Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c354cfb-6dba-3f29-96cb-375de5909b7a.roa
File:                     2c354cfb-6dba-3f29-96cb-375de5909b7a.roa (raw, json)
Hash identifier:          DRLbm80ibl3KC4hqZXWJgcuvrYE+1dtjInjQVxkqcuc=
Subject key identifier:   C8:26:91:47:C6:AD:00:03:AD:86:51:50:BE:2E:BC:B9:42:C1:E6:3C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A6290B770831E046AFC62E078
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c354cfb-6dba-3f29-96cb-375de5909b7a.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        23.194.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:b7:70:83:1e:04:6a:fc:62:e0:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=d92f35f3-9090-4076-99b9-1a1e3e1929e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3b:b1:b5:bf:3c:1c:47:1b:ee:9c:a7:aa:f0:
                    b1:a2:a0:e8:68:6f:46:51:41:df:3f:38:1c:76:52:
                    24:41:fe:67:04:e7:a0:79:99:8b:46:d0:12:18:04:
                    f6:5e:49:6b:3e:d5:0a:04:1f:ce:71:a6:fa:f3:b5:
                    c7:e4:ed:cf:44:47:24:a9:4f:0f:d1:cf:fb:78:e7:
                    8c:42:a8:11:a1:49:48:ca:c3:52:af:ac:a1:e7:2e:
                    2b:50:22:ab:02:d4:d4:6f:41:c3:95:c1:d9:ac:e2:
                    84:67:1c:98:73:98:35:4a:47:4d:71:9e:08:6b:1c:
                    d3:78:7d:2d:79:cf:44:63:93:82:0d:12:08:85:dc:
                    b7:53:34:69:6c:aa:e9:b3:1a:ea:fa:e4:77:b8:d0:
                    ee:20:39:1f:73:eb:20:ae:34:03:90:06:da:f3:bd:
                    2d:c7:00:5c:e0:e3:e2:1b:85:d9:d5:f7:a8:d7:7d:
                    39:f5:75:68:c3:c9:74:11:bf:21:c2:f7:98:ff:d9:
                    52:12:2a:da:dc:cb:2e:96:81:25:d3:c9:59:f2:02:
                    3d:32:ab:f9:21:34:10:06:3a:6c:79:75:6c:ca:80:
                    f2:93:5c:f7:59:a8:da:af:3d:a7:1c:8a:72:a7:6a:
                    be:91:5a:25:5f:dc:8d:a6:e8:19:c4:38:82:be:38:
                    10:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:26:91:47:C6:AD:00:03:AD:86:51:50:BE:2E:BC:B9:42:C1:E6:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c354cfb-6dba-3f29-96cb-375de5909b7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.194.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:72:7d:0c:12:aa:6c:47:85:67:17:79:ec:15:97:f0:db:45:
         e6:94:18:c7:51:c2:e2:27:99:29:23:21:18:75:7b:02:5d:26:
         1b:a4:ba:7f:c7:04:15:a5:0f:f0:45:d0:f1:0e:05:45:ce:22:
         43:62:13:28:6a:67:7c:87:a3:f7:fc:eb:b1:8e:ad:40:28:ca:
         28:cd:1d:cd:b3:b4:63:ff:f9:e3:8d:4c:87:e7:72:05:05:3d:
         9f:e2:34:ce:8a:74:c2:b8:77:9f:bd:74:26:a0:98:3f:1b:14:
         3d:f8:9d:08:d7:68:f4:30:8b:cb:27:ab:ae:0c:e2:55:af:23:
         aa:08:3e:fe:25:6a:78:0d:7e:4c:0c:d8:b4:d2:d7:3c:b0:b7:
         8d:fc:39:aa:b3:e8:61:a4:c0:71:77:cf:c0:d9:c2:12:91:ac:
         e9:ed:41:01:58:8d:a1:6c:8d:bc:c5:92:ea:15:ff:22:98:b8:
         6d:1a:09:f6:f4:6e:38:f0:af:13:27:45:02:25:4c:3d:3d:77:
         c5:d3:a7:95:a6:7a:d3:b8:35:48:4c:22:ee:ff:95:5e:d3:0e:
         4c:93:16:f9:6b:26:ee:16:e3:7a:75:a3:a2:80:ff:f1:e9:21:
         6c:67:9a:13:1a:7f:9f:56:6b:ce:04:d9:09:27:e2:bd:f3:f0:
         74:09:da:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:34:17 2025 by rpki-client