Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8bae2104-002c-3732-af7e-f26123198ae6.roa
File:                     8bae2104-002c-3732-af7e-f26123198ae6.roa (raw, json)
Hash identifier:          V8b+WnE7GgGX/i/gSs3DwpNXMhm3KjoduEgd8JaY94M=
Subject key identifier:   A3:EA:44:02:1D:5F:BF:51:6C:25:C5:F3:EC:68:F9:28:71:B8:85:46
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584A0C0579945A9E067A8877BA00
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8bae2104-002c-3732-af7e-f26123198ae6.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     174
IP address blocks:        23.237.74.0/23 maxlen: 24
                          23.237.82.0/23 maxlen: 24
                          23.237.158.0/23 maxlen: 24
                          23.237.208.0/24 maxlen: 24
                          50.7.72.0/22 maxlen: 24
                          192.240.100.0/23 maxlen: 24
                          198.255.121.0/24 maxlen: 24
                          2001:49f0:d002::/48 maxlen: 48
                          2001:49f0:d048::/48 maxlen: 48
                          2001:49f0:d090::/48 maxlen: 48
                          2001:49f0:d0c9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:79:94:5a:9e:06:7a:88:77:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=5802bd86-ce09-43ad-aab8-414cde6c1898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9c:a5:b1:18:b9:19:aa:df:1f:ce:e1:c5:24:
                    68:41:51:4a:19:b7:d8:d4:f1:b8:98:81:8e:38:ba:
                    c8:8a:a0:c0:00:ef:f9:72:b5:bf:21:54:29:c0:bd:
                    13:56:eb:66:74:89:f3:72:60:69:4f:96:e7:ea:a2:
                    60:ac:c1:98:4d:11:bb:a8:37:16:b6:34:d9:a9:b8:
                    12:e5:a5:a8:f1:b8:95:de:81:c5:a8:f8:cd:2b:ca:
                    be:27:8c:c5:25:b3:4a:10:9c:e1:d5:af:0a:80:34:
                    ec:b8:25:9b:47:9f:5f:d7:1e:63:6f:53:5a:94:94:
                    91:70:01:71:5c:da:60:c9:a8:95:6a:ee:c5:d2:e1:
                    64:f9:7c:0b:28:74:bd:ec:ec:ce:d2:80:4e:7b:ae:
                    65:8a:03:ed:14:41:63:87:4d:fc:4e:08:9a:d2:f8:
                    1b:ef:c2:7c:6c:84:b5:10:af:7e:bd:d8:db:40:1e:
                    6c:3f:d9:38:e2:6d:81:0d:27:a8:f2:93:f1:a6:ed:
                    7b:6a:a7:90:80:7f:41:58:8f:5c:78:a0:bc:10:8f:
                    14:ba:38:01:fc:ce:73:2b:0b:8f:21:06:17:5f:58:
                    9f:e2:4b:4a:e8:24:6d:58:67:83:e2:58:52:45:cb:
                    1f:af:8c:8b:09:ec:ae:43:2c:4d:03:11:6b:0f:29:
                    f0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EA:44:02:1D:5F:BF:51:6C:25:C5:F3:EC:68:F9:28:71:B8:85:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8bae2104-002c-3732-af7e-f26123198ae6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.74.0/23
                  23.237.82.0/23
                  23.237.158.0/23
                  23.237.208.0/24
                  50.7.72.0/22
                  192.240.100.0/23
                  198.255.121.0/24
                IPv6:
                  2001:49f0:d002::/48
                  2001:49f0:d048::/48
                  2001:49f0:d090::/48
                  2001:49f0:d0c9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:c7:dc:6b:28:18:5f:34:c3:7f:ea:41:cb:10:53:27:84:06:
         05:f4:e7:10:3e:01:21:15:66:c7:9c:ec:73:e2:ee:90:24:24:
         e8:c9:1f:93:10:f6:a3:dd:1a:ed:d7:03:d9:00:7e:59:85:5a:
         5d:03:c6:13:e2:d1:51:95:27:db:91:94:88:fc:a9:19:1e:f5:
         f8:44:69:7e:52:9d:4c:dc:df:a7:dd:81:6d:82:e5:57:7b:8c:
         72:4b:97:a6:95:4c:79:8f:a9:b5:c5:5f:7b:92:5e:44:6f:0a:
         f0:ad:23:94:dc:da:cf:ac:a2:3c:d1:27:7d:b6:18:ec:f6:60:
         1f:40:ba:9d:91:7c:ca:aa:15:74:ff:9d:ff:d4:d9:f3:f0:2d:
         00:c6:aa:a3:dc:13:c8:96:a4:06:0e:77:9c:95:cb:5f:28:c3:
         15:d7:63:fc:ea:5f:a2:d4:dd:32:b5:3b:44:a2:57:af:17:f5:
         55:35:1b:35:c5:a4:d6:77:b4:23:04:67:b1:1a:51:b3:20:6c:
         e4:fc:9c:4b:f0:cf:ab:5b:9b:a1:85:e3:eb:c6:30:3f:14:f4:
         62:cd:c2:62:96:88:4a:a3:b1:18:e6:b0:6e:70:0c:69:a6:10:
         c8:22:ce:e7:ba:5f:93:db:82:98:08:94:85:78:1e:0e:b4:24:
         54:bd:00:76
-----BEGIN CERTIFICATE-----
MIIGkzCCBXugAwIBAgIUAQ0Mn0MoWEoMBXmUWp4Geoh3ugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
NTgwMmJkODYtY2UwOS00M2FkLWFhYjgtNDE0Y2RlNmMxODk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpylsRi5GarfH87hxSRoQVFKGbfY1PG4mIGO
OLrIiqDAAO/5crW/IVQpwL0TVutmdInzcmBpT5bn6qJgrMGYTRG7qDcWtjTZqbgS
5aWo8biV3oHFqPjNK8q+J4zFJbNKEJzh1a8KgDTsuCWbR59f1x5jb1NalJSRcAFx
XNpgyaiVau7F0uFk+XwLKHS97OzO0oBOe65ligPtFEFjh038Tgia0vgb78J8bIS1
EK9+vdjbQB5sP9k44m2BDSeo8pPxpu17aqeQgH9BWI9ceKC8EI8UujgB/M5zKwuP
IQYXX1if4ktK6CRtWGeD4lhSRcsfr4yLCeyuQyxNAxFrDynw3QIDAQABo4IDpTCC
A6EwHQYDVR0OBBYEFKPqRAIdX79RbCXF8+xo+ShxuIVGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvOGJhZTIxMDQtMDAyYy0z
NzMyLWFmN2UtZjI2MTIzMTk4YWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMG8GCCsGAQUFBwEHAQH/BGAwXjAwBAIAATAqAwQBF+1KAwQB
F+1SAwQBF+2eAwQAF+3QAwQCMgdIAwQBwPBkAwQAxv95MCoEAgACMCQDBwAgAUnw
0AIDBwAgAUnw0EgDBwAgAUnw0JADBwAgAUnw0MkwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGcfcaygYXzTD
f+pByxBTJ4QGBfTnED4BIRVmx5zsc+LukCQk6MkfkxD2o90a7dcD2QB+WYVaXQPG
E+LRUZUn25GUiPypGR71+ERpflKdTNzfp92BbYLlV3uMckuXppVMeY+ptcVfe5Je
RG8K8K0jlNzaz6yiPNEnfbYY7PZgH0C6nZF8yqoVdP+d/9TZ8/AtAMaqo9wTyJak
Bg53nJXLXyjDFddj/OpfotTdMrU7RKJXrxf1VTUbNcWk1ne0IwRnsRpRsyBs5Pyc
S/DPq1uboYXj68YwPxT0Ys3CYpaISqOxGOawbnAMaaYQyCLO57pfk9uCmAiUhXge
DrQkVL0Adg==
-----END CERTIFICATE-----
Generated at Fri Jun 6 11:15:16 2025 by rpki-client