Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0865c91a-fc99-3a13-9cf3-7354bf092ae1.roa
File:                     0865c91a-fc99-3a13-9cf3-7354bf092ae1.roa (raw, json)
Hash identifier:          AyCZZ7kb8nnXm1MGIwlUQHbb6vBEl0V6NC9kpFSkTm0=
Subject key identifier:   18:D7:59:BA:72:CF:BC:E9:A9:93:B2:39:4E:9D:67:C1:FF:CA:8D:41
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A7A4B54D66FD6C462905DE8D0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0865c91a-fc99-3a13-9cf3-7354bf092ae1.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     20940
IP address blocks:        23.213.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:54:d6:6f:d6:c4:62:90:5d:e8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=7ec94b07-3349-453a-98a7-d0b7a66f1236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:31:ca:3f:b8:ce:27:48:8a:f8:2e:90:54:3e:
                    32:ec:ed:2d:62:cc:51:33:59:1a:be:93:b1:f2:f9:
                    f7:e6:98:e2:d7:90:78:ed:a0:ab:03:88:c8:a7:44:
                    b7:c0:51:0b:fe:fe:a5:aa:f4:6f:6b:25:2c:49:2e:
                    f0:90:f4:16:81:30:9c:18:e9:29:24:c2:63:3d:46:
                    12:82:4b:d1:57:a8:9f:95:27:7e:ac:3b:94:d5:76:
                    c4:e3:63:32:7c:8b:25:c0:7c:f5:2e:61:a0:05:87:
                    44:01:03:4b:a4:c5:a1:d0:1e:a5:50:1a:59:e6:92:
                    be:b5:03:df:f8:20:91:95:28:f8:04:a4:8e:9c:18:
                    c9:23:d2:e0:c1:dd:28:ec:ff:d6:29:84:8a:95:82:
                    ff:fa:e7:ef:bf:44:b2:65:4c:b6:16:ee:a3:23:b1:
                    ae:29:c3:07:9d:dc:b5:51:da:df:e2:03:ea:93:90:
                    62:33:71:de:b2:ea:87:7c:1d:ef:f9:fe:0f:9a:5b:
                    8d:61:99:af:30:bb:96:db:11:24:44:39:b1:5b:2d:
                    a8:00:bf:96:10:45:35:8b:57:03:51:07:b1:ca:15:
                    30:d3:93:5a:e5:30:f2:37:6a:11:52:3e:df:fc:03:
                    a3:e5:85:64:64:ca:bb:37:bb:c7:a5:17:d1:fc:a4:
                    97:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D7:59:BA:72:CF:BC:E9:A9:93:B2:39:4E:9D:67:C1:FF:CA:8D:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0865c91a-fc99-3a13-9cf3-7354bf092ae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.213.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:f3:f8:34:99:c8:10:4c:40:61:18:5a:ad:f2:d8:c9:fa:a5:
         3d:93:10:c8:4b:9c:4a:0c:bf:74:40:d1:9d:33:f8:38:e1:bb:
         33:8a:78:04:c4:b1:41:d7:f9:ca:9f:b3:76:67:16:2d:23:6b:
         bd:80:a2:7c:dc:23:21:aa:17:68:e5:4b:d3:b6:d3:37:10:3b:
         f1:f7:d4:4a:43:2e:19:10:41:cb:cd:70:23:5b:bd:02:c7:fb:
         d3:08:8f:0f:4d:c6:01:75:5e:22:6c:b5:98:26:d9:82:e5:93:
         06:14:b7:fc:af:c8:0f:10:c1:1a:7f:45:26:62:d0:08:16:3c:
         dc:d2:53:0c:5c:db:3d:09:14:88:61:9b:fb:1c:ab:58:7d:6c:
         e1:61:67:22:0f:3a:e6:27:85:7c:55:6f:99:a5:bc:c9:45:04:
         95:38:db:a1:1a:3c:51:eb:58:21:a3:f5:5c:f3:d8:b5:d1:c1:
         17:a2:01:c3:2a:43:4c:92:b8:02:08:1a:7d:2e:32:93:b6:1f:
         04:36:ad:0f:10:eb:ff:17:a6:e4:5d:6c:60:1d:31:ba:11:57:
         45:30:1d:2c:b0:08:5b:72:ee:ed:a5:9e:29:2d:18:a5:b2:c4:
         9d:fc:3a:e1:54:ea:56:5e:33:2a:3e:db:ac:01:75:9e:6e:91:
         67:68:e4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:59:40 2025 by rpki-client