Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e1afafb7-f3d0-359a-8f46-6fc8bc9b11e1.roa
File:                     e1afafb7-f3d0-359a-8f46-6fc8bc9b11e1.roa (raw, json)
Hash identifier:          4s/XKR+9GM4MDJWQAkl8fkIY4t9lwVnQVFj7pxsyS+E=
Subject key identifier:   2E:9D:E1:4E:66:0D:8A:9A:4B:60:54:3A:F4:5A:19:E2:8D:6B:CF:93
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584B0CDC1C4798A402F30D53B580
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e1afafb7-f3d0-359a-8f46-6fc8bc9b11e1.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     30058
IP address blocks:        23.237.53.0/24 maxlen: 24
                          23.237.58.0/24 maxlen: 24
                          23.237.76.0/23 maxlen: 24
                          23.237.86.0/23 maxlen: 24
                          23.237.192.0/23 maxlen: 24
                          23.237.230.0/24 maxlen: 24
                          23.237.240.0/24 maxlen: 24
                          50.7.68.0/22 maxlen: 24
                          192.240.96.0/23 maxlen: 24
                          198.255.2.0/24 maxlen: 24
                          198.255.20.0/23 maxlen: 24
                          198.255.76.0/23 maxlen: 24
                          198.255.78.0/23 maxlen: 24
                          198.255.80.0/23 maxlen: 24
                          198.255.82.0/23 maxlen: 24
                          198.255.125.0/24 maxlen: 24
                          2001:49f0:d025::/48 maxlen: 48
                          2001:49f0:d050::/48 maxlen: 48
                          2001:49f0:d051::/48 maxlen: 48
                          2001:49f0:d052::/48 maxlen: 48
                          2001:49f0:d053::/48 maxlen: 48
                          2001:49f0:d054::/48 maxlen: 48
                          2001:49f0:d099::/48 maxlen: 48
                          2001:49f0:d0df::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:1c:47:98:a4:02:f3:0d:53:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=8ca664b2-357d-4fa9-8e56-e60d11e2f646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:92:ac:10:e3:21:88:8b:71:a6:90:a3:b0:8c:
                    5c:10:2c:d2:b0:bc:c1:a1:6d:04:4e:ac:f1:70:e0:
                    b2:19:3d:d8:15:7f:38:1d:a0:09:f8:e4:28:bf:9f:
                    f1:de:ae:7d:33:15:e5:ea:5a:87:57:f8:49:e0:12:
                    05:23:24:c7:24:6e:dd:cd:17:e5:13:8d:d6:f5:5d:
                    6d:d6:16:6c:e7:40:4a:a9:8e:12:35:4d:1a:57:33:
                    24:cb:4d:ba:45:16:8a:47:b2:50:71:64:a4:4e:30:
                    e9:3c:fe:7b:af:8c:eb:11:8d:1d:61:2c:7e:af:55:
                    0a:1d:1c:3e:ca:38:0d:11:cf:b2:9e:da:b1:57:2d:
                    09:eb:5d:bb:09:b4:77:97:23:14:e9:c5:7e:44:9b:
                    90:23:fe:7b:4a:e5:23:46:3c:3b:81:9e:b5:cc:35:
                    8d:1b:2d:f3:7a:a6:a8:f4:2b:f4:a1:ee:bc:fe:61:
                    62:6d:7c:65:4d:54:39:5b:22:c7:01:09:d0:98:8b:
                    e7:23:ba:ea:1d:a9:b9:03:23:ce:fe:91:e7:e2:5d:
                    1e:ef:15:4f:c2:ab:c4:2b:83:9b:9f:01:fd:bb:8f:
                    f8:a3:66:f3:80:0f:23:dc:36:ea:cc:a3:d2:ee:08:
                    01:db:e2:b2:88:25:a1:3c:f1:a2:1a:f1:41:a5:77:
                    44:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:9D:E1:4E:66:0D:8A:9A:4B:60:54:3A:F4:5A:19:E2:8D:6B:CF:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e1afafb7-f3d0-359a-8f46-6fc8bc9b11e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.53.0/24
                  23.237.58.0/24
                  23.237.76.0/23
                  23.237.86.0/23
                  23.237.192.0/23
                  23.237.230.0/24
                  23.237.240.0/24
                  50.7.68.0/22
                  192.240.96.0/23
                  198.255.2.0/24
                  198.255.20.0/23
                  198.255.76.0-198.255.83.255
                  198.255.125.0/24
                IPv6:
                  2001:49f0:d025::/48
                  2001:49f0:d050::-2001:49f0:d054:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d099::/48
                  2001:49f0:d0df::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:a1:18:30:43:22:a7:3d:59:15:8a:d2:a6:0c:e5:88:41:90:
         2b:a7:95:0e:89:37:d6:93:7d:b0:89:e7:dd:57:b4:00:ff:77:
         71:a1:a9:db:b7:b0:d0:2a:74:2d:4a:65:e7:fe:6a:5c:28:95:
         49:45:70:fb:ce:4c:db:87:62:ad:b4:23:0a:f4:d4:87:4d:09:
         c4:69:b3:65:75:12:2d:3d:0d:30:89:90:36:87:31:eb:89:83:
         be:6b:f2:7c:26:a9:7f:c7:45:7b:42:80:01:f0:b4:19:0d:34:
         61:c8:1b:49:fa:4c:d9:5b:35:93:08:bf:9d:56:d4:3b:9d:e9:
         e7:cf:49:19:3a:d1:d2:76:e1:ce:aa:78:85:44:95:b6:1c:5a:
         dd:0f:96:bf:77:b7:97:14:35:55:bf:a3:10:ec:6d:b8:d2:5e:
         bd:22:4b:ec:c1:37:a2:66:9d:fd:8e:4d:d3:f7:b0:e3:e7:fd:
         dc:cc:d4:aa:6b:e1:83:80:03:05:f0:fa:33:af:67:ba:1a:e2:
         70:f3:14:f5:d7:1d:49:09:e5:05:2c:24:cd:e2:e5:4e:16:05:
         29:8d:ef:b7:ad:29:12:5c:92:5f:62:fb:e5:c2:0d:20:7e:47:
         e1:24:75:f6:46:b9:27:db:53:b5:45:b7:e9:2a:05:46:81:b5:
         00:7d:6f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 03:52:31 2025 by rpki-client