Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6f29106e-5722-3ba3-bae1-d59bfe91c17f.roa
File:                     6f29106e-5722-3ba3-bae1-d59bfe91c17f.roa (raw, json)
Hash identifier:          ozQjegIDOmyAsNe7IyDDmR3Ryhee2EaW80ypaAIZrFs=
Subject key identifier:   34:B2:84:C3:10:37:81:A4:C7:CF:24:C5:EA:17:96:FD:BA:CF:A0:F5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A8B0B6B11378F23503054CF00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6f29106e-5722-3ba3-bae1-d59bfe91c17f.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     20940
IP address blocks:        23.223.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:6b:11:37:8f:23:50:30:54:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=9c3ca968-098b-4807-9e9f-6f679bd2160c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ce:ca:00:c9:97:2f:30:19:f1:83:cd:08:4f:
                    b6:a2:f2:5c:70:85:d8:5b:8e:47:e1:d3:c7:37:e3:
                    c4:21:d9:ad:68:bc:0c:e7:87:8e:44:98:86:89:b9:
                    8d:cc:ad:31:2b:66:03:5a:b0:37:3b:ce:f4:77:9a:
                    55:3e:a6:e5:8e:f6:2d:b5:1e:f4:86:74:76:92:ca:
                    e5:9a:3d:25:bf:27:a3:9d:84:46:92:95:e5:7f:21:
                    75:f7:fa:fc:2b:b4:36:d9:b2:20:c7:2a:97:00:aa:
                    51:73:bd:40:15:d5:ff:e6:ae:a7:c4:ac:0a:9a:2b:
                    f4:c6:c8:b8:8b:aa:82:dc:e2:b8:30:e6:ee:ba:80:
                    eb:f0:d3:23:48:c4:ec:f0:6a:be:71:23:9f:17:2d:
                    16:12:2f:56:79:5d:22:2f:03:7c:3c:49:47:64:79:
                    39:e4:f3:bf:ff:74:e4:14:61:64:60:ef:ed:7b:58:
                    5a:f8:9b:35:cb:7d:e6:43:a5:e7:51:88:9e:39:81:
                    aa:f8:4f:90:ee:42:df:f7:cd:f9:5a:41:1b:32:c2:
                    43:f6:96:47:63:e1:05:3e:12:c3:4b:73:6c:87:5e:
                    1c:ab:d0:5b:62:c8:12:a1:32:98:e2:a2:6c:07:35:
                    9a:ed:76:55:21:86:45:d6:e4:2f:86:e3:56:ae:e5:
                    b6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B2:84:C3:10:37:81:A4:C7:CF:24:C5:EA:17:96:FD:BA:CF:A0:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6f29106e-5722-3ba3-bae1-d59bfe91c17f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.223.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:eb:5c:89:1f:0c:55:d2:15:ed:64:a4:df:e6:3c:81:6e:17:
         b8:cc:ef:d3:d4:c3:63:35:74:5e:24:fb:d5:f8:e4:a9:3c:a3:
         41:19:5a:2e:6e:55:92:b5:9e:ec:bd:82:7f:5d:f8:60:5b:63:
         fc:95:4b:15:8e:a2:c4:c0:c3:21:b6:5a:f8:22:31:af:32:9f:
         e4:e0:df:d2:cc:c4:6f:85:e2:e8:5a:05:19:c5:95:95:a9:3c:
         d5:bc:d4:15:bf:4e:9e:e9:6a:8b:72:f4:ce:14:18:ee:69:f2:
         5f:bb:fd:8f:5f:f3:47:97:b7:36:9b:6e:04:4f:b4:69:42:bb:
         6f:42:a8:43:fe:9a:55:14:b7:f0:a4:0c:ce:0a:2a:86:4e:0e:
         0f:b2:76:6f:8a:58:d5:b3:7d:01:03:cf:c3:99:71:b7:00:b7:
         be:ca:85:e0:68:88:ca:02:04:68:cc:7c:34:31:97:2c:d5:1b:
         cb:ba:70:ce:a8:c6:dd:2b:06:e2:b8:98:4e:3e:44:a1:2a:9d:
         da:89:fb:b1:90:26:4e:e9:ad:81:82:ec:61:7e:42:48:fc:be:
         37:f6:e3:f9:a0:8c:10:27:81:91:a0:08:91:5e:91:12:dc:ba:
         db:69:92:e4:18:ae:9c:7b:b6:59:a1:3b:e5:36:03:fc:85:46:
         1c:ee:6b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:31:42 2025 by rpki-client