Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22fe71ac-4030-3145-827c-318fba1cab01.roa
File:                     22fe71ac-4030-3145-827c-318fba1cab01.roa (raw, json)
Hash identifier:          wCgB0KR2buArAu2+VojNoRNn0TQRoc6jHvhl6xnZsw0=
Subject key identifier:   AA:43:1B:B1:E3:9A:D0:54:E9:2B:7B:E1:F2:1F:41:C7:B4:A8:BF:80
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A8B0B722A576BF5778A3E5B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22fe71ac-4030-3145-827c-318fba1cab01.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     20940
IP address blocks:        23.222.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:72:2a:57:6b:f5:77:8a:3e:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=eaaa5112-6c41-4bb8-8ed4-60c64692aab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:79:7d:1e:78:77:52:1f:fd:43:eb:15:d8:b4:
                    70:09:f2:5e:56:00:9f:36:c8:a3:8a:16:c4:53:fa:
                    11:53:34:cf:5e:92:0b:40:6f:75:05:19:c8:15:9c:
                    44:ca:a9:26:56:bb:c9:6a:5d:57:20:79:c3:02:ac:
                    93:0e:9f:47:ed:0c:a4:40:70:d1:fe:f6:d8:e1:88:
                    b2:31:40:23:31:a6:b5:98:0a:13:9b:66:35:c2:c7:
                    b0:cc:47:44:1e:c3:ee:b0:ba:86:08:df:be:5f:6b:
                    e0:c9:2f:cd:19:e6:1e:99:17:ce:b4:7d:da:5e:2b:
                    dc:be:a4:a9:f2:7b:ee:6d:62:bc:fb:f4:4a:1a:f8:
                    c8:f4:e0:45:fd:57:f7:d4:5a:6a:b5:aa:4a:19:76:
                    e5:d7:49:1d:98:28:46:0f:54:ef:c8:04:f8:ad:ee:
                    98:b0:a1:41:21:b1:e1:aa:2a:e7:fc:6b:fb:c8:b4:
                    f5:65:09:e4:32:70:99:1f:93:70:d7:03:00:ad:8f:
                    c8:ac:08:6f:9b:3a:86:c0:c8:0a:c9:a4:4f:4c:db:
                    12:1b:dc:bb:63:77:9d:39:5e:29:ce:1e:e4:81:03:
                    7e:57:ab:d1:fb:9b:d5:8a:d2:3e:be:73:70:d3:56:
                    99:34:9e:1f:21:c4:2c:3c:3e:4d:d4:6a:60:54:41:
                    1c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:43:1B:B1:E3:9A:D0:54:E9:2B:7B:E1:F2:1F:41:C7:B4:A8:BF:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22fe71ac-4030-3145-827c-318fba1cab01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.222.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:e0:9d:0c:c4:92:90:90:6f:f1:e6:1c:11:de:26:d3:71:10:
         b4:17:a2:e9:92:89:39:42:3f:9c:ad:6c:31:e8:b7:5d:35:c3:
         2b:ba:d9:d6:2b:62:c6:52:a9:33:b3:c5:49:79:42:08:49:14:
         06:f9:73:62:65:6c:e1:4f:99:10:1a:fd:84:d0:77:a9:66:01:
         72:ac:9d:1a:1b:35:53:b3:05:31:ef:d6:83:7f:7b:30:23:48:
         33:1b:fc:4e:b7:f9:46:7b:fc:6a:4c:11:a5:77:31:e0:13:45:
         b5:00:da:34:c7:fa:b1:4a:85:f1:61:2d:10:3f:ce:6b:28:b0:
         21:ba:ef:37:60:fd:a3:68:e4:02:ac:66:b2:47:5b:9b:e8:71:
         52:19:6e:12:c1:60:64:f8:41:12:09:6e:3a:9b:b2:d1:d5:81:
         76:23:27:08:c1:4f:95:39:9c:d0:c8:57:12:5b:19:99:d8:df:
         17:85:b2:5e:ed:f9:1d:45:bf:d2:8a:94:40:21:96:37:b7:2d:
         53:3b:fb:89:bd:2f:95:5e:aa:bb:16:9e:85:fd:29:2f:2c:19:
         49:d5:d8:85:c1:7e:27:64:5e:58:ad:ec:86:db:f2:83:a1:2e:
         3b:a8:f9:67:5c:ef:16:82:63:ea:00:aa:04:8c:a8:91:ab:b4:
         7a:54:07:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:46:04 2025 by rpki-client