Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/a90c0d2a-d5be-3719-a165-238f4345c6a1.roa
File:                     a90c0d2a-d5be-3719-a165-238f4345c6a1.roa (raw, json)
Hash identifier:          1J5MmjN/LXa71udAlsXYDs4vReqbBiYCNdCjoYEbR5s=
Subject key identifier:   74:41:42:90:E7:B3:44:82:29:57:8D:B2:7A:02:25:11:8B:75:CD:8E
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F432858492CB22CC8210CD4B6CA9C3D40
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/a90c0d2a-d5be-3719-a165-238f4345c6a1.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     30058
IP address blocks:        23.237.162.0/23 maxlen: 24
                          23.237.247.0/24 maxlen: 24
                          50.7.49.0/24 maxlen: 24
                          216.227.133.0/24 maxlen: 24
                          2001:49f0:d0d1::/48 maxlen: 48
                          2001:49f0:d122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:2c:c8:21:0c:d4:b6:ca:9c:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=b591766e-3357-48ca-b84a-af2eee93d4a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b4:00:3a:af:d0:37:a8:9b:ad:6b:7f:dd:d6:
                    9e:c3:29:5e:43:bd:53:74:07:10:58:7f:b3:73:33:
                    a4:4e:5c:db:10:a0:6a:f2:76:e4:57:08:da:26:86:
                    ea:b0:a3:ad:b7:78:88:9c:77:63:f1:17:74:2e:59:
                    77:4c:e1:24:c8:85:ac:56:d1:3d:f7:d5:3b:02:11:
                    90:e5:79:96:f0:e9:6d:e0:9b:e8:01:2e:56:d7:c8:
                    0c:05:0f:88:05:d7:a4:ca:88:d8:ce:23:53:a4:2c:
                    3f:75:ac:86:7f:44:40:e7:69:f8:22:c3:19:cb:7e:
                    b1:09:b8:bc:b9:32:85:d4:18:67:86:59:ba:52:a9:
                    4d:72:0a:0e:47:21:0f:ce:72:1c:91:3e:f7:df:53:
                    b0:16:91:52:46:7e:1a:97:4f:3b:e8:27:96:19:9b:
                    93:76:e8:fe:5d:ca:fe:c9:b6:7a:2a:36:8e:ef:27:
                    70:8d:27:32:53:5b:91:98:ac:8a:aa:19:df:df:76:
                    c1:53:b8:e4:b0:be:e1:f7:42:28:24:74:9a:a2:23:
                    a8:3e:1e:8a:c2:88:7d:a9:ac:fa:f1:68:ea:3b:61:
                    fd:83:cb:6e:40:ef:39:68:2f:77:17:e6:08:83:3b:
                    5a:6b:0a:d0:13:52:17:55:31:14:37:a6:57:ca:f8:
                    a2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:41:42:90:E7:B3:44:82:29:57:8D:B2:7A:02:25:11:8B:75:CD:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/a90c0d2a-d5be-3719-a165-238f4345c6a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.162.0/23
                  23.237.247.0/24
                  50.7.49.0/24
                  216.227.133.0/24
                IPv6:
                  2001:49f0:d0d1::/48
                  2001:49f0:d122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:b6:83:36:8e:66:51:3a:8c:b6:b4:39:4c:c2:22:36:23:78:
         4f:a0:97:08:27:b2:a0:b8:e3:c6:2b:f1:d2:81:1d:25:da:d5:
         f5:3b:40:a3:a7:c5:10:c0:dc:d4:05:17:13:96:f4:4d:c4:42:
         20:b9:d5:41:9b:c1:5e:a2:0b:2f:d4:d6:73:34:99:c5:35:88:
         cb:c6:a4:76:86:83:30:dc:50:74:14:a9:60:59:3e:69:2b:69:
         33:49:5c:5f:2f:69:83:40:da:7e:89:5b:67:ec:35:f4:2a:35:
         cd:80:f7:c8:cf:e6:72:47:41:0d:00:b2:6b:6d:db:68:1f:79:
         90:a4:a8:f4:56:1d:9e:94:ad:92:90:8d:f0:41:74:f7:8b:73:
         5f:90:00:5b:17:9b:cf:8f:22:31:b0:16:60:a0:68:f5:18:65:
         e9:16:0d:f4:ed:6a:f8:b8:1f:ca:42:d7:a6:ab:02:8e:08:88:
         58:e1:b8:99:40:cb:1f:a6:30:5b:42:42:20:0c:b7:c0:ea:fb:
         36:53:64:d7:58:5f:f7:64:51:af:93:4d:a8:52:36:ad:ca:f4:
         6a:12:33:9a:c7:0b:c5:c5:9e:fb:2f:2c:d1:66:49:26:96:04:
         b8:c6:04:aa:e8:f5:d5:b3:7d:f1:13:6d:59:45:67:63:7a:86:
         a6:f6:f5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:18 2025 by rpki-client