Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10ad28ec-d063-32f7-bf37-d418a4b86883.roa
File:                     10ad28ec-d063-32f7-bf37-d418a4b86883.roa (raw, json)
Hash identifier:          daAwDB4DKnrJEg0Mq09IwnFj6TBEKvitJSIIsyy5Vcs=
Subject key identifier:   44:06:35:39:6A:C5:A8:24:39:EB:3B:6C:B9:20:1F:7C:E8:1C:4E:E0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A7A4B519BBEF69352C645BA80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10ad28ec-d063-32f7-bf37-d418a4b86883.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     20940
IP address blocks:        23.211.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:51:9b:be:f6:93:52:c6:45:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=de3717c3-80e2-4f3a-8475-ded46dc1c1e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3a:47:97:65:27:28:60:21:14:6e:e2:cd:ac:
                    02:0d:83:80:63:ba:a3:c1:eb:25:67:c3:f5:8e:ac:
                    bb:f3:f3:1b:71:26:e5:12:b8:c0:95:dc:7a:1a:a5:
                    ab:20:2e:e0:93:ed:1c:64:fb:dc:c4:1e:f3:34:ac:
                    ee:eb:b8:da:0d:8f:c9:69:16:1e:d9:4c:57:bb:9a:
                    7d:1e:14:21:d5:9f:c4:05:fe:d3:d1:e7:90:23:71:
                    b6:87:f8:d9:df:31:02:ef:9f:f5:de:99:c2:ce:05:
                    3d:95:6d:12:bf:86:cb:40:55:a7:ab:72:e7:c0:ca:
                    3f:7b:3a:0c:f0:d1:9b:6d:8d:8a:51:1f:e0:f4:7c:
                    2b:7d:3a:52:c2:bd:a0:df:96:f1:76:8c:66:d9:0a:
                    a8:76:02:88:1f:3d:31:3c:18:75:2f:de:46:bf:34:
                    48:3c:20:0b:a6:a8:85:a9:44:3b:84:85:94:f1:eb:
                    f1:6f:56:13:08:a0:e0:20:74:6f:dc:a3:2c:2c:da:
                    b2:e7:6a:81:0d:8b:cb:97:2b:3c:23:f3:82:7f:9a:
                    96:b7:20:6a:fb:0a:49:e9:a8:a8:e4:be:bb:47:d6:
                    30:2d:94:0d:0f:ab:ce:00:a2:04:b4:21:6f:5b:16:
                    7c:1b:68:03:84:c3:f2:41:ec:bf:fe:80:2b:a4:04:
                    d3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:06:35:39:6A:C5:A8:24:39:EB:3B:6C:B9:20:1F:7C:E8:1C:4E:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10ad28ec-d063-32f7-bf37-d418a4b86883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.211.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:ce:a5:f8:ef:db:39:bd:f3:cf:d3:7d:14:6a:91:a3:7f:99:
         f6:f4:1a:70:d7:a7:0e:cb:17:26:0a:b8:f2:d1:3f:f1:07:2b:
         1a:f4:e7:1e:fa:e8:ea:37:02:73:27:a6:6f:41:e1:a8:4d:cb:
         8d:de:56:80:74:80:0a:81:31:19:02:b8:8d:d9:74:93:1b:10:
         f4:a8:ed:0a:ec:7a:02:13:05:80:63:4f:b2:92:3f:30:d2:fb:
         5a:74:e9:31:8f:81:f8:0f:c5:1f:aa:71:38:c9:4f:d2:81:be:
         36:81:4a:1a:8a:67:ae:ac:8d:d6:9d:c0:5a:6b:bb:9d:ba:4a:
         80:5d:2d:26:ab:7d:2e:7f:72:4c:86:10:b5:47:7b:63:c0:00:
         9b:54:37:f0:cf:11:85:6a:44:ce:d1:10:38:5a:4d:68:a0:f2:
         4f:bb:f1:8f:1d:62:9f:17:cc:b5:eb:ac:c2:7e:47:9f:e4:b9:
         3d:8e:4e:a1:ed:72:50:05:c6:1d:e9:33:ca:e1:f2:8a:25:43:
         0d:ea:39:9e:1e:36:0d:e9:b8:84:4d:88:3b:d2:95:d6:f6:bc:
         e2:d4:2f:4a:ad:31:28:19:77:c7:fc:01:69:47:09:4b:6b:50:
         f4:f8:23:73:13:85:d3:ba:e7:83:fe:f2:49:51:c1:d1:9f:87:
         30:00:6f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:33:36 2025 by rpki-client