Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6c5efb4-92fe-305a-92ec-dcfcaffc738f.roa
File:                     d6c5efb4-92fe-305a-92ec-dcfcaffc738f.roa (raw, json)
Hash identifier:          zd65urd6W40nEZX32uQWtpuswMVQb/cQEdM5KAZ5f3E=
Subject key identifier:   CE:A8:6E:E3:FD:55:80:63:C4:20:51:B0:86:D3:DA:31:DB:34:7F:0A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A7A4B4FD2C126FE0D21CE9440
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6c5efb4-92fe-305a-92ec-dcfcaffc738f.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     7679
IP address blocks:        23.210.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:4f:d2:c1:26:fe:0d:21:ce:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=e6a72616-d338-479d-8c57-9d8454651072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ea:01:1a:63:f0:79:0e:bf:d3:ba:2c:48:4e:
                    e8:72:f1:de:d8:e4:23:79:77:14:6a:36:73:2b:21:
                    06:40:f1:42:b7:8a:71:8a:7b:98:a2:dd:13:65:9d:
                    35:cf:8e:f8:e7:a1:aa:cb:ff:a5:8b:6d:1f:84:4d:
                    c4:ab:b1:c9:ad:0f:4c:23:6e:19:ea:57:42:40:a4:
                    26:57:c8:69:bd:d3:4a:6a:34:4c:0a:f3:95:ab:15:
                    0c:f7:ee:2d:96:92:d7:32:db:d4:6a:4b:06:f0:01:
                    70:63:89:76:c4:ef:1d:ed:e9:c9:ee:57:39:e2:af:
                    e0:dd:d8:68:b0:ea:42:25:b1:69:e2:da:37:3a:42:
                    f9:6c:11:31:98:cb:89:bd:48:1c:a9:df:c6:d0:73:
                    b1:24:24:ed:c8:de:c8:a7:9c:06:d0:dd:3d:08:12:
                    b5:e9:92:69:ec:d7:40:63:3d:e3:b1:d9:de:62:5d:
                    c9:e9:fe:d7:ed:f8:81:82:cb:19:14:40:ab:3e:ce:
                    13:2d:de:b5:8e:c4:b1:bd:0b:2c:ee:cc:39:5c:92:
                    29:34:81:26:5e:65:7d:2d:5d:00:9d:8b:8d:2f:70:
                    ef:51:27:17:96:fa:e2:92:4b:fa:5b:f3:4d:95:91:
                    32:24:d7:ee:17:4d:fb:80:97:d5:72:6a:14:39:6a:
                    d3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A8:6E:E3:FD:55:80:63:C4:20:51:B0:86:D3:DA:31:DB:34:7F:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6c5efb4-92fe-305a-92ec-dcfcaffc738f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.210.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:56:84:2f:da:3f:86:ae:ce:07:18:59:1f:13:84:68:21:cf:
         f0:a7:71:09:be:a1:53:29:9f:29:e9:17:29:ff:f5:56:ac:08:
         18:3a:92:47:aa:c9:93:3d:a6:2e:a4:f6:6e:cc:b4:3c:84:01:
         14:83:6c:e8:3e:9d:9d:06:dd:6e:54:ac:69:d9:ce:24:9e:e8:
         90:68:fa:3b:ec:8b:79:12:75:a5:26:61:81:23:89:7f:23:04:
         34:4b:b9:b4:57:4d:63:7f:d3:4b:91:6f:85:05:f4:b2:aa:79:
         e0:b3:2b:2d:de:04:0c:71:44:96:91:be:38:10:de:1d:32:73:
         17:ee:1a:f1:cb:1c:31:43:29:e7:33:6b:90:69:0d:58:53:0d:
         0d:48:ce:5a:09:32:bc:29:cb:2b:66:fe:df:76:4c:62:e2:7b:
         b7:19:49:0e:ad:07:04:3e:62:92:c4:5a:a6:c3:d9:49:2a:51:
         37:15:36:ed:cc:19:f8:c3:57:4e:a1:55:48:ea:4b:24:79:50:
         0e:e6:f8:8f:60:2b:18:44:c3:e0:83:f9:2f:50:fd:ff:86:45:
         bd:37:b2:52:c3:63:64:97:0e:9d:8c:b2:c8:c6:39:d7:3f:62:
         4e:5e:ec:96:12:21:51:01:5f:c9:fd:e1:53:fe:84:1b:24:c9:
         89:60:f0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:26:19 2025 by rpki-client