Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/218bf698-2861-3e8b-870d-74a1e1eb4cd6.roa
File:                     218bf698-2861-3e8b-870d-74a1e1eb4cd6.roa (raw, json)
Hash identifier:          663bNVbCchHOPsO9oA0BauLuQofov63MygMIuX/jDgA=
Subject key identifier:   76:29:93:25:5D:31:C4:1C:97:6F:10:93:BD:19:34:1D:11:EC:39:9A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A6290B6F717950A0D6FB4E380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/218bf698-2861-3e8b-870d-74a1e1eb4cd6.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16625
IP address blocks:        23.194.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:b6:f7:17:95:0a:0d:6f:b4:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=654b4ee1-e9de-4d5a-b6f2-ba5cc13d82cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e7:26:d8:d2:d9:00:fa:ed:3c:bb:7b:b9:8b:
                    67:e0:a8:7c:13:06:32:cf:42:13:ec:3c:18:8e:98:
                    1b:90:70:db:51:56:2a:37:b9:b1:33:c5:3a:6c:c0:
                    95:76:61:ff:4f:50:fb:b7:dd:a6:af:ea:ef:dc:c9:
                    de:9f:93:3e:cd:d2:b9:03:a0:de:6a:68:ff:96:9f:
                    03:ea:01:34:07:43:c7:4a:96:0d:24:36:95:fe:5c:
                    f0:81:69:7f:a5:66:cd:ec:0a:2c:5b:90:fe:01:f6:
                    f1:ca:ea:d8:e3:fc:ea:4f:39:92:bc:5d:b1:5a:50:
                    42:ae:f7:75:59:36:53:e0:3d:71:78:27:61:f6:af:
                    8d:fa:8c:11:e5:2a:80:52:5d:79:84:cb:e7:01:d8:
                    ba:69:12:67:4a:9b:9a:4c:2a:be:e4:dc:7d:49:ab:
                    77:99:7c:e9:26:f0:0c:03:ef:e6:27:86:c1:26:06:
                    c3:79:25:69:12:04:31:dc:18:66:0d:b8:c3:e8:ef:
                    fa:44:38:41:bb:a0:f3:63:a9:09:70:10:2d:54:2e:
                    ff:4c:9a:09:5e:38:58:3e:35:44:8f:20:75:2a:f8:
                    2f:5d:7b:e6:50:07:60:fe:e8:6a:f7:76:95:f5:40:
                    7c:48:5d:56:b2:bc:e3:c4:15:05:fc:b3:c6:99:73:
                    62:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:29:93:25:5D:31:C4:1C:97:6F:10:93:BD:19:34:1D:11:EC:39:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/218bf698-2861-3e8b-870d-74a1e1eb4cd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.194.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:11:da:88:7b:4a:4c:6c:ac:38:7d:b0:32:b6:d3:63:cf:c3:
         84:2f:1a:82:1e:5b:e7:3f:b6:26:17:62:a8:87:b6:e2:b4:b3:
         b5:81:ad:10:f3:28:e1:4f:f9:1c:e6:d3:a1:c7:18:58:bb:31:
         e2:ed:b8:3d:e5:e7:2f:17:70:fd:46:e0:1d:1e:b5:d4:00:a4:
         89:7e:49:0f:65:d9:df:bf:a0:ea:cb:5f:d5:0b:9d:39:b4:ec:
         ee:48:15:fc:58:ed:2e:52:6c:51:f5:c2:68:33:e5:c1:b6:4a:
         76:ef:0c:6c:5c:b3:86:ed:64:97:c7:0c:8f:93:81:d6:f2:58:
         ca:10:7f:91:53:73:64:e2:6a:05:1f:f4:c3:14:93:e6:3e:b9:
         e7:36:5b:6d:e8:7a:fd:0a:5e:e7:8a:75:95:d8:80:51:a6:43:
         af:5d:45:9f:00:c2:e3:7a:e9:c1:1c:7e:05:83:23:c1:18:7b:
         f7:03:b5:0b:4e:53:01:bd:f3:3d:f5:2b:7d:b3:53:b8:26:0f:
         72:49:a0:0b:b0:a2:99:34:9b:a1:c5:aa:36:57:a5:13:60:83:
         57:b9:5b:b5:e3:6c:08:42:26:da:f1:a8:92:a0:70:10:f3:bf:
         20:68:3c:19:38:67:62:52:2b:1b:54:c7:40:fc:10:3d:ca:aa:
         5d:e4:c9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:40:50 2025 by rpki-client