Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5d68e67-1ae1-300e-9349-f8526485e4cf.roa
File:                     c5d68e67-1ae1-300e-9349-f8526485e4cf.roa (raw, json)
Hash identifier:          wFWBF04htqd37PRrw9gvfMJLgT2/eDCD4tx3XKNYnsM=
Subject key identifier:   D2:ED:95:B5:DC:99:01:EC:10:96:E5:10:B7:65:55:8A:67:D3:A3:F3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A66C0920A966F5579E7D8AE00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5d68e67-1ae1-300e-9349-f8526485e4cf.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     20940
IP address blocks:        23.200.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:92:0a:96:6f:55:79:e7:d8:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=722fe703-cdf9-48e7-9029-159f37a7f988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:08:ed:6b:43:2c:b6:30:80:57:7f:0a:92:ad:
                    b2:85:0f:64:33:da:21:a7:07:b0:f2:0a:1a:d3:d2:
                    1c:4d:a3:64:be:8d:a7:54:7d:6c:12:ab:17:10:12:
                    e9:99:83:d2:0d:03:5d:ba:b9:4e:0d:7d:fe:d5:02:
                    7a:a2:8d:a4:34:00:da:10:55:51:82:e3:5d:99:4a:
                    2d:4f:aa:d4:ac:2c:df:1b:2b:50:b3:fa:8f:03:7d:
                    ba:04:e8:b7:b5:89:31:6e:15:80:18:c3:26:52:8d:
                    8e:d8:6f:45:fa:6e:7c:e0:9e:39:45:13:a7:82:66:
                    64:88:41:71:e8:77:ef:c2:34:df:42:93:49:c3:57:
                    ee:17:37:99:15:7c:f9:8c:c8:90:6f:61:58:57:31:
                    f1:14:0a:0e:1a:91:37:44:29:d1:43:a6:59:b4:dd:
                    c9:a2:36:d9:bc:4f:01:e9:d4:40:ad:9c:55:e6:c0:
                    9c:33:0f:34:de:ba:53:b5:c8:6e:78:96:be:f4:86:
                    4b:e5:a9:3c:59:10:15:d4:62:1f:0f:7e:26:76:5f:
                    05:46:8d:6c:dd:a5:69:22:b3:64:57:c7:5e:a1:8d:
                    bc:d6:c8:cb:35:53:5e:68:50:06:a4:da:cf:7a:20:
                    32:ec:51:30:03:3f:47:f3:d2:ae:bb:96:2e:d7:59:
                    7c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:ED:95:B5:DC:99:01:EC:10:96:E5:10:B7:65:55:8A:67:D3:A3:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c5d68e67-1ae1-300e-9349-f8526485e4cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.200.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:c5:6e:77:cd:a6:ad:2b:31:80:84:b4:a3:74:d5:3b:44:ba:
         da:42:0f:17:09:12:3f:57:a2:1e:a8:0c:9c:4c:dc:8e:61:1e:
         eb:4b:d1:41:2c:95:62:a5:39:f0:bb:f4:1b:5e:7b:01:b7:f6:
         b3:60:fe:de:7f:8c:88:fa:f8:49:16:2b:4d:53:56:b2:21:12:
         1c:8d:bd:fd:93:2d:e7:72:e7:1b:43:3c:32:f5:7f:90:af:fa:
         18:95:a7:52:ba:b6:6e:f5:06:f8:92:cd:30:d0:54:c7:33:d4:
         64:a3:fc:4d:49:32:4c:7b:18:86:2e:ef:01:19:52:fb:7f:72:
         4f:6c:f5:cd:6f:cf:52:c6:fb:8c:d6:89:c3:15:0e:3c:6c:4e:
         2c:9b:62:ec:f0:b2:88:77:b9:90:3e:3a:5d:9a:4b:47:74:e1:
         5a:02:6d:60:45:3c:9e:1d:d2:c8:76:f4:8c:c1:d8:01:82:4b:
         8d:ef:2d:ed:aa:63:c8:a9:6b:5e:45:1c:bd:55:75:c7:89:9b:
         bc:b7:77:8b:ac:c4:8e:be:e7:29:ce:f6:fb:1b:59:60:c7:d0:
         7b:f9:48:58:5e:81:b0:c8:99:e3:80:13:13:c0:bb:45:14:0f:
         ec:ae:e1:c2:26:7d:7d:07:c6:56:f5:42:dc:38:ef:4f:75:d8:
         60:e1:6d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 00:05:36 2025 by rpki-client