Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9dcfa684-4d1d-39b4-87a9-646cc8eb908e.roa
File:                     9dcfa684-4d1d-39b4-87a9-646cc8eb908e.roa (raw, json)
Hash identifier:          vjtqEGfrKUoI6j2JWETVXG4tJNU/71D0lut80RZrkHo=
Subject key identifier:   C8:37:47:A7:91:63:A4:02:D8:46:9C:D8:98:F3:E1:7A:C8:7B:F5:9D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A6290A92218A91A547D72FBC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9dcfa684-4d1d-39b4-87a9-646cc8eb908e.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        23.198.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:a9:22:18:a9:1a:54:7d:72:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=8007e00a-39e3-4c39-8e80-97a954657031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3a:1e:f0:08:cf:3c:64:8c:9d:f7:6a:1a:85:
                    87:b9:88:a1:07:9b:a3:5b:47:7f:5c:65:94:91:34:
                    0c:4d:a2:4b:cb:e0:2d:e0:3b:5e:ae:7b:31:06:f9:
                    e9:67:dc:f3:7f:76:3c:87:54:9f:3d:2e:2b:7e:3d:
                    bd:1d:5b:f3:0e:87:c5:b9:ba:af:6d:1e:a9:d8:13:
                    60:61:4e:2b:d8:09:6c:90:58:98:0e:7f:50:a5:cc:
                    c7:fc:b5:91:de:60:4d:ed:2d:61:e7:0a:a9:2f:8f:
                    c8:e1:91:19:52:ca:ef:86:5a:2c:13:be:2c:34:2b:
                    5f:06:82:77:e2:a5:a9:18:02:05:85:f9:aa:bb:29:
                    4c:59:1c:80:c2:33:73:c4:9a:3b:e0:b7:67:4e:e5:
                    8c:67:66:31:fa:7a:28:be:ec:22:a2:20:c7:0e:7f:
                    0f:0b:e7:a5:60:19:42:63:20:9e:03:9b:c2:de:5e:
                    c5:91:ad:72:86:a9:35:9e:26:eb:02:a0:c8:94:bd:
                    d3:28:5a:3e:ee:b9:b3:10:51:8a:87:7b:a6:28:61:
                    38:7d:7e:08:8b:c6:cc:11:96:19:bc:c5:c6:4c:e3:
                    42:ed:c4:8c:df:d7:f6:0c:31:6f:c6:99:cf:d7:30:
                    f0:40:33:e9:a8:59:2e:13:cd:fa:be:a1:0a:59:61:
                    f7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:37:47:A7:91:63:A4:02:D8:46:9C:D8:98:F3:E1:7A:C8:7B:F5:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9dcfa684-4d1d-39b4-87a9-646cc8eb908e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.198.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:6d:75:4d:42:0d:9b:b2:97:5b:1a:85:d7:02:2b:60:ab:35:
         72:f0:d1:e9:4f:4d:23:c5:11:ca:99:36:16:12:7b:75:24:89:
         79:ea:67:17:5a:b6:e3:7d:05:a9:79:2b:20:d6:09:e2:24:1b:
         76:f1:6d:6a:ef:d7:db:52:08:20:e6:af:48:43:63:3b:36:64:
         21:58:68:9d:92:8e:0c:e8:b3:18:9c:5b:af:6c:e6:f8:30:d9:
         a1:f4:c8:17:76:45:67:95:5d:4d:41:48:38:36:f4:0c:42:19:
         ec:18:87:e4:50:67:6e:33:2e:37:84:c5:ee:48:70:d5:15:ee:
         56:52:c8:d6:ba:89:a0:24:77:4d:ac:be:3f:7e:c7:06:56:21:
         45:2f:ea:33:51:e5:02:ab:cc:32:93:03:e9:ed:5c:17:34:42:
         85:77:b2:ca:f6:30:08:55:ba:60:b0:d3:88:b8:d9:8b:5e:98:
         08:91:2a:2c:68:47:19:9d:3f:66:51:b0:42:f1:11:6a:6e:3a:
         25:c4:18:c6:59:28:84:8a:ce:11:07:30:d3:c2:77:82:ab:a4:
         14:6f:dd:5f:87:46:2b:73:b9:2c:a4:76:10:df:67:3c:b5:04:
         3f:d5:a0:29:8f:76:75:ee:15:bf:f4:49:c4:73:73:6e:2c:3b:
         07:20:24:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:42:46 2025 by rpki-client