Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d3f6305-9735-38c1-84b3-02f09497ebf7.roa
File:                     9d3f6305-9735-38c1-84b3-02f09497ebf7.roa (raw, json)
Hash identifier:          YePqlgPUaorCtTkyNiuzHKSpJavBENVdSB2FfuaXoKE=
Subject key identifier:   2B:94:0A:18:41:72:6A:EB:A2:10:A0:6D:5D:E9:23:B2:B6:E8:F6:D4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A8B0B71BC3ED0811EB58B4BD0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d3f6305-9735-38c1-84b3-02f09497ebf7.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     16625
IP address blocks:        23.221.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:71:bc:3e:d0:81:1e:b5:8b:4b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=33a78ed3-ec3f-426c-b291-16d6ae8be30a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a1:6c:3b:74:f4:cc:cd:6c:c1:dd:30:a0:1b:
                    9b:a4:98:c9:0e:86:c8:4e:52:0d:f5:f0:22:06:8c:
                    52:7e:a1:1b:4f:79:63:f9:22:61:8e:7a:31:0b:a5:
                    a2:4b:72:b6:7b:7e:38:a9:2c:e2:c6:c1:50:d4:c8:
                    0b:72:f1:12:9e:5a:d5:ee:2d:81:3d:43:a5:bd:0f:
                    2a:01:7b:10:dc:2d:63:19:e2:70:9f:aa:86:06:e7:
                    8a:51:02:a3:65:76:6a:99:c5:b5:9e:57:0b:c9:6f:
                    07:d7:85:4e:4a:d5:15:74:86:c6:f2:05:40:48:47:
                    b7:96:05:30:a7:f3:67:e0:ed:ee:b3:1a:fd:bc:b9:
                    0c:37:ac:77:57:00:89:d0:9a:19:18:c3:47:02:f1:
                    58:58:c6:c0:73:98:c4:04:85:0e:f4:f5:24:17:b2:
                    e5:0c:8f:22:ed:ec:88:00:95:6b:54:4f:65:e0:06:
                    ec:bd:9f:77:f6:41:3d:ff:60:2b:93:5f:04:c9:45:
                    7e:47:16:4e:cc:18:04:fc:10:3e:98:6f:af:40:00:
                    f4:c6:74:a1:cd:3f:2b:1e:d7:47:e2:bc:72:d7:86:
                    aa:57:05:13:ae:4d:91:e4:eb:66:72:20:a6:90:8e:
                    9a:98:28:95:83:89:73:a2:75:f2:1e:4f:7e:bb:11:
                    49:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:94:0A:18:41:72:6A:EB:A2:10:A0:6D:5D:E9:23:B2:B6:E8:F6:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d3f6305-9735-38c1-84b3-02f09497ebf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.221.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:46:3a:92:5e:09:34:b0:f7:e2:e8:12:22:6d:be:98:8b:41:
         35:91:72:7b:af:68:f4:e0:7f:ab:75:be:65:8d:8c:06:ca:dc:
         17:a4:d0:f9:22:34:84:87:20:ed:52:5e:66:a7:67:6a:87:e7:
         66:d3:2b:9f:58:b3:cb:f1:11:1e:be:49:d8:c1:3c:c1:97:ce:
         fe:0e:5b:c1:2a:3e:a1:fb:14:3b:e5:8d:0a:97:e9:aa:23:5c:
         1f:dd:49:df:02:12:e8:f3:bb:25:ea:1d:71:de:2a:32:be:7b:
         7e:f6:93:bf:8c:09:2d:21:16:b3:a1:25:37:a6:7a:e1:d0:66:
         ae:d1:57:f5:e4:82:52:f3:2f:45:e9:43:76:74:ea:e9:57:63:
         d0:2a:59:20:0a:61:35:41:e8:21:d2:5b:fd:a6:45:8c:4d:c7:
         e9:b8:0b:d6:f6:11:f5:60:a4:b0:3d:b0:bd:c5:6f:23:9b:11:
         70:0b:b2:1a:da:b3:9a:ef:67:4a:f3:9d:b9:c7:e4:76:89:30:
         ec:0e:dc:8e:c0:a5:0b:2d:43:fe:5d:96:ed:3b:f3:f5:bb:ec:
         cf:b2:d2:46:a7:3b:5d:3e:09:a0:8a:b6:3f:5f:ff:86:d3:28:
         38:39:7c:2e:ff:3c:ea:2f:7c:7e:d7:75:e9:d5:c9:af:72:cc:
         6e:07:b4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:47:56 2025 by rpki-client