Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e9ebfc46-c772-3ee4-8b38-5c4507dbcab7.roa
File:                     e9ebfc46-c772-3ee4-8b38-5c4507dbcab7.roa (raw, json)
Hash identifier:          Qp1wzK7sUv6jYgo1NGRao+PbT2yjvlRjHevhle8Oik4=
Subject key identifier:   D8:F9:3E:A0:69:5F:18:BE:0B:BB:44:B6:CA:D3:DA:43:53:56:65:E6
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285849F9DFDE510B6F15540E5EF680
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e9ebfc46-c772-3ee4-8b38-5c4507dbcab7.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     174
IP address blocks:        23.237.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:de:51:0b:6f:15:54:0e:5e:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=2dcaa4ca-a12e-4790-bac9-6573a7b19ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8e:03:af:03:ed:4c:ed:74:89:bb:8c:69:b3:
                    90:df:cd:2b:f6:a3:72:2b:2b:d1:c6:e4:2a:64:8f:
                    8f:8e:cd:e0:56:5e:07:80:17:92:32:af:8f:df:a2:
                    b1:a9:61:32:40:16:e7:c4:1a:b6:21:7e:f8:96:17:
                    02:c5:5b:8b:c7:24:c9:90:67:4c:5a:f3:ad:5e:67:
                    a0:dd:97:84:1a:76:21:a9:cb:c5:96:e3:84:e9:21:
                    8e:ea:c5:83:e5:58:90:b8:db:af:4a:f1:73:b1:52:
                    9b:0d:f1:dd:67:30:00:ba:c5:2f:ef:37:d2:ab:e1:
                    0d:25:bb:7a:5e:8e:ed:54:74:3e:bd:88:3f:96:d4:
                    c5:67:dd:f4:f9:a5:0c:fd:3b:5d:58:66:b8:9d:63:
                    41:84:8b:31:fc:18:04:09:a8:9f:13:f2:0c:d8:6d:
                    91:1c:9a:77:36:c7:10:45:06:01:06:b5:56:20:d9:
                    47:ed:de:8a:87:9c:c0:8e:23:6d:d8:1d:9a:46:9c:
                    b3:70:51:9a:96:d5:0c:17:3d:73:79:03:a6:f8:6f:
                    5e:87:56:46:4c:ab:7a:12:cd:c4:7f:90:28:d3:4b:
                    92:6c:b7:0b:b1:7b:b2:69:94:e4:02:bf:0c:e7:40:
                    3a:12:6d:9a:2b:01:45:98:e5:10:fa:61:5c:8f:4a:
                    0a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F9:3E:A0:69:5F:18:BE:0B:BB:44:B6:CA:D3:DA:43:53:56:65:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e9ebfc46-c772-3ee4-8b38-5c4507dbcab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:10:40:d1:a2:5e:01:04:26:e1:90:68:b1:e7:00:fa:bf:4e:
         52:d1:a1:42:bd:a0:a7:39:9d:a6:13:8f:89:75:90:b7:4f:a5:
         11:50:5c:ac:b0:7a:0d:b5:c0:ad:71:15:28:95:14:72:ee:72:
         3c:42:fc:e5:e8:f0:7c:62:d4:ba:dd:46:fb:8d:f8:7f:9c:71:
         79:8b:26:1c:ec:44:40:ef:80:d5:4a:03:72:99:d4:37:05:97:
         3c:d2:fa:fb:f7:a4:1b:fe:28:20:6f:ea:28:e5:36:e7:5b:a9:
         d7:2e:90:5b:eb:b8:ab:64:82:2c:10:b0:0b:61:12:4b:72:33:
         19:f0:20:aa:4f:b5:eb:f0:12:6f:d6:9a:91:73:bf:5c:b5:ce:
         6c:57:fe:a0:7f:ba:d8:a0:b7:bc:63:f2:99:55:e2:aa:62:9e:
         00:4d:c0:f1:88:87:a6:c3:3e:c0:88:cc:0b:95:72:50:e2:5e:
         c5:a0:5f:7c:aa:cc:d6:c9:96:e2:90:f3:cf:eb:83:ad:65:8c:
         83:3f:c5:9c:e1:b7:47:dc:2e:ce:e9:07:d1:c1:05:3f:c4:0e:
         82:c6:59:43:32:f4:2c:bf:5b:d6:5f:43:5f:ac:8a:0c:77:8d:
         d1:a6:81:71:a9:28:76:1e:d9:e6:6b:0a:ee:ab:39:64:e1:b5:
         ba:54:f4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:15:16 2025 by rpki-client