Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16c8444e-4854-3233-954b-4c3c2fe15afc.roa
File:                     16c8444e-4854-3233-954b-4c3c2fe15afc.roa (raw, json)
Hash identifier:          uA/AG0IyDehsU7D2xZQ4BNbZnt2OVOID8wquX/KZBoc=
Subject key identifier:   09:D5:31:4D:6D:CE:87:9E:01:02:74:58:3C:F4:B3:45:3A:EE:56:5C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A8840A6B12DA4DF5917EFED00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16c8444e-4854-3233-954b-4c3c2fe15afc.roa
Signing time:             Wed 16 Jul 2025 01:00:49 +0000
ROA not before:           Wed 16 Jul 2025 01:00:49 +0000
ROA not after:            Tue 14 Oct 2025 01:00:49 +0000
asID:                     20940
IP address blocks:        23.218.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:88:40:a6:b1:2d:a4:df:59:17:ef:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 16 01:00:49 2025 GMT
            Not After : Oct 14 01:00:49 2025 GMT
        Subject: CN=d22431d8-b4f6-4c0e-b588-52144641f8d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5c:ab:a2:79:7a:9b:45:87:8a:52:b8:f4:da:
                    03:48:a3:54:b1:6d:95:b9:f4:d3:0b:7e:03:32:ae:
                    19:bf:e2:d9:3d:18:98:e3:69:32:61:56:79:78:a3:
                    5a:b9:16:09:36:1c:af:54:e1:99:c4:ef:82:be:45:
                    a8:b8:8e:23:47:f5:d4:43:36:86:4f:a4:71:3a:ff:
                    96:5d:fc:d0:ab:8a:da:84:e8:4e:72:51:b6:34:8e:
                    36:98:0f:73:74:70:e1:71:54:1b:f3:21:96:1b:ce:
                    b6:b2:30:4e:dd:9d:b2:c8:2e:17:a2:44:3f:31:fc:
                    a6:e3:75:21:39:b6:df:3b:27:fe:56:b4:95:f6:77:
                    31:4a:31:9b:38:72:87:4b:d8:c6:14:51:80:c0:3f:
                    7a:4e:42:06:dc:d3:d5:f3:27:2b:01:d5:3f:70:4c:
                    c4:b5:7a:0d:dc:2c:13:78:19:a1:93:02:35:ba:87:
                    48:16:4c:2d:0b:1f:97:74:4f:7d:38:1d:ef:ea:b9:
                    d6:4b:1b:db:10:93:48:f9:96:bf:1d:90:3e:7d:0a:
                    1b:93:6f:23:7f:f6:c2:57:e3:19:3b:3c:00:60:a3:
                    15:8b:16:90:5c:3d:68:10:cc:f9:cd:27:db:51:25:
                    6d:7d:bc:ed:c3:22:3f:94:0c:40:48:43:43:7c:70:
                    b2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D5:31:4D:6D:CE:87:9E:01:02:74:58:3C:F4:B3:45:3A:EE:56:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16c8444e-4854-3233-954b-4c3c2fe15afc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.218.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:f7:a8:10:da:0a:3d:18:aa:70:ab:8c:c2:e3:9f:77:af:0a:
         50:4d:53:bf:0e:67:a1:e0:b9:57:c6:f1:a2:19:b3:d0:ae:1c:
         d9:0f:d6:2e:83:b1:bc:e5:36:75:7c:88:45:bc:98:54:a7:56:
         7e:be:e9:3f:ee:44:af:a3:d0:2d:f4:16:2e:ef:83:b8:1e:b5:
         ac:aa:55:22:4e:5a:db:a5:5d:d2:46:0e:21:71:3c:26:97:67:
         8e:0d:79:90:5d:ae:07:b1:e6:f8:15:00:5d:1a:ac:d8:65:bd:
         34:28:d2:c6:b5:8d:f4:0b:db:c3:49:0c:b8:f4:09:b5:27:4e:
         51:77:7b:1b:f2:07:97:af:2b:c7:42:71:c4:c5:e0:d0:2f:14:
         ba:ba:ae:33:3b:c4:eb:a1:01:ec:bd:e0:21:d0:54:aa:f1:a0:
         29:90:56:d4:36:00:cc:75:33:69:e4:f8:64:cd:c9:cb:b0:5e:
         d7:7c:2a:ec:44:bc:79:02:5a:c9:82:be:1c:03:b6:3a:08:af:
         ef:6c:23:c6:47:91:38:3c:bc:85:99:05:c4:80:be:ca:65:6d:
         33:76:8e:c9:9c:ca:f5:fe:a6:b7:84:a7:3a:91:48:68:6e:bd:
         f0:fa:a1:4c:16:3f:4b:4f:99:e5:9a:74:e3:1c:1c:69:cd:3b:
         bf:e6:86:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:00:16 2025 by rpki-client