Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7aa3e78f-ff56-3f7d-9898-9ea7f71b555b.roa
File:                     7aa3e78f-ff56-3f7d-9898-9ea7f71b555b.roa (raw, json)
Hash identifier:          968L5TyT8gXr4sH8dpUJ9C54DHnlPdTJZybDbn9kZfU=
Subject key identifier:   83:0B:5C:C9:74:63:EA:A6:67:07:F2:34:A8:0C:1A:9D:32:C5:33:E7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A68263A9DB742DCC04C1A8C30
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7aa3e78f-ff56-3f7d-9898-9ea7f71b555b.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     16625
IP address blocks:        23.202.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:3a:9d:b7:42:dc:c0:4c:1a:8c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=5c961d4c-822d-423f-9299-6691e0a88cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:79:53:ff:87:ec:e8:98:93:02:0f:68:9f:01:
                    a4:1f:16:fa:4f:bc:a2:a3:62:0f:80:0d:ac:09:e9:
                    03:7e:0e:cd:54:c3:00:b3:60:67:28:29:e6:b9:b4:
                    71:b3:32:8b:09:92:2d:d5:f6:7b:e7:8e:52:4b:10:
                    05:7d:61:1d:46:b0:4f:c6:5c:47:14:39:a0:e8:28:
                    42:1f:5b:a0:19:67:29:2a:85:79:5f:fa:08:46:9c:
                    01:03:d0:b6:6f:26:8d:b9:20:3c:3a:a5:4d:8a:00:
                    a9:01:8b:53:65:fc:e2:9b:5b:b7:5b:39:79:c8:a1:
                    75:3e:cd:f3:f1:59:a4:86:b9:d0:1f:b4:64:66:3d:
                    24:aa:4b:18:bf:bf:22:fc:72:ac:ae:2f:6e:e9:8f:
                    ec:e5:30:df:2c:0c:50:f5:a0:03:6d:57:2f:7e:60:
                    8e:ac:56:45:b6:88:0a:74:14:5c:61:55:94:ed:e5:
                    88:35:8f:19:7c:44:36:1e:fb:fc:60:bb:c3:01:ae:
                    3a:14:35:97:5a:49:e4:38:0e:75:a0:c1:a9:d1:dc:
                    a6:1b:fb:50:51:a5:70:66:75:1f:0e:f8:c8:99:6e:
                    eb:2a:04:21:3d:86:d1:53:28:64:91:69:ee:e4:99:
                    90:15:8a:87:52:61:ac:b1:74:eb:72:bd:e6:91:ee:
                    82:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0B:5C:C9:74:63:EA:A6:67:07:F2:34:A8:0C:1A:9D:32:C5:33:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7aa3e78f-ff56-3f7d-9898-9ea7f71b555b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.202.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:cd:1e:3e:ac:20:9d:b5:04:23:eb:67:d6:98:a4:c8:3c:a2:
         b5:b7:88:56:37:b6:1a:cd:f3:1b:a5:e5:7d:ea:2b:48:75:cc:
         9d:07:0e:9d:c4:5b:28:19:40:f5:53:43:ef:2d:da:fd:7d:d1:
         59:2b:56:6d:3e:b9:14:bd:5b:62:f1:fa:68:8e:1f:90:9e:f5:
         a9:e6:5f:11:f3:8d:ab:bd:db:aa:f0:5b:5b:7e:39:de:bf:28:
         b6:6e:2d:fc:4d:6a:7d:76:4c:12:e1:13:6d:50:ab:44:12:63:
         b7:16:4f:8a:ef:27:48:d8:b0:b3:79:ce:a9:ed:a2:10:62:af:
         60:07:d5:1e:c5:93:a9:43:f8:db:f0:7c:7b:28:86:bb:eb:3f:
         bd:b6:03:0d:a2:13:62:3c:b9:32:85:e5:a6:27:03:b7:b0:f4:
         bd:8d:7a:38:26:f3:54:ab:2d:dd:b0:a4:5b:27:31:b9:74:bf:
         bf:43:72:99:19:cf:8f:91:e5:42:4f:56:66:74:46:a4:fb:e1:
         01:23:16:82:8d:65:fd:dd:2a:f1:be:a6:aa:ca:65:74:e9:c4:
         f5:b4:fe:43:c1:c6:a2:d1:4e:e5:bf:f9:1a:76:5b:07:74:37:
         85:d8:87:a0:c9:68:83:eb:11:a6:5f:72:e4:f6:e4:bd:44:f5:
         57:25:68:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:28:46 2025 by rpki-client