Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7b58fee1-e3ee-3d52-b877-8a2eafa33e51.roa
File:                     7b58fee1-e3ee-3d52-b877-8a2eafa33e51.roa (raw, json)
Hash identifier:          uXA/e7cXCzv0gB9M2/6joDjBNae7/PgBw+CGvfS53k4=
Subject key identifier:   3A:60:01:61:6E:54:B7:86:7E:2F:BC:73:F7:E1:F9:B5:42:25:B3:0C
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584AF7EBDDD5308BE06BAF9D3650
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7b58fee1-e3ee-3d52-b877-8a2eafa33e51.roa
Signing time:             Mon 25 Aug 2025 01:00:33 +0000
ROA not before:           Mon 25 Aug 2025 01:00:33 +0000
ROA not after:            Sun 23 Nov 2025 02:00:33 +0000
asID:                     30058
IP address blocks:        23.237.126.0/23 maxlen: 23
                          23.237.130.0/23 maxlen: 23
                          23.237.136.0/23 maxlen: 23
                          23.237.138.0/24 maxlen: 24
                          23.237.191.0/24 maxlen: 24
                          23.237.218.0/24 maxlen: 24
                          23.237.244.0/24 maxlen: 24
                          23.237.250.0/24 maxlen: 24
                          50.7.0.0/24 maxlen: 24
                          50.7.8.0/24 maxlen: 24
                          50.7.9.0/24 maxlen: 24
                          50.7.10.0/24 maxlen: 24
                          50.7.11.0/24 maxlen: 24
                          50.7.12.0/24 maxlen: 24
                          50.7.13.0/24 maxlen: 24
                          50.7.15.0/24 maxlen: 24
                          50.7.16.0/24 maxlen: 24
                          50.7.18.0/24 maxlen: 24
                          50.7.19.0/24 maxlen: 24
                          50.7.20.0/24 maxlen: 24
                          50.7.21.0/24 maxlen: 24
                          66.90.124.0/24 maxlen: 24
                          192.240.122.0/24 maxlen: 24
                          198.255.16.0/24 maxlen: 24
                          216.227.131.0/24 maxlen: 24
                          216.227.142.0/23 maxlen: 23
                          216.227.144.0/23 maxlen: 23
                          216.227.146.0/23 maxlen: 23
                          216.227.148.0/23 maxlen: 23
                          216.227.150.0/23 maxlen: 23
                          216.227.152.0/23 maxlen: 23
                          216.227.154.0/23 maxlen: 23
                          216.227.156.0/23 maxlen: 23
                          216.227.160.0/23 maxlen: 23
                          216.227.162.0/24 maxlen: 24
                          216.227.163.0/24 maxlen: 24
                          216.227.164.0/24 maxlen: 24
                          216.227.165.0/24 maxlen: 24
                          216.227.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f7:eb:dd:d5:30:8b:e0:6b:af:9d:36:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Aug 25 01:00:33 2025 GMT
            Not After : Nov 23 02:00:33 2025 GMT
        Subject: CN=a5655ae1-dcc3-4e26-8b96-033277bd8b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bc:03:ff:60:ae:8a:64:35:b5:4d:de:b3:31:
                    8e:27:b8:18:27:ac:2e:bd:b9:10:da:17:c4:bd:4e:
                    4b:3c:2e:8e:33:d3:bf:b2:8e:e1:18:69:3e:51:b7:
                    c1:e0:3f:99:17:5c:24:db:16:d2:15:9f:00:fd:57:
                    09:a3:24:c8:a7:c2:d8:bf:11:01:2f:90:c3:f3:73:
                    40:83:43:ac:cc:21:43:5f:d4:4a:42:44:2a:96:40:
                    4d:d2:48:87:3a:d9:fa:77:3d:ea:4a:da:d7:c6:51:
                    de:55:43:81:1a:2d:01:ac:c8:c4:e1:ab:64:1f:e3:
                    1a:b3:cc:32:19:07:ab:10:57:b5:ed:c5:7c:4a:15:
                    0a:b8:66:3c:1c:d5:5e:ab:a5:a7:da:87:d1:54:23:
                    e9:5a:db:bb:d3:08:56:e6:3f:22:7b:18:d9:63:37:
                    4c:f8:fa:29:e2:9b:1a:1e:16:4c:6d:5b:32:66:23:
                    8d:16:c7:49:d7:3a:07:77:74:4b:75:b8:6e:3f:86:
                    5a:06:08:74:fe:e3:cf:4b:a1:f7:47:5a:bd:b8:4d:
                    b0:23:d2:2c:11:3e:53:90:ea:21:ce:f8:6b:0f:48:
                    b4:15:b6:a3:16:9c:8e:28:65:fe:72:59:ce:2d:54:
                    35:cd:66:24:51:92:9e:89:12:e5:85:c0:c9:a4:22:
                    55:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:60:01:61:6E:54:B7:86:7E:2F:BC:73:F7:E1:F9:B5:42:25:B3:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7b58fee1-e3ee-3d52-b877-8a2eafa33e51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.126.0/23
                  23.237.130.0/23
                  23.237.136.0-23.237.138.255
                  23.237.191.0/24
                  23.237.218.0/24
                  23.237.244.0/24
                  23.237.250.0/24
                  50.7.0.0/24
                  50.7.8.0-50.7.13.255
                  50.7.15.0-50.7.16.255
                  50.7.18.0-50.7.21.255
                  66.90.124.0/24
                  192.240.122.0/24
                  198.255.16.0/24
                  216.227.131.0/24
                  216.227.142.0-216.227.157.255
                  216.227.160.0-216.227.165.255
                  216.227.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:a7:4e:b4:da:84:61:e8:80:f9:76:c2:0a:79:95:40:7b:fc:
         bf:8d:49:89:74:ef:0f:f2:e5:1a:17:da:e3:4a:29:6f:24:6a:
         f7:b4:21:7e:23:af:e1:96:89:f9:da:db:28:91:6c:ea:56:4f:
         bf:22:49:fa:28:43:26:c5:1f:f7:0d:95:e6:31:74:fc:1a:36:
         31:c1:06:08:37:1c:b1:c6:cd:1c:23:57:60:ae:f6:46:43:4a:
         2b:7f:d2:f3:f1:b7:40:54:fc:50:93:2f:c7:e6:a7:6e:fb:d4:
         4f:7d:a9:65:e2:21:62:73:29:ee:5b:27:61:6e:cc:8e:fe:34:
         14:02:61:52:5b:09:d6:4f:e6:b6:55:e8:5d:2c:de:62:89:4a:
         75:79:1b:c9:96:4c:45:6c:7c:e5:61:80:e0:02:54:8e:74:1b:
         38:96:32:dd:54:5c:0d:df:01:21:b6:1e:49:44:b3:8b:02:4d:
         e2:3f:63:ce:89:04:d4:48:69:ce:65:70:30:eb:92:20:f2:1a:
         2a:83:ee:fc:36:d5:27:09:ec:33:5f:64:4d:96:11:98:76:ee:
         9d:6d:f1:19:da:e0:e8:f1:3f:5c:93:ac:50:57:f9:9e:6b:a2:
         16:21:84:89:25:81:8d:e6:73:d1:73:cd:53:4c:5e:4a:bf:e3:
         71:80:47:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 03:52:32 2025 by rpki-client