:9d:cc:
         db:6f:69:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qns/5cKjh6q/pQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk
ODJiYjc3MmUtMzM3My00ZWNmLTg3OTQtMGYyODFhMWViZDhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoVHaJzl9FCWBKBd2ih+6BMikpp+8bh7rtUj
DagUuhKvyjee/RyYYq2e01VxaH+syESei9slbRU4SS6aYV+KfY7Sxu0Uytmcsqha
Py83GgIvQ1rIGhOk8dfKHPcs0rqiHfAC7Caf3BIPbInd9yIz/n6IIqyNHLGE1GSy
S+xETij4J3Jaxoq0kaUjLnLc6RpmmuDbEu1v04CYRueGZXrWVoZ5BCvfnssx1P4s
z68d6FEernsON1PeNv42tSAQr/PU8xnj76q41iM1Vv1RuG5Eq+cL+3Z0Wi2LObTG
IJJ5uc8TqiuexIKplgXZl1mD4lQuJUWBMCNFsrhEyZH7VS0tIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCPaJZwW/0zmZrMTEdCif/5qc4bPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNzM5YWIyNmUtMDUyNy0z
NTgwLTg4MWQtOGU1NTdiNzc5MjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+3GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANE76IaPc1TmkDs9G1aBWVWW+IP0fU8J3HKhZMhpa9uSx/BjYT+oavWj
xx98/oaK1PvJkwjXabrdGlpHJCqZRWYC5jztu61m51jj+kmknJcVvjLM6Xn8Tpim
Y7HIPgborIqTehM7supO16A3X4E1OCtIM01XY1Mi4/QDzijDEDvY4XCOzEJAsv0M
oUddAV8m2MqG9btH23wccBaC/nzhzw5wiO3V6TEPvoUkSUDz4dNZy+GjdMiV1ZFK
G/aE+VL89MFZbmnfuvYlxBy38ja7ah67rMQQIJxB2Xbd+/3yhWn1YlM28PnkFxfq
7bFlvP4aZKr5uibRqRUq0V2dzNtvacg=
-----END CERTIFICATE-----
Generated at Fri Jun 6 11:35:28 2025 by rpki-client