Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b085784e-7264-3c8a-8d0f-3d7c604697aa.roa
File:                     b085784e-7264-3c8a-8d0f-3d7c604697aa.roa (raw, json)
Hash identifier:          i9g5ki6jQzrBzxjdPAZZk/djiBEYP5iGsL6LnyiFroA=
Subject key identifier:   31:C1:5E:97:1F:15:A1:9C:5D:1B:98:A3:1B:A3:12:5E:90:CB:53:DB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A761B6A01354C277010E3F150
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b085784e-7264-3c8a-8d0f-3d7c604697aa.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        23.35.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:6a:01:35:4c:27:70:10:e3:f1:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=48eddb10-2b1c-4196-af38-2db365277f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7d:53:16:1d:d2:af:83:5b:9b:30:67:27:a5:
                    51:3f:82:c8:40:62:f6:f6:f8:38:b3:cd:a7:f1:75:
                    1b:a3:bc:c5:4f:1a:4f:9c:28:94:59:6a:f4:d2:4c:
                    34:c1:e4:af:3a:6e:49:54:bc:58:db:3d:bf:f4:c8:
                    ff:07:d9:87:3d:59:e3:31:09:36:ce:43:bb:62:d7:
                    fd:df:02:a6:b4:33:94:52:a8:22:2e:85:df:a2:9e:
                    eb:a7:9d:92:d2:1a:ec:fe:49:de:36:cf:83:0e:13:
                    37:58:b6:fb:c7:97:28:45:be:c5:ec:05:de:c0:f7:
                    f9:5c:70:91:80:fd:2f:c4:f1:29:80:d4:e8:4e:89:
                    87:41:59:ba:89:bf:18:20:be:7c:e0:4a:4d:ac:ec:
                    3c:ce:77:c8:eb:79:0e:c9:6c:55:38:c1:ce:31:2f:
                    7b:17:3e:90:84:22:d3:21:d0:76:e3:de:8e:8c:b6:
                    0f:2b:95:53:55:2c:65:4c:21:b2:1e:cf:d5:f9:52:
                    2b:05:9e:db:57:1f:0f:8a:32:44:5e:fd:6d:6f:8a:
                    fd:58:77:96:d4:73:23:10:7a:1d:b7:47:8a:c3:24:
                    78:71:02:c9:f8:a6:d4:a7:48:e3:78:fb:93:84:25:
                    35:8b:80:5f:1b:b5:b2:f5:62:3b:bf:71:8d:4b:7c:
                    0f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C1:5E:97:1F:15:A1:9C:5D:1B:98:A3:1B:A3:12:5E:90:CB:53:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b085784e-7264-3c8a-8d0f-3d7c604697aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.35.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:86:90:22:cc:e9:45:cc:96:0e:43:b8:ec:ff:93:5c:e1:d4:
         fb:7e:17:5f:b3:85:de:49:04:e8:76:7b:68:9c:87:7b:be:09:
         e9:0d:6d:f2:20:5f:b7:58:9c:b7:57:16:d9:a5:0d:bc:3d:e0:
         31:5a:b4:3c:19:90:c0:3b:37:a3:1b:bc:2c:dc:32:cc:f5:cf:
         42:4a:29:8b:9b:c1:f7:11:8e:20:ed:87:b2:9b:74:2f:18:1e:
         e3:0a:03:a9:e5:3b:fa:f8:6c:5b:1e:65:ac:d1:97:ff:6b:72:
         4b:a6:00:5f:ab:6e:f3:9f:53:c3:3b:b0:e2:dc:d0:16:02:e5:
         76:92:df:bb:cb:4f:1e:e2:4a:cf:e3:9a:08:cd:68:57:9d:6a:
         c2:e9:4c:69:84:a9:17:79:f0:59:a5:f5:10:05:4d:5a:a2:eb:
         60:c6:66:b9:7d:37:5b:c6:07:6c:68:4f:d0:9c:bf:75:ca:58:
         82:37:5a:40:ae:41:cd:a1:20:f8:d2:a9:82:fe:5e:76:f3:ea:
         de:ad:32:80:3c:5b:16:f5:fd:d0:5d:5a:06:68:e1:9d:a5:4e:
         91:c0:05:99:6d:ad:25:14:c2:e6:14:27:af:51:b7:db:68:a6:
         3f:44:80:e5:05:5c:07:7e:c2:a1:1f:6a:6b:dc:3d:5f:65:68:
         16:4e:f6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:39:51 2025 by rpki-client