Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae79dfd9-f2fc-3f03-bb15-ee2028c7020a.roa
File:                     ae79dfd9-f2fc-3f03-bb15-ee2028c7020a.roa (raw, json)
Hash identifier:          bW/tK3D2JmuhxsLdpgNKG2mcnJ8MIW+m1QfLlpYRSPQ=
Subject key identifier:   99:45:A3:5F:45:1C:EA:1C:5E:D3:EF:C0:B5:64:AB:B8:8D:47:B0:E2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A6290B51308CE4CFC812EDB80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae79dfd9-f2fc-3f03-bb15-ee2028c7020a.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     55410
IP address blocks:        23.193.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:b5:13:08:ce:4c:fc:81:2e:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=3132d0be-4a2f-40df-8c9e-b65fd8c708aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3e:a7:e0:21:37:72:2c:1d:64:ce:66:39:4f:
                    94:87:a2:61:99:39:a5:2f:14:d5:be:8a:6d:a1:95:
                    63:fb:4b:d6:24:80:0a:44:a1:4c:32:5b:48:aa:3f:
                    aa:f3:89:a5:c7:4c:1d:01:74:67:23:71:38:fe:82:
                    c4:3a:c6:0b:b7:83:4b:c0:d8:7d:41:85:06:ab:36:
                    15:b0:61:7e:5c:f9:8e:5b:e0:29:71:21:42:67:78:
                    2d:69:00:af:c8:c9:d6:25:4b:d8:30:82:3c:17:56:
                    86:70:a8:41:f3:73:a7:9d:0c:b2:e1:95:a0:25:06:
                    f7:bb:27:f0:0c:03:d7:41:0d:43:df:91:7c:cc:af:
                    6c:a1:c2:b9:d1:46:a3:43:0a:91:e6:dd:d0:df:a6:
                    9c:a0:f8:93:fa:60:e2:c0:87:18:a2:42:3b:03:48:
                    4e:78:26:3c:1c:79:5e:ef:23:03:55:8f:29:15:86:
                    d0:f8:6e:25:bd:5a:cc:4b:c3:4e:f3:e8:e5:35:a8:
                    b5:89:e4:51:9f:48:a9:53:bb:bf:28:26:54:fb:84:
                    44:33:d3:7c:57:93:fd:fd:2b:68:28:9d:48:9a:0a:
                    4c:c7:0e:08:5d:e7:85:51:ab:a0:92:29:28:68:10:
                    43:a0:15:1c:a0:62:75:50:45:e1:0a:48:0c:e0:49:
                    18:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:45:A3:5F:45:1C:EA:1C:5E:D3:EF:C0:B5:64:AB:B8:8D:47:B0:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae79dfd9-f2fc-3f03-bb15-ee2028c7020a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.193.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:12:4a:7a:e4:24:49:ba:e7:d2:a0:c4:62:54:3e:61:6e:99:
         32:8f:85:93:03:81:78:9f:82:05:10:aa:85:d7:73:60:1a:7a:
         23:83:83:c3:57:f1:50:6f:40:9a:19:48:93:52:71:1a:7c:f4:
         53:3e:bc:f3:6e:7d:d3:36:8f:11:40:65:dd:cf:cf:04:e6:19:
         06:a7:47:bd:3c:51:c6:1d:52:57:9c:a0:a8:90:8d:3c:ab:60:
         fa:d1:66:2e:a6:7b:90:cd:50:44:37:ff:9f:c2:f6:61:20:19:
         bb:ec:40:91:eb:d9:79:a4:de:3b:e7:d7:65:8f:bf:59:be:4e:
         cb:36:72:83:56:4d:95:b1:35:68:5d:fa:42:5e:e0:87:2a:78:
         9b:55:f0:6d:6e:24:af:41:05:9e:1e:e8:d7:23:4c:41:ba:e1:
         70:96:35:f4:c9:d2:cc:99:69:1b:18:90:c5:71:2e:31:a5:6a:
         c7:13:21:60:79:d1:35:e7:5b:eb:fa:4e:4f:4b:40:30:3a:19:
         14:43:67:9a:9d:6d:90:f5:57:70:c1:22:40:09:47:1d:9e:2b:
         1b:2a:c2:1e:8f:36:f7:5b:69:a6:46:c2:68:7d:66:5b:0d:44:
         87:2f:df:c3:9c:3b:59:ab:91:5f:51:3f:72:f0:d0:31:b6:07:
         41:3c:4b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:03:59 2025 by rpki-client