Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1959e95-4c16-32a9-a049-d324b2dd4edc.roa
File:                     b1959e95-4c16-32a9-a049-d324b2dd4edc.roa (raw, json)
Hash identifier:          LrhfZMAQfXcfdvDxfzGjEXdJCqlT//l5VEomlD/trlA=
Subject key identifier:   B4:76:EE:AC:68:35:6B:96:90:9D:C4:D4:00:A1:2B:E0:23:A4:B5:06
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A7085EB5DC6ABB7AD869C6000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1959e95-4c16-32a9-a049-d324b2dd4edc.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     20940
IP address blocks:        23.211.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:85:eb:5d:c6:ab:b7:ad:86:9c:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=aeeb28b9-4d2c-49c0-ba40-90b069cbed4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4d:61:1d:ff:2d:a8:2a:b8:aa:a3:53:10:1b:
                    e0:09:0b:4d:1b:cb:89:ce:87:79:f7:47:41:8f:25:
                    a6:91:69:db:7b:88:2f:ac:da:4b:68:7a:3b:bc:9d:
                    8f:96:ef:08:65:6f:49:32:81:3c:0c:a1:46:15:50:
                    3f:2f:58:c5:5e:28:bc:c3:cb:a6:a1:c0:ba:be:46:
                    7c:5e:3f:f8:5c:d2:4f:ab:96:8b:b0:41:28:1e:9e:
                    a2:ef:fa:9f:d6:79:3d:84:b7:fd:ce:86:4b:8c:48:
                    ad:f6:ee:b4:fe:d6:67:47:02:28:73:84:f1:11:72:
                    7d:a9:7e:46:b4:2f:cc:26:cf:4b:6a:7f:8d:2d:53:
                    f1:d7:60:13:07:a6:ac:83:0d:6d:23:d3:62:71:1e:
                    8e:c6:e5:e4:e6:fd:c7:7c:8d:a3:c3:e0:34:63:46:
                    36:db:d7:25:3d:d9:fe:75:31:aa:43:8d:65:c3:58:
                    bf:3f:50:71:f8:f6:f7:e5:9a:20:7d:20:6d:1b:db:
                    99:f1:b2:24:eb:2e:38:40:93:9c:5b:50:de:6f:41:
                    27:2c:fc:84:12:de:01:59:c9:22:05:43:39:31:2f:
                    57:75:c9:de:4b:3e:c9:0e:b6:5d:37:35:8e:54:4f:
                    c7:ce:ba:56:8a:9b:36:b0:fc:e2:93:74:38:ec:07:
                    99:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:76:EE:AC:68:35:6B:96:90:9D:C4:D4:00:A1:2B:E0:23:A4:B5:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1959e95-4c16-32a9-a049-d324b2dd4edc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.211.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:20:e3:36:1a:95:9e:50:43:78:22:c2:1a:a0:6d:e6:bb:4d:
         87:dd:6b:4a:26:61:ea:90:7d:88:7e:e7:0c:bc:77:eb:c5:68:
         96:37:2c:cc:cf:e6:1b:fe:06:92:b4:7a:4b:64:b4:ac:83:4d:
         d9:10:da:bc:7e:f0:62:78:56:61:f1:65:e9:1a:68:6a:dd:1e:
         cc:fc:25:be:e4:f6:ac:b8:7f:04:38:0e:a1:07:42:52:cb:3a:
         a3:4a:44:ef:89:0e:66:16:57:9d:f7:c5:3e:14:80:d1:8c:d6:
         94:29:43:2d:51:dd:53:39:90:3e:4b:88:3a:87:61:b3:01:38:
         2f:b2:9d:bd:ac:71:a9:7b:24:95:90:13:ab:bc:f6:30:9c:ad:
         ef:46:6b:d8:29:17:41:8d:4a:d6:d4:c6:0a:c2:be:6c:30:01:
         80:cd:90:ac:3b:6c:b0:6a:d1:c8:d8:0d:e4:ee:54:f3:29:46:
         e3:0a:21:16:87:a7:42:0d:78:de:11:94:03:27:dc:1e:5d:da:
         ee:b7:02:d3:f6:67:a2:af:16:f6:04:23:b7:f3:ce:b5:2f:9b:
         6d:29:8d:27:28:54:31:85:7d:65:a3:9c:b1:0b:1d:9a:31:d1:
         dd:b6:0c:90:a4:b9:ac:26:6e:f6:42:d2:62:06:1b:21:d2:34:
         89:d0:9d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:39:13 2025 by rpki-client