Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7e2579b9-7f76-34c6-bb4b-2f51a690df2f.roa
File:                     7e2579b9-7f76-34c6-bb4b-2f51a690df2f.roa (raw, json)
Hash identifier:          NxzdARJjNQfgzjUO6EmLhltf8DIbF2RhbIqgODOkqBc=
Subject key identifier:   2E:6C:5D:DE:C0:68:2F:19:B8:0F:06:F6:C5:55:52:FE:39:70:6D:AA
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285849F44A5B117059EFAEEE1C1180
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7e2579b9-7f76-34c6-bb4b-2f51a690df2f.roa
Signing time:             Sat 24 May 2025 01:00:49 +0000
ROA not before:           Sat 24 May 2025 01:00:49 +0000
ROA not after:            Fri 22 Aug 2025 01:00:49 +0000
asID:                     174
IP address blocks:        23.237.2.0/23 maxlen: 23
                          23.237.4.0/23 maxlen: 23
                          2001:49f0:d069::/48 maxlen: 48
                          2001:49f0:d06a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f4:4a:5b:11:70:59:ef:ae:ee:1c:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: May 24 01:00:49 2025 GMT
            Not After : Aug 22 01:00:49 2025 GMT
        Subject: CN=83e2e2a3-aad6-49f5-adac-6bc7ff80f5e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cd:a8:ff:a8:4a:cd:da:60:c7:50:39:42:0b:
                    76:af:c3:c8:00:3f:29:c0:df:2c:ae:c8:a5:2d:c1:
                    a2:10:6e:05:07:d6:05:1e:74:16:b3:62:83:ee:7e:
                    90:59:17:c9:80:12:f5:d4:24:96:cb:d7:0a:3d:50:
                    38:3a:5f:7f:e2:d0:14:4c:8e:7b:32:6e:6c:d6:75:
                    25:dc:6e:6f:0e:0d:c8:ac:af:25:95:e7:2b:d0:29:
                    90:94:0a:b1:ae:82:2d:df:4f:da:4b:5c:26:20:84:
                    40:62:21:d7:3d:a3:e1:41:3e:42:37:ed:3d:ac:71:
                    3b:d6:d1:65:7e:e5:ff:9f:f2:c2:b3:18:f3:db:b6:
                    2a:33:22:38:fa:2a:88:ed:4d:f1:7d:bc:e3:39:5d:
                    f3:cd:d6:d4:8e:7d:cd:4a:fc:16:b3:0c:1f:cc:99:
                    f9:9c:df:74:36:47:23:b9:ed:b3:e8:ef:c6:d3:1e:
                    21:4d:00:39:90:08:98:27:b0:93:47:d3:c1:bb:b4:
                    dd:0f:ab:2d:99:6e:6d:c3:b9:14:67:22:01:c7:ae:
                    23:b5:08:53:6e:44:ad:e1:4d:34:70:ce:8f:61:17:
                    0f:1d:2c:78:95:13:bf:fb:70:9e:8f:87:ed:75:eb:
                    bc:1f:a5:25:6b:54:52:0d:e6:a9:d2:26:b2:68:a5:
                    83:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6C:5D:DE:C0:68:2F:19:B8:0F:06:F6:C5:55:52:FE:39:70:6D:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7e2579b9-7f76-34c6-bb4b-2f51a690df2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.2.0-23.237.5.255
                IPv6:
                  2001:49f0:d069::-2001:49f0:d06a:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ae:1a:6e:54:6e:6b:72:67:e8:fc:26:a2:e3:3e:81:a5:ee:
         b4:97:1e:f9:7a:fb:17:d3:1e:47:05:a7:a9:93:95:77:97:a2:
         25:35:f4:03:3c:a9:23:2a:8e:7b:cb:52:09:db:dd:af:9c:15:
         3b:1a:9a:ec:61:76:5a:bb:6c:5c:f6:d2:1d:78:3d:da:7d:34:
         36:0f:83:3e:cd:c3:66:96:6d:d8:c0:ed:51:10:72:bc:4a:50:
         6b:f8:c7:b4:1c:4a:fd:ec:ec:6e:a8:36:17:89:70:eb:c9:cf:
         d9:e4:14:a4:34:f1:d9:13:0d:69:f6:dd:cd:d8:e1:40:29:50:
         b5:b9:3d:42:28:68:6a:f9:98:de:56:86:5e:c2:31:91:64:c5:
         a7:68:cf:04:97:dd:01:a1:7d:4e:74:7d:f9:78:03:43:3b:f9:
         32:d5:58:2f:58:b9:29:96:cc:17:da:11:cf:0f:4d:21:59:48:
         23:73:59:c3:57:21:1b:fc:f2:f7:0c:13:83:0e:c4:65:fa:cb:
         94:bb:35:14:57:c3:8c:63:87:d3:4a:d0:d2:c4:3b:20:34:b9:
         e0:7a:c7:45:5b:7d:ee:37:2f:f5:50:74:bc:37:d6:bd:7e:71:
         5f:eb:4c:db:94:cc:74:f4:c4:3a:d1:a4:7a:6b:88:24:7f:f0:
         fa:3a:d0:2f
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEn0SlsRcFnvru4cEYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk
ODNlMmUyYTMtYWFkNi00OWY1LWFkYWMtNmJjN2ZmODBmNWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM2o/6hKzdpgx1A5Qgt2r8PIAD8pwN8srsil
LcGiEG4FB9YFHnQWs2KD7n6QWRfJgBL11CSWy9cKPVA4Ol9/4tAUTI57Mm5s1nUl
3G5vDg3IrK8llecr0CmQlAqxroIt30/aS1wmIIRAYiHXPaPhQT5CN+09rHE71tFl
fuX/n/LCsxjz27YqMyI4+iqI7U3xfbzjOV3zzdbUjn3NSvwWswwfzJn5nN90Nkcj
ue2z6O/G0x4hTQA5kAiYJ7CTR9PBu7TdD6stmW5tw7kUZyIBx64jtQhTbkSt4U00
cM6PYRcPHSx4lRO/+3Cej4ftdeu8H6Ula1RSDeap0iayaKWD6QIDAQABo4IDeTCC
A3UwHQYDVR0OBBYEFC5sXd7AaC8ZuA8G9sVVUv45cG2qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvN2UyNTc5YjktN2Y3Ni0z
NGM2LWJiNGItMmY1MWE2OTBkZjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAUBAIAATAOMAwDBAEX7QID
BAEX7QQwGgQCAAIwFDASAwcAIAFJ8NBpAwcAIAFJ8NBqMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABGuGm5U
bmtyZ+j8JqLjPoGl7rSXHvl6+xfTHkcFp6mTlXeXoiU19AM8qSMqjnvLUgnb3a+c
FTsamuxhdlq7bFz20h14Pdp9NDYPgz7Nw2aWbdjA7VEQcrxKUGv4x7QcSv3s7G6o
NheJcOvJz9nkFKQ08dkTDWn23c3Y4UApULW5PUIoaGr5mN5Whl7CMZFkxadozwSX
3QGhfU50ffl4A0M7+TLVWC9YuSmWzBfaEc8PTSFZSCNzWcNXIRv88vcME4MOxGX6
y5S7NRRXw4xjh9NK0NLEOyA0ueB6x0Vbfe43L/VQdLw31r1+cV/rTNuUzHT0xDrR
pHpriCR/8Po60C8=
-----END CERTIFICATE-----
Generated at Fri Jun 6 10:59:56 2025 by rpki-client