Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7f4f6a20-105d-3c39-8fac-0f2eb159e841.roa
File:                     7f4f6a20-105d-3c39-8fac-0f2eb159e841.roa (raw, json)
Hash identifier:          pKYTwK8+BFqYZOi5aLthMDwwcKFRHz5dNaEe04K++wY=
Subject key identifier:   53:D2:93:7F:26:69:82:40:AF:67:73:9D:DC:3F:53:37:09:3A:FC:06
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584944693D07A521EFFC8C17D280
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7f4f6a20-105d-3c39-8fac-0f2eb159e841.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     174
IP address blocks:        23.237.47.0/24 maxlen: 24
                          23.237.62.0/24 maxlen: 24
                          23.237.78.0/23 maxlen: 24
                          23.237.88.0/23 maxlen: 24
                          23.237.144.0/24 maxlen: 24
                          23.237.145.0/24 maxlen: 24
                          23.237.146.0/24 maxlen: 24
                          23.237.160.0/23 maxlen: 24
                          23.237.202.0/23 maxlen: 24
                          23.237.251.0/24 maxlen: 24
                          23.237.252.0/24 maxlen: 24
                          50.7.64.0/22 maxlen: 24
                          192.240.98.0/23 maxlen: 24
                          192.240.112.0/22 maxlen: 24
                          192.240.118.0/23 maxlen: 24
                          198.255.22.0/23 maxlen: 24
                          198.255.124.0/24 maxlen: 24
                          216.227.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:3d:07:a5:21:ef:fc:8c:17:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=5f832685-1586-44b7-ac0c-a1ac5665156b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:30:8e:80:0b:13:77:5c:15:a0:a0:98:43:c5:
                    ff:74:07:6e:67:59:c4:00:c6:82:ed:bf:c0:f5:4f:
                    26:af:87:1e:19:fe:7b:ff:95:01:99:23:d2:27:79:
                    70:1c:f1:53:9c:af:d1:d1:f3:c2:8f:c4:cf:79:60:
                    45:d6:8a:22:c3:8d:cf:79:64:c0:b0:a5:bf:93:78:
                    97:0c:2d:1b:9e:ac:af:f7:ac:c6:bf:b5:ed:1a:ae:
                    98:63:a8:0a:7d:57:cd:38:b5:06:34:cc:e3:18:1f:
                    0e:a5:fd:10:bb:1b:73:49:61:d6:e8:ae:33:83:fe:
                    d8:e1:ba:0f:fd:f8:e9:5b:e2:4e:7b:3e:bc:65:64:
                    73:3d:fa:de:c5:d1:2c:e8:43:cf:ef:52:07:8f:9d:
                    8a:49:23:75:e6:b4:d5:c3:b9:d7:88:f1:84:a9:9d:
                    69:12:44:4b:f6:43:d1:59:69:60:b6:37:6c:0c:6e:
                    85:f2:27:a1:f6:60:c8:ca:c0:35:a4:bb:ab:1c:86:
                    8b:45:5f:65:ca:cf:18:88:e6:21:05:3c:0b:c2:4c:
                    b7:14:29:02:7e:93:0e:b6:bb:be:86:14:27:c2:eb:
                    40:1b:a3:c3:c4:e0:71:c3:20:7f:bd:a1:8d:dd:f6:
                    23:3f:0f:c7:0d:84:89:92:c0:b4:62:f9:93:a3:c5:
                    46:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D2:93:7F:26:69:82:40:AF:67:73:9D:DC:3F:53:37:09:3A:FC:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7f4f6a20-105d-3c39-8fac-0f2eb159e841.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.47.0/24
                  23.237.62.0/24
                  23.237.78.0/23
                  23.237.88.0/23
                  23.237.144.0-23.237.146.255
                  23.237.160.0/23
                  23.237.202.0/23
                  23.237.251.0-23.237.252.255
                  50.7.64.0/22
                  192.240.98.0/23
                  192.240.112.0/22
                  192.240.118.0/23
                  198.255.22.0/23
                  198.255.124.0/24
                  216.227.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:43:f4:4a:30:6e:2c:b9:c4:39:7b:ce:3b:13:b4:9b:45:58:
         c0:a2:b0:9b:f3:c9:bc:cb:e3:84:18:7e:58:37:bb:34:07:6b:
         8d:98:a7:b0:4f:5c:08:69:45:63:d6:47:8a:41:85:a0:aa:55:
         30:b6:36:0e:e9:1b:8d:14:a1:26:b4:dd:3e:81:84:bc:31:1e:
         89:f2:87:a5:31:13:8d:d7:06:aa:eb:cb:cc:99:62:39:01:49:
         98:b2:35:16:a3:cb:7c:9f:68:26:27:42:ec:80:62:a5:01:cc:
         58:93:b6:6e:69:0c:9e:f8:42:c4:6a:a1:0c:9d:8f:56:d3:ba:
         7d:a9:36:34:3a:e0:77:64:3d:a8:53:ec:7c:2e:14:81:f3:f0:
         d5:de:6b:45:fe:01:3e:fc:24:95:f8:69:b9:1d:6a:c4:91:32:
         54:0d:80:cc:00:e3:ff:93:b9:60:eb:5a:f1:ac:6c:29:0d:f6:
         76:6d:9a:37:dc:15:f6:66:8b:c5:43:ff:97:f7:20:74:29:80:
         65:65:c2:51:8a:fe:77:8c:58:bd:86:85:8f:4e:24:a6:6d:ae:
         79:01:e1:ee:43:b0:c0:df:65:bf:a9:5e:8f:a1:ef:ac:c0:62:
         16:3f:e0:92:bf:48:fd:8f:70:89:ce:7b:ec:95:1a:c1:64:b3:
         6c:fd:56:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:13:52 2025 by rpki-client