Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8e3362fe-7a1d-3626-a66b-f6755df4bbeb.roa
File:                     8e3362fe-7a1d-3626-a66b-f6755df4bbeb.roa (raw, json)
Hash identifier:          /8YRDHstlYuWWjjGz922fkBtizWxUFZ5zwRSMoafmRc=
Subject key identifier:   A5:33:46:9A:A8:67:C1:D9:16:40:28:9D:85:8D:79:62:87:A2:5F:D3
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584B13D6BA8F47243FE7E1E0F580
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8e3362fe-7a1d-3626-a66b-f6755df4bbeb.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     30058
IP address blocks:        23.237.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:ba:8f:47:24:3f:e7:e1:e0:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=910c5a83-c074-405d-ac24-6515a3f46921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e9:cf:97:52:0a:3a:a0:0e:9f:42:21:cb:eb:
                    42:73:73:f7:32:9d:dc:b1:90:b5:de:e1:57:55:d5:
                    28:15:02:b9:1b:b5:3f:f5:5a:7a:8b:08:ba:59:79:
                    8a:e0:5a:d1:1a:db:e1:5f:a5:f0:df:70:0c:eb:aa:
                    9e:65:72:a5:f2:2d:a2:68:2c:58:99:88:7f:62:1a:
                    91:06:69:2e:77:74:e8:b0:c1:3b:4b:58:aa:a9:eb:
                    6c:f8:ac:58:bc:41:83:71:90:d6:0d:13:23:c1:03:
                    0c:65:68:0e:dc:50:70:b5:98:b8:3e:b3:fa:56:0e:
                    7d:8a:e8:60:5e:7f:39:df:28:a0:2a:5b:c1:0e:6c:
                    7c:ec:70:38:0f:b3:40:6e:bc:6d:7a:6b:e7:82:1d:
                    78:19:4e:28:d9:6a:f0:8a:fd:de:91:27:8b:00:c9:
                    17:dc:0c:cd:5f:32:e4:06:26:55:3d:dd:b1:56:04:
                    b4:cc:a5:b3:18:2a:df:af:24:23:ce:95:08:fa:23:
                    d1:8d:f4:97:60:a8:9e:ee:64:90:6f:b4:4c:69:89:
                    7c:a1:c5:60:a8:5c:9a:16:a6:98:82:5b:61:fa:47:
                    45:51:d2:25:04:95:51:c5:cb:86:91:7c:60:ca:d3:
                    18:13:ee:d9:33:53:62:f1:25:e9:1d:ee:5b:ac:82:
                    cf:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:33:46:9A:A8:67:C1:D9:16:40:28:9D:85:8D:79:62:87:A2:5F:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8e3362fe-7a1d-3626-a66b-f6755df4bbeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:cf:dd:56:52:fa:f6:e3:68:ab:20:57:30:bf:49:53:31:b6:
         72:94:20:9d:d6:ed:fb:67:a6:ed:10:c8:2c:34:46:2f:ae:c5:
         1e:00:02:99:58:0d:81:4f:39:42:41:d8:56:ee:55:df:e0:82:
         cd:d1:db:0f:c9:89:a6:b2:40:b4:e4:ba:bf:cc:ed:9b:bf:dc:
         5a:44:2a:1f:61:1f:8d:0f:6a:bf:64:7f:f1:aa:11:3f:bf:3d:
         59:49:3d:8d:e6:93:29:c6:73:a4:b3:ea:64:46:aa:a5:63:c4:
         3d:98:a3:96:5a:02:39:92:a1:1b:da:2e:b0:6f:0e:70:d0:87:
         a1:83:56:93:7f:2b:4b:d7:da:d6:df:3e:b9:0e:93:33:66:0e:
         10:d5:a1:e4:c3:72:a9:f9:ae:d5:65:d8:60:75:5d:2e:77:29:
         35:f0:f3:0c:96:ec:55:c6:bf:2d:2f:5d:f1:0c:01:71:79:57:
         77:c1:67:7f:99:46:1e:a5:99:97:d2:fb:7d:86:30:90:f8:b4:
         cf:52:ce:43:c9:2c:a8:e3:09:36:08:74:97:95:41:d2:04:44:
         24:33:69:28:8f:5b:e6:15:d7:34:ab:b5:30:55:1e:c9:18:bd:
         2b:37:e1:95:58:b2:f5:23:77:a6:f3:70:9e:95:1c:83:07:38:
         d8:7f:3d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 03:52:30 2025 by rpki-client