Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/067c4cf4-ab7c-3506-85c9-c4b92a0c6f1c.roa
File:                     067c4cf4-ab7c-3506-85c9-c4b92a0c6f1c.roa (raw, json)
Hash identifier:          FKqLqdcxD3WFCuZ5RMwuXGeUQBzLE1ZyWgxXepw5j14=
Subject key identifier:   12:92:59:7D:48:4C:EF:37:D8:4B:AF:1F:53:23:F3:F0:08:4B:24:B2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A7A4B547BF314F36FE6984700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/067c4cf4-ab7c-3506-85c9-c4b92a0c6f1c.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     20940
IP address blocks:        23.212.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:54:7b:f3:14:f3:6f:e6:98:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=c60a9b7b-4f28-4841-9737-62f8d7c3754f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:85:a3:23:96:0b:19:ad:be:4c:c2:66:96:40:
                    59:01:4a:44:81:51:07:b2:e5:28:7a:c0:b9:5d:de:
                    76:80:93:bf:6a:16:9d:89:fc:6a:86:09:4c:30:67:
                    e7:61:b0:46:85:59:73:5b:5b:47:1a:33:d8:d8:58:
                    84:f7:4e:29:a0:5c:e9:85:d2:e9:a4:a7:52:b4:72:
                    5d:97:16:84:b4:d7:75:76:e9:f8:88:d2:95:51:20:
                    f2:a2:ef:c1:ac:57:2e:35:1f:ac:9c:19:34:1a:43:
                    50:c6:2f:e5:a5:81:23:c1:52:73:7e:f9:da:fc:79:
                    e0:61:29:6f:61:dc:8f:a3:23:fd:7c:cb:9b:9a:8b:
                    62:b5:27:32:d7:c2:26:59:83:05:80:47:a7:0b:29:
                    fe:f3:c1:cd:52:19:25:f8:f9:98:51:b0:e2:c1:94:
                    f5:7b:29:cb:0e:3e:e6:64:ea:51:76:37:25:af:d7:
                    ab:be:16:1f:fd:eb:10:49:cf:c4:50:94:76:be:00:
                    e6:89:10:47:29:e6:6f:1e:1a:e8:c6:e6:0b:1e:f9:
                    f3:63:1b:6f:2d:bb:51:52:6f:ff:20:09:93:fb:53:
                    28:9f:e8:75:8a:ad:7b:eb:a5:46:09:49:1e:31:2b:
                    c0:84:03:4d:0a:bf:a6:f0:f4:88:e5:cb:da:a2:13:
                    ed:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:92:59:7D:48:4C:EF:37:D8:4B:AF:1F:53:23:F3:F0:08:4B:24:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/067c4cf4-ab7c-3506-85c9-c4b92a0c6f1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.212.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:6e:98:b8:a3:1d:c5:74:03:6a:17:8e:06:47:d9:87:32:de:
         c3:c8:ae:01:32:9c:c4:61:1d:a5:21:33:0d:57:a0:a9:78:24:
         55:d9:c8:74:ab:83:08:7e:cb:0b:ca:52:14:4b:18:13:1e:81:
         e6:05:dc:24:d4:12:b1:a2:84:ca:ce:4e:03:51:82:37:df:d9:
         3b:13:45:51:50:d6:70:19:38:d1:8f:5a:41:6c:2d:32:ab:19:
         76:0c:48:ee:bc:18:81:a7:8b:6c:70:30:f0:8a:a1:ea:92:7b:
         38:83:39:99:61:81:d4:b2:5f:c6:35:69:e3:84:e9:f2:02:a5:
         94:07:1c:c0:70:da:94:ed:60:8d:1f:67:d2:46:86:e9:67:5b:
         ef:e2:3b:98:c8:7d:55:1e:fe:33:5a:c1:93:47:39:de:99:d1:
         c6:cb:c2:c2:1a:0b:a9:ee:4c:eb:8b:a3:40:f2:7b:b6:68:9d:
         ef:21:41:3a:25:dd:c4:df:5f:0b:db:54:28:66:53:07:2c:dd:
         cc:14:f4:47:1d:07:15:a2:ef:60:6c:14:47:db:d7:00:26:c7:
         f5:e7:62:f7:a2:56:12:32:d2:34:18:f3:ba:ba:18:5b:08:e1:
         45:76:d4:2c:d8:10:3a:9f:18:cf:9c:c1:f2:6f:5b:99:a7:79:
         f1:24:79:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:23:07 2025 by rpki-client