Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e1afafb7-f3d0-359a-8f46-6fc8bc9b11e1.roa
File:                     e1afafb7-f3d0-359a-8f46-6fc8bc9b11e1.roa (raw, json)
Hash identifier:          JxVjOYN+TanuY2dgqNjcQyBRnd7Ys6DGXdWffvoAiCM=
Subject key identifier:   4A:B2:29:7E:76:D1:23:A1:43:0B:45:31:6E:1A:EE:47:AD:06:5D:8F
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F432858494CC94F8F22721936E3F8ABA0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e1afafb7-f3d0-359a-8f46-6fc8bc9b11e1.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     30058
IP address blocks:        23.237.53.0/24 maxlen: 24
                          23.237.58.0/24 maxlen: 24
                          23.237.76.0/23 maxlen: 24
                          23.237.86.0/23 maxlen: 24
                          23.237.192.0/23 maxlen: 24
                          23.237.230.0/24 maxlen: 24
                          23.237.240.0/24 maxlen: 24
                          50.7.68.0/22 maxlen: 24
                          192.240.96.0/23 maxlen: 24
                          198.255.2.0/24 maxlen: 24
                          198.255.20.0/23 maxlen: 24
                          198.255.76.0/23 maxlen: 24
                          198.255.78.0/23 maxlen: 24
                          198.255.80.0/23 maxlen: 24
                          198.255.82.0/23 maxlen: 24
                          198.255.125.0/24 maxlen: 24
                          2001:49f0:d025::/48 maxlen: 48
                          2001:49f0:d050::/48 maxlen: 48
                          2001:49f0:d051::/48 maxlen: 48
                          2001:49f0:d052::/48 maxlen: 48
                          2001:49f0:d053::/48 maxlen: 48
                          2001:49f0:d054::/48 maxlen: 48
                          2001:49f0:d099::/48 maxlen: 48
                          2001:49f0:d0df::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:4f:8f:22:72:19:36:e3:f8:ab:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=9c43072a-b26c-4718-a5eb-52d232276153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:08:69:e2:2a:4d:d2:2c:b4:32:fe:aa:e0:54:
                    17:29:da:a4:49:8d:d5:8e:3d:20:77:71:4b:fb:a4:
                    61:04:ed:78:fc:12:f6:8a:3a:29:f4:c7:69:e0:c3:
                    7b:44:e6:47:20:fd:52:5f:ce:b0:3b:fd:4b:89:2a:
                    38:21:e8:31:26:9d:74:dd:aa:cb:3f:80:9c:c1:66:
                    8b:7d:3e:be:39:8c:a1:f0:4d:97:94:12:20:02:80:
                    34:31:15:73:66:10:44:70:a0:f9:a6:73:b1:bb:50:
                    f4:73:75:bc:48:1b:36:fa:0b:f4:cd:ab:29:5d:10:
                    3c:68:83:89:c1:14:32:d7:1c:d2:6a:97:5a:88:99:
                    02:ae:8a:bb:0d:95:76:35:ff:e5:b3:38:62:fa:20:
                    b3:c6:71:85:6a:97:9c:a1:75:93:8e:71:e8:3c:ce:
                    96:db:29:a3:d9:2b:7c:35:bc:77:9f:fb:cd:5c:26:
                    e9:86:7f:be:6b:92:be:47:bb:b1:23:5f:70:fb:b4:
                    b8:3e:50:5a:14:b0:49:a2:e1:8d:91:ca:78:7c:40:
                    df:dd:17:2d:4b:ad:1a:45:82:09:04:2e:de:b9:6f:
                    1f:dd:d0:5b:9e:76:25:d9:87:14:74:01:0c:08:3e:
                    68:f7:9b:73:a5:bb:0a:36:73:8b:ba:94:48:20:e2:
                    1b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B2:29:7E:76:D1:23:A1:43:0B:45:31:6E:1A:EE:47:AD:06:5D:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e1afafb7-f3d0-359a-8f46-6fc8bc9b11e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.53.0/24
                  23.237.58.0/24
                  23.237.76.0/23
                  23.237.86.0/23
                  23.237.192.0/23
                  23.237.230.0/24
                  23.237.240.0/24
                  50.7.68.0/22
                  192.240.96.0/23
                  198.255.2.0/24
                  198.255.20.0/23
                  198.255.76.0-198.255.83.255
                  198.255.125.0/24
                IPv6:
                  2001:49f0:d025::/48
                  2001:49f0:d050::-2001:49f0:d054:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d099::/48
                  2001:49f0:d0df::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:1b:ff:77:9c:7a:09:7e:b2:5d:6c:8a:4b:22:a4:36:43:17:
         83:44:b0:4d:97:25:a9:bd:69:0b:34:27:9f:c0:fe:2e:8b:1c:
         3f:30:dc:9b:27:76:d5:32:1b:81:95:d7:e1:a6:df:1e:61:c0:
         0b:f5:c3:81:35:55:94:05:e1:00:95:79:76:b9:e1:5a:a2:70:
         de:79:8f:8e:ad:76:50:4f:7d:59:a7:a6:7b:0e:7f:a1:54:42:
         f3:64:02:de:2c:f5:36:c2:f8:b0:a5:33:80:7b:c1:96:3f:4c:
         66:eb:40:ec:1a:32:79:46:b3:6b:30:a6:83:0a:8b:fe:f4:c2:
         e9:2f:de:be:07:f1:63:f6:74:60:da:d6:0a:b3:93:c4:ba:00:
         59:b2:b1:3e:53:38:07:43:7c:0a:3f:eb:3e:9a:45:aa:17:f8:
         07:56:94:82:de:d2:c2:8c:05:c9:1e:8c:26:15:46:3f:b9:aa:
         f7:b4:bc:ae:dc:34:b8:48:53:28:24:b9:4b:c0:e9:79:8f:e5:
         f5:5b:95:5a:32:9a:74:04:7d:b3:b1:b7:a6:1b:20:a6:53:bc:
         c7:96:b0:b3:3a:81:c0:37:64:9f:02:c0:c2:65:4b:59:22:44:
         37:65:98:05:d3:44:4a:39:92:cc:c7:1b:b3:ee:2e:e2:dc:d2:
         ed:0b:32:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:48 2025 by rpki-client