Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9add7695-5a34-399b-bb1c-8fc76c4adf27.roa
File:                     9add7695-5a34-399b-bb1c-8fc76c4adf27.roa (raw, json)
Hash identifier:          TqBP3+Fxz7GMFgTsEh4ES7fBTmynZUPisZdjhh+8Xn0=
Subject key identifier:   F1:4D:F6:41:E0:06:E7:C2:5E:97:A6:F0:F8:B8:6F:20:E0:0C:21:E2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A655B376BC76FB1F77BEBEC80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9add7695-5a34-399b-bb1c-8fc76c4adf27.roa
Signing time:             Thu 03 Jul 2025 13:01:04 +0000
ROA not before:           Thu 03 Jul 2025 13:01:04 +0000
ROA not after:            Wed 01 Oct 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        23.199.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:65:5b:37:6b:c7:6f:b1:f7:7b:eb:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  3 13:01:04 2025 GMT
            Not After : Oct  1 13:01:04 2025 GMT
        Subject: CN=578fc504-4062-408e-bf20-599e66cbe9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fe:37:f7:ce:7a:e9:c7:48:e3:ac:92:02:e2:
                    c1:4e:1f:a3:e2:4c:3d:a9:13:1c:de:d2:36:e8:f2:
                    b3:e7:dd:e8:68:18:2d:66:5b:cb:82:db:de:cb:6e:
                    d8:f1:4a:94:31:d4:8f:c2:8c:45:f1:96:cb:b5:a3:
                    49:43:88:9c:0a:16:80:a0:9f:55:81:0f:9d:24:f5:
                    53:cd:1a:17:f2:aa:1b:5c:a3:6f:89:df:f6:14:0c:
                    02:07:8a:2b:3a:be:6a:51:f0:a7:e2:78:50:c0:55:
                    58:62:cf:b0:47:d9:6e:f8:e7:93:d3:96:e3:59:cb:
                    9c:68:fc:0c:e6:06:10:ce:3d:0e:32:f1:8c:b4:88:
                    01:25:82:98:e3:14:9c:46:3c:4e:11:11:d9:cd:df:
                    72:c0:d6:06:2e:8a:ac:b5:71:07:05:c6:bb:e6:8c:
                    34:4d:01:7b:6b:e2:06:8e:ab:da:32:64:19:c4:b9:
                    62:b5:d4:2a:af:94:49:ab:23:60:4e:e3:8f:94:c2:
                    eb:33:3d:00:ff:c7:79:00:2c:ec:98:1b:9a:24:31:
                    53:09:99:84:d8:fd:b0:0c:98:a6:a4:be:f2:1c:c2:
                    45:eb:64:eb:6a:38:7b:ee:bc:ff:91:2a:ed:3a:44:
                    94:e5:97:68:a7:ce:de:62:4c:4c:4f:bd:42:3e:3d:
                    9c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4D:F6:41:E0:06:E7:C2:5E:97:A6:F0:F8:B8:6F:20:E0:0C:21:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9add7695-5a34-399b-bb1c-8fc76c4adf27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.199.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:42:79:96:67:28:32:58:15:d8:a2:a7:93:27:ee:ff:55:8f:
         30:1a:50:0f:c9:45:79:73:23:f6:cb:bc:de:b7:86:e1:f3:57:
         57:28:e8:83:2c:cd:1b:38:70:23:95:b1:cd:5f:16:4b:48:c5:
         a2:fd:1c:4e:a9:57:7b:f3:2e:fe:b6:3a:ab:5e:71:fe:92:eb:
         53:2d:c7:bc:b8:3d:3d:63:a3:68:2b:4f:bd:ea:df:a6:33:12:
         80:01:2c:b0:b6:66:8a:4c:3b:c5:91:ac:63:f9:ee:47:a4:69:
         27:60:30:8d:5b:b8:c4:a1:50:29:16:49:34:74:66:52:f9:a4:
         26:2b:5d:6f:00:8a:ea:d8:99:25:aa:72:4f:bc:10:45:bc:92:
         51:35:d0:47:b1:57:ac:33:9c:44:72:cf:f5:99:0e:2d:6e:a7:
         98:1f:24:df:3d:cd:c3:55:82:c4:4e:ef:05:1d:fe:7e:e1:4c:
         29:63:b8:cd:3d:d3:75:be:f8:2d:40:eb:cd:35:9f:c4:79:b3:
         7e:d2:62:34:a2:65:ec:e8:f0:de:30:d1:15:81:20:86:ab:69:
         a5:ed:34:c4:75:fb:c6:f2:04:f0:61:01:35:9f:ac:c5:a3:2f:
         70:4f:e7:82:09:d1:ba:21:5c:c4:31:1a:e5:75:c0:64:09:c5:
         4c:75:1c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:40:12 2025 by rpki-client