Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6397bff5-0b62-3783-ac88-9b29b5b17c04.roa
File:                     6397bff5-0b62-3783-ac88-9b29b5b17c04.roa (raw, json)
Hash identifier:          fHhsHnpte53SlEuglFMmPj8WyTjgbZuYGKSSCSe1v4Q=
Subject key identifier:   90:DA:B1:EA:FC:81:99:01:78:D2:D9:DD:74:E6:A7:8E:36:E5:44:6B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A7A4B546DD45BEF1BD2A3D680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6397bff5-0b62-3783-ac88-9b29b5b17c04.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     20940
IP address blocks:        23.212.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:54:6d:d4:5b:ef:1b:d2:a3:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=d50fe850-1c70-446a-9c09-dfbdf2515b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3c:f4:42:9f:03:0c:05:61:5f:25:6b:21:2c:
                    4c:9c:36:d8:40:cf:8d:dc:dd:c8:9d:80:81:23:08:
                    49:14:6e:48:69:45:62:12:2a:95:f9:74:d9:6c:74:
                    fd:da:75:33:c1:2b:e3:c8:56:94:8d:bc:89:bf:dc:
                    fb:50:86:49:27:80:83:3e:9e:9f:97:7f:1b:d5:9c:
                    2b:0e:48:f6:22:61:4c:04:fc:4b:d8:4d:e4:62:81:
                    f6:10:54:e6:c5:19:d3:61:c8:3c:f9:93:15:0d:f8:
                    c3:e0:ec:b8:82:bb:de:44:b8:f1:ca:32:92:77:64:
                    db:e9:a5:7a:cd:5a:0d:2e:0c:82:0c:fc:ee:72:fc:
                    3c:1d:d4:77:45:f8:5c:50:4f:54:15:8d:2b:9a:c3:
                    3c:76:7e:12:3d:e4:48:e8:7b:e6:c4:b2:99:2b:0e:
                    b2:ee:07:85:33:6a:a7:f8:6c:51:8a:3d:c3:0a:ee:
                    58:d4:50:d6:32:d7:b7:71:e8:3a:69:a3:90:6f:27:
                    83:52:1e:23:ac:c3:df:f9:5e:77:a0:14:98:9b:d9:
                    b8:4e:5b:86:af:a7:ee:43:e9:f3:cc:25:e4:59:dd:
                    06:27:32:92:7e:95:c4:49:9a:c3:a1:23:0c:a4:62:
                    55:42:40:f8:20:0f:aa:66:2e:86:8b:f2:5a:3c:bc:
                    b5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DA:B1:EA:FC:81:99:01:78:D2:D9:DD:74:E6:A7:8E:36:E5:44:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6397bff5-0b62-3783-ac88-9b29b5b17c04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.212.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:cf:b2:31:5b:8a:45:f0:44:0c:dd:28:89:de:b1:2e:e3:ed:
         d3:25:87:bc:69:35:63:0e:b2:f2:56:8c:ff:70:47:79:64:2b:
         d2:52:dd:63:3c:a7:5e:7d:6e:49:dc:dd:79:f4:ba:95:4d:2c:
         4f:8b:8f:11:ec:e6:50:c9:35:e5:b4:c1:9c:cc:92:0b:d8:2b:
         7b:57:f8:4f:cf:3e:7c:f2:84:33:9f:56:f9:42:93:34:cc:bc:
         8f:e6:b4:0e:5c:9c:cf:39:12:5b:cb:30:91:57:e8:e6:b0:fc:
         d0:07:c8:cc:a0:8e:c4:da:97:f2:50:f0:a1:57:41:4d:23:a8:
         f1:c5:bd:0b:cb:83:06:73:5e:33:77:05:ef:ba:d3:ae:cb:b4:
         09:61:6b:9a:11:00:45:71:da:2c:69:80:a2:73:7d:19:da:e8:
         95:2d:ee:3c:96:a0:5c:6b:88:ee:4c:e4:00:c5:4a:54:e4:b9:
         39:27:48:73:12:18:57:ac:0b:4f:d8:83:ab:87:71:40:07:d2:
         61:a2:c8:c6:98:7b:20:ba:c2:ca:1e:e7:5f:57:3e:7e:18:5b:
         4b:62:2e:af:93:0f:07:7d:a0:f7:8e:6d:12:d1:88:e3:12:f6:
         23:d5:81:80:60:24:ec:cc:a8:4e:3f:9f:51:77:14:fd:8a:16:
         70:94:37:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:43:45 2025 by rpki-client