Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b72734d-1bce-36f2-aef6-4e6c45a7a80f.roa
File:                     9b72734d-1bce-36f2-aef6-4e6c45a7a80f.roa (raw, json)
Hash identifier:          OBtlwo29CV22NtopJBk/9UploO/k4pbyC8FqAxh7QSY=
Subject key identifier:   6D:F9:41:4F:61:62:F2:40:28:26:C3:E1:E0:40:0C:38:20:25:E7:B2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A94D0E4C1DFAA907BA0C36200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b72734d-1bce-36f2-aef6-4e6c45a7a80f.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        23.196.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:e4:c1:df:aa:90:7b:a0:c3:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=0d89e50a-6d5a-4085-b29f-aa6da2dcb128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:4a:b9:ab:47:01:00:03:9e:16:cb:8e:df:ea:
                    e0:fd:f1:4b:2c:e7:70:9f:1a:09:de:44:6f:1d:ee:
                    90:06:55:5c:42:99:b6:b1:7c:98:63:87:d0:16:b8:
                    00:7d:0f:c0:b3:03:ec:fb:b4:b4:0b:40:ca:1f:b5:
                    ce:26:36:4d:f1:fb:12:0f:f2:42:f2:5c:38:6e:1f:
                    bd:f0:1d:74:58:49:bc:8b:22:86:70:ef:9a:8c:45:
                    2f:ad:cf:d2:d2:4f:c4:35:05:d7:e0:1b:5e:d0:16:
                    0c:3c:b5:e8:82:39:74:bc:22:8f:b4:73:ac:c1:86:
                    74:f4:15:e2:fc:20:df:20:4f:f5:49:da:97:22:8e:
                    fb:07:0e:83:35:06:2a:e3:35:44:cd:90:2d:99:20:
                    88:a2:df:f2:b5:64:cc:e1:bf:1a:c6:83:d6:93:ae:
                    d7:fd:8b:eb:df:7e:9f:1c:41:1c:01:2b:5f:0c:94:
                    db:5b:1f:87:d5:a9:33:10:fe:9c:cb:f6:a7:1b:dc:
                    7e:a7:85:28:17:ea:9a:e9:da:68:b2:b3:1a:c4:0e:
                    17:90:63:77:f7:47:dc:b1:f6:c1:e3:63:5a:b7:c3:
                    98:eb:91:60:d8:3b:95:e1:1f:61:6f:83:59:86:14:
                    7d:84:46:3d:13:17:67:c3:16:7f:9f:d8:59:64:67:
                    a7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F9:41:4F:61:62:F2:40:28:26:C3:E1:E0:40:0C:38:20:25:E7:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b72734d-1bce-36f2-aef6-4e6c45a7a80f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.196.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:c3:b7:9f:0d:21:54:03:43:06:7b:82:e4:fd:98:33:63:4d:
         85:17:fe:0c:65:79:92:9d:a7:f9:ed:3a:f5:e2:f9:b4:ab:9c:
         bb:62:1a:a2:86:2b:12:f2:77:78:4f:49:1c:ed:18:a0:27:a4:
         5d:97:0a:d6:b8:54:31:ae:f1:08:75:56:d4:ca:52:b1:43:1d:
         6b:6e:5a:a5:f9:a1:17:b5:31:72:55:05:80:b7:0b:28:b7:f2:
         e1:b9:fc:a4:55:fc:13:91:54:fd:99:89:c1:c0:ae:2e:86:7f:
         3b:a5:08:ad:70:eb:e3:b1:0e:71:87:a1:23:50:dd:50:17:f6:
         5e:cd:58:61:57:90:75:00:ac:21:05:e1:24:d1:01:05:1c:f6:
         aa:e7:d6:7a:59:a5:ab:f4:d0:69:8f:29:0f:06:d8:31:8d:74:
         49:8e:1e:ba:cf:7d:9b:7a:9f:6e:de:6f:b3:3f:ee:c5:a9:24:
         d1:c6:ff:80:22:4c:28:cf:59:a4:40:ff:6d:3f:ca:3d:7c:70:
         c8:91:c2:b1:3a:a6:94:56:48:6c:f6:87:8c:e1:32:a2:0f:1c:
         87:a9:5e:c4:8f:7b:a7:eb:ac:95:6e:60:44:ef:01:2e:59:28:
         09:ad:3b:57:61:98:83:d0:1c:b7:be:b3:49:40:db:52:ec:e7:
         92:cf:41:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:26:19 2025 by rpki-client