Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7141b91-c60d-3388-bd39-756e0a01b6bd.roa
File:                     b7141b91-c60d-3388-bd39-756e0a01b6bd.roa (raw, json)
Hash identifier:          YnnElFv1hheCoeH9k25GtiqerqNWc8o7HBDkyEAUmuk=
Subject key identifier:   82:F2:A1:01:F4:C4:C4:D7:77:7C:37:05:1F:1A:29:8A:7C:95:28:7A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A6290A478628CA05F23406B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7141b91-c60d-3388-bd39-756e0a01b6bd.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        23.194.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:a4:78:62:8c:a0:5f:23:40:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=eb86b67c-1f7d-4653-924d-535fbccf0d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:85:b7:f7:8e:cb:5a:75:c8:64:0d:16:b3:9a:
                    98:eb:82:43:35:70:34:ad:e0:99:32:99:f7:5e:54:
                    5f:e0:c1:37:5a:ec:5f:c9:d2:7e:3d:2e:4b:6b:c8:
                    9d:2e:4b:48:f4:5d:41:b4:c6:ac:ae:8f:56:fe:6d:
                    c2:6b:e8:a2:83:25:02:69:0c:55:bb:e9:e8:b0:28:
                    b1:7c:cf:2b:28:c5:bf:fc:93:94:a2:e2:00:4b:92:
                    9d:24:c3:24:1b:bc:62:51:8c:6f:8d:39:68:ff:55:
                    67:9c:59:70:e5:fa:56:76:d4:21:8c:71:5b:b3:06:
                    e8:a8:e4:8f:ac:9f:b6:0a:86:79:90:d9:d1:b5:25:
                    59:ba:3b:0d:70:cb:bf:64:15:5d:5d:90:2d:0e:9f:
                    ac:5d:39:ba:07:90:b0:19:57:06:14:ac:32:a7:2b:
                    a6:2a:fc:35:90:cc:12:d9:0d:eb:08:46:16:43:48:
                    b1:42:6f:90:4b:de:ba:c5:e3:db:ce:04:f9:8a:bc:
                    68:54:b7:95:09:c4:91:8f:5c:f1:13:ba:48:00:74:
                    8d:f8:03:44:cb:25:12:c3:34:2f:ee:fd:e1:83:93:
                    f1:36:d4:fe:96:db:52:31:73:5b:57:f9:3e:ae:f6:
                    3e:42:5c:5d:a1:9c:a4:97:48:2c:68:0d:cf:b6:1b:
                    8d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F2:A1:01:F4:C4:C4:D7:77:7C:37:05:1F:1A:29:8A:7C:95:28:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7141b91-c60d-3388-bd39-756e0a01b6bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.194.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:f7:7b:6e:b9:93:91:c5:ee:26:ba:99:9c:15:92:9e:bc:d1:
         81:b4:ff:11:ac:21:b4:5c:85:16:3c:b2:75:ed:c2:77:c0:ad:
         e1:c3:31:ad:f8:6d:39:64:83:6b:cb:7f:a3:3a:45:b8:80:0a:
         4a:50:4d:31:67:b3:96:cd:a8:8c:4b:32:5e:00:0a:17:fe:68:
         98:da:ac:74:8f:95:71:95:19:46:8f:67:fe:e8:8a:93:85:ae:
         f2:86:34:7a:94:e7:ef:a6:b5:b6:42:f7:34:6e:35:a2:3f:43:
         f0:d1:d3:e5:c8:fe:86:be:d5:ce:32:4b:38:52:51:88:db:b4:
         86:e2:f6:5b:50:06:c1:d1:10:e2:b3:2a:c2:57:cd:8d:3b:2a:
         55:73:10:39:e4:3e:1a:10:65:57:08:2f:ad:6a:bb:31:cc:9c:
         1d:93:4c:5a:d9:7f:53:88:15:54:38:8a:9c:af:06:a7:9a:af:
         71:75:3a:0f:50:eb:9f:d0:5c:53:26:1b:14:a9:b5:0c:66:3a:
         b6:da:6a:cf:20:c3:b1:e7:60:c2:37:5d:92:66:96:2f:fb:3e:
         5a:4d:87:02:67:eb:18:ca:70:96:d6:99:64:40:29:b6:4d:63:
         62:dc:d6:c7:a9:9c:a2:f6:cc:02:c8:23:21:73:73:6d:1a:48:
         28:ad:8b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:46:17 2025 by rpki-client