Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1bc94954-9277-3806-abad-a2f1067225ee.roa
File:                     1bc94954-9277-3806-abad-a2f1067225ee.roa (raw, json)
Hash identifier:          r4EZqiAXv9nSe4Z+/xiCnT9Xlx27b4hDuX7OinFGc/I=
Subject key identifier:   5D:67:75:FE:A8:C5:57:E1:5B:9B:6C:4F:2C:D4:63:6A:F1:5E:87:57
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A778094449A067121AE661A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1bc94954-9277-3806-abad-a2f1067225ee.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     16625
IP address blocks:        23.204.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:94:44:9a:06:71:21:ae:66:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=293ef495-643e-472d-9a8e-d9a38392801d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ba:e9:55:f5:61:b0:ab:5c:b1:10:0e:a0:69:
                    0a:e9:79:6b:cc:56:74:c7:95:ab:b9:75:56:d7:64:
                    b0:0a:11:1a:61:85:93:2c:67:b0:3d:27:d3:7c:32:
                    f5:e0:25:3d:fe:df:d1:3a:04:5c:eb:e7:8c:20:bd:
                    49:78:fc:1a:74:29:87:0f:14:c7:68:6a:6b:42:b3:
                    71:3f:47:1d:37:5f:d6:1f:f9:24:4b:a6:7f:40:e4:
                    e0:c5:f2:95:b5:47:57:9f:06:73:98:99:dd:b0:69:
                    48:ea:32:a9:72:36:8b:c9:36:76:af:9b:bb:0b:03:
                    21:50:a8:64:61:6c:d5:61:d4:94:57:b3:49:08:d2:
                    4e:04:5b:1e:ea:9e:4a:bf:db:c6:8e:8f:9f:26:c2:
                    f6:df:32:2d:b7:2d:29:33:2e:3f:e1:cf:27:69:7a:
                    9f:6b:16:41:ff:b0:6a:39:a4:92:49:35:34:bd:00:
                    8e:1f:c3:a1:b8:35:50:90:d7:38:fe:49:64:4f:24:
                    46:02:45:e0:07:a7:a1:44:3c:b1:a6:0f:b2:3c:3f:
                    e4:12:e6:c3:96:ee:fa:c3:bd:3d:19:3f:97:34:34:
                    48:4f:d1:a5:80:2f:a3:82:e7:0a:fd:19:f4:84:35:
                    e1:9e:f7:ed:37:9b:3f:58:15:81:28:80:45:d2:d8:
                    d0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:67:75:FE:A8:C5:57:E1:5B:9B:6C:4F:2C:D4:63:6A:F1:5E:87:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1bc94954-9277-3806-abad-a2f1067225ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.204.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:d3:75:70:74:cf:8d:97:4d:24:2c:54:ac:1a:e1:f5:cb:68:
         88:9b:54:4b:fe:71:4f:95:84:30:d8:94:10:f0:da:4a:72:67:
         0f:6d:b2:61:7e:26:1a:0a:17:9c:f2:18:70:6e:81:4c:a8:07:
         73:ba:cf:03:64:f9:4b:98:36:64:d6:5d:34:36:ad:a0:d8:78:
         fa:15:a0:5f:9f:67:ed:e2:1b:f6:00:e0:98:89:dd:a5:42:1e:
         cd:5c:d0:06:1e:7c:7e:78:37:c4:02:77:54:d7:c3:bf:51:46:
         cc:f9:e3:32:fc:f1:ee:26:2b:13:84:b3:d1:d8:c2:3a:fa:1f:
         ba:49:dc:0d:af:d1:a2:ab:b8:16:d3:49:72:d9:da:45:c9:44:
         2c:8a:3e:b4:ad:24:aa:0e:d2:3a:77:63:e3:80:1b:6e:f6:4d:
         96:e8:4e:05:80:0e:79:12:92:9c:8e:d0:c1:ac:26:ae:be:7b:
         26:6f:2b:e0:50:4d:f3:03:e2:c3:20:9c:f1:d2:25:05:5c:15:
         58:00:58:2f:06:82:fd:82:41:d8:fe:b0:9e:c4:0c:a1:c8:98:
         61:96:16:fc:97:3c:59:7b:58:2c:06:1b:24:4f:85:83:e1:c5:
         42:eb:96:e7:df:33:f0:da:50:12:e0:36:c0:a9:e4:54:7e:fd:
         61:55:1a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:24:46 2025 by rpki-client