Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95e9189b-bb8c-3505-84b7-87addd4e56b2.roa
File:                     95e9189b-bb8c-3505-84b7-87addd4e56b2.roa (raw, json)
Hash identifier:          MwclDXLZyTRXeDmyREOMWdYV3DTQsw7t8ylC3cHcwMs=
Subject key identifier:   01:AA:92:50:E7:6A:5C:EE:97:9F:64:2D:10:B2:D3:44:04:98:E5:EA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A66C092A1D35A52B248E7A880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95e9189b-bb8c-3505-84b7-87addd4e56b2.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     20940
IP address blocks:        23.200.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:92:a1:d3:5a:52:b2:48:e7:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=be91c830-a8bd-464f-a0cd-7c4db23882ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ec:f2:56:11:f1:76:ac:ae:e1:7c:cc:95:e3:
                    82:a4:3b:48:06:1b:8b:cd:04:23:c7:6d:eb:40:51:
                    47:48:b0:f8:63:20:a5:d8:c2:a5:f1:da:55:d3:16:
                    be:19:55:59:56:1d:fc:7c:bf:8d:9d:f9:ec:38:12:
                    14:73:78:f2:c4:7f:0b:8f:50:52:c6:0f:b5:ef:06:
                    65:93:02:11:b1:9c:49:e6:e7:2e:53:88:d0:1b:b2:
                    a9:20:62:d1:83:94:8f:85:a6:62:43:9e:c6:54:91:
                    ce:94:5b:da:f8:d4:b8:f3:e8:98:1c:3d:d2:4b:8c:
                    47:8a:33:ce:2b:e5:92:18:4f:2b:2e:c5:d9:41:eb:
                    1d:62:26:11:88:94:28:df:a9:6b:e9:cb:a6:6e:36:
                    28:f2:b1:69:01:fd:31:7a:b3:58:10:3e:1f:8a:fa:
                    84:c8:71:dc:9d:46:e5:8d:fa:3d:3f:85:ed:d4:7b:
                    47:c6:32:fa:5a:83:ba:83:e4:f5:c9:2c:01:d8:90:
                    04:3d:6e:e4:16:c2:89:d3:2f:fb:4e:01:63:29:82:
                    4c:bc:60:37:73:82:34:0f:86:ff:5a:4a:95:39:d4:
                    27:cc:f3:1c:85:71:e2:7f:0a:51:68:bd:db:6c:85:
                    f2:de:ec:48:4c:13:6f:39:9f:a3:0a:fa:d0:5d:62:
                    80:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AA:92:50:E7:6A:5C:EE:97:9F:64:2D:10:B2:D3:44:04:98:E5:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95e9189b-bb8c-3505-84b7-87addd4e56b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.200.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:7a:54:56:c0:0b:f8:9a:11:21:0d:a8:59:56:3d:bd:00:f7:
         50:82:82:0f:00:a9:46:f1:7f:5a:be:53:6b:59:d7:5c:81:82:
         1b:73:be:26:15:e6:57:8e:e4:b1:27:cc:6f:80:38:b1:96:9c:
         a9:f1:8c:b6:85:a3:31:b2:d0:a4:54:01:6e:1d:cc:11:cd:51:
         43:fc:8f:c9:79:6c:fb:0e:57:16:12:3c:d0:27:28:c7:fe:33:
         37:c7:7d:8b:fc:ac:c1:8e:5b:f9:58:a1:66:2f:03:d7:58:78:
         f4:65:03:11:5a:3a:d3:36:a0:6a:8b:73:47:11:61:3a:20:68:
         22:63:af:c9:7f:39:71:6d:da:c5:d6:8c:71:e1:31:14:66:4a:
         19:f6:f9:ef:5c:b4:c5:c7:30:59:b6:a3:7a:f5:0c:68:71:2f:
         3f:d5:ea:9f:de:d4:c0:50:e7:74:d4:c0:da:30:bb:d3:a8:46:
         de:22:b5:ad:8b:20:65:27:0c:89:b6:19:c8:c7:68:f8:f2:01:
         71:b7:50:f8:d6:41:b1:1f:1b:2e:c5:21:d1:e8:7f:2f:5a:9a:
         8e:e1:f1:b2:83:77:b2:9f:ea:b1:b3:72:78:c3:f6:c3:7b:7e:
         cc:d8:72:9f:a5:91:b6:fa:e3:b9:12:87:69:81:0c:75:bd:e2:
         22:1a:f6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:41:05 2025 by rpki-client