Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2eea70b-cb5b-3cf0-bfd1-2621b8fe3318.roa
File:                     c2eea70b-cb5b-3cf0-bfd1-2621b8fe3318.roa (raw, json)
Hash identifier:          xlZs86ojEqVUFS0DwiiEYBjp5VkrWrP65+j6FL5WwLw=
Subject key identifier:   E4:16:1D:EC:44:BD:0B:0E:1E:BC:78:D7:F5:83:6E:CC:6A:2F:61:FD
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A7780952A6FF76602E3A4B950
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2eea70b-cb5b-3cf0-bfd1-2621b8fe3318.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     20940
IP address blocks:        23.205.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:95:2a:6f:f7:66:02:e3:a4:b9:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=ec41e129-d099-4d75-b07f-59fbfc226bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a6:57:0b:55:52:53:88:d8:67:d6:d3:7f:78:
                    ee:09:c9:58:e3:8c:29:a6:09:92:9b:1e:8f:99:95:
                    85:60:7e:3e:bd:13:45:36:6c:5c:4b:47:d3:ed:22:
                    60:d0:53:5a:de:48:26:85:67:ef:00:a6:b5:14:95:
                    d7:c6:ce:75:6d:c8:0a:6e:ad:4c:51:67:bf:34:8b:
                    f8:c2:23:44:60:ee:7f:9a:6d:bf:97:7a:6f:7d:91:
                    3b:ca:28:aa:87:82:aa:05:a4:13:77:1e:45:92:1b:
                    8b:c8:30:d8:52:f6:12:ed:ce:33:63:6c:d2:71:ba:
                    6b:1a:62:88:80:b3:ef:79:fb:df:25:72:c3:42:7b:
                    5c:a0:65:67:ed:54:eb:a3:10:80:38:58:a3:7c:0b:
                    5a:0f:a2:e1:05:c6:44:eb:84:a6:35:9d:f7:33:34:
                    70:57:15:1b:6b:11:a8:77:ab:01:a6:3b:d3:6c:3e:
                    c3:a4:53:36:6e:44:24:b0:25:dc:3e:da:f7:09:b8:
                    7e:48:4a:95:ef:f5:cf:a2:d7:a5:1e:f3:fb:b3:cc:
                    b9:3a:9f:be:1e:1a:b4:11:bc:01:a2:1a:b9:06:0a:
                    73:3d:af:01:66:5f:ab:f4:a2:bf:33:b9:7f:a5:15:
                    9d:21:04:d3:63:81:cd:66:66:df:8b:32:a6:2b:75:
                    52:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:16:1D:EC:44:BD:0B:0E:1E:BC:78:D7:F5:83:6E:CC:6A:2F:61:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2eea70b-cb5b-3cf0-bfd1-2621b8fe3318.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.205.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:2a:9b:74:c3:63:61:18:84:3e:b0:ae:49:70:ef:63:ef:ea:
         77:82:91:9d:60:66:55:46:89:c7:39:2e:df:ec:e8:9d:6a:7a:
         dd:a1:09:b5:5f:e7:71:76:0a:6d:d6:48:2e:34:fd:a4:3b:0e:
         80:ee:bb:c7:d7:76:33:d8:6a:e0:70:ca:9c:a6:b5:85:ba:12:
         c9:3f:4a:8d:86:48:24:9f:06:e4:8c:aa:ab:2e:3b:dc:13:b2:
         df:45:a6:2f:38:38:2c:fa:e9:07:eb:f1:88:12:d6:fa:53:4a:
         1f:91:ff:89:eb:84:cb:f8:49:18:e6:47:cd:eb:10:d1:e4:84:
         d3:49:fe:3e:84:54:11:ff:a5:d7:e9:33:99:9a:e8:d8:80:bd:
         01:b0:89:da:58:6d:5a:c9:39:ed:51:d0:7b:54:f3:c8:87:f7:
         71:70:62:02:99:a5:a8:8f:a6:26:5e:72:32:16:35:e1:c4:f3:
         a8:18:6c:f5:4d:c0:86:86:e9:79:7e:fb:c1:b9:df:0f:7a:a8:
         2e:cb:cb:56:59:30:95:5a:43:b0:97:9d:df:ae:26:a2:21:e1:
         45:76:f8:95:5d:d8:7f:a0:7b:fd:6d:8c:68:58:70:69:8f:3b:
         64:64:d0:0a:e9:7d:20:31:b7:82:25:73:3e:7d:33:f5:89:d3:
         03:0f:3b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:30:57 2025 by rpki-client