Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbb5b1a3-3cc8-34bc-abd8-d66d4ab7a459.roa
File:                     dbb5b1a3-3cc8-34bc-abd8-d66d4ab7a459.roa (raw, json)
Hash identifier:          YeKMOXLOlVx6wuAqKjQ76A7bHeVmpEXI+hUrqtPueh0=
Subject key identifier:   F8:0D:3A:ED:21:6E:A4:C3:0E:0E:3C:F3:B0:47:34:F4:34:E2:27:4B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A6290A3D0DDFE7492723A6CE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbb5b1a3-3cc8-34bc-abd8-d66d4ab7a459.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     35994
IP address blocks:        23.194.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:a3:d0:dd:fe:74:92:72:3a:6c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=edaffc62-075e-4d50-8f89-c3f5bc7da034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3a:4d:99:f8:af:b3:6a:9d:38:ef:64:43:ac:
                    2a:77:bf:4c:70:e0:0f:a2:ae:ac:b2:e8:38:ca:6d:
                    90:da:7a:1c:c4:34:00:bc:46:ab:f3:72:18:76:db:
                    8a:5d:ff:02:4a:0c:d8:93:ee:52:a8:6f:9d:44:25:
                    d1:b7:12:67:e8:88:c1:87:e6:61:e1:c3:cc:4d:ea:
                    95:44:74:75:94:76:db:88:60:5e:18:9b:9a:5d:5e:
                    e5:45:cd:8b:2f:3c:b1:51:12:ba:cb:b1:39:a8:b5:
                    f3:f6:ff:7c:77:3d:aa:2b:a3:a5:40:2f:c5:86:a8:
                    88:e4:31:f4:c9:f6:38:41:c5:9a:9e:73:73:52:6c:
                    79:a5:47:63:ee:67:93:59:84:aa:9b:14:87:a6:eb:
                    e1:fd:41:a7:77:3e:25:60:a8:d5:d6:c7:99:5f:6c:
                    d9:c4:85:84:83:af:a0:c7:a9:d8:86:a0:5b:4d:bc:
                    e7:3b:b4:38:75:7e:47:aa:51:af:2a:87:e4:c0:71:
                    cf:d3:a5:c9:71:27:78:b1:6f:92:65:c1:23:23:c3:
                    8d:a8:3b:ce:da:7a:a0:50:52:bb:44:8e:14:a3:c7:
                    d8:83:5d:ff:73:83:9f:91:64:63:d5:1e:0c:12:54:
                    99:fe:e9:70:89:95:b1:ea:44:2e:59:5c:55:bb:af:
                    33:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0D:3A:ED:21:6E:A4:C3:0E:0E:3C:F3:B0:47:34:F4:34:E2:27:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbb5b1a3-3cc8-34bc-abd8-d66d4ab7a459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.194.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:b4:21:50:7e:7b:4f:4a:85:dc:6a:d0:d1:51:75:68:19:d6:
         c0:c0:64:bc:5f:49:30:e1:5d:f6:2d:12:49:4b:8e:f0:19:e3:
         6a:37:9a:84:b6:d2:f8:84:02:c3:c8:11:56:3f:4a:6c:05:e8:
         e6:2d:1d:a9:af:05:fc:64:6f:15:de:90:19:2b:f4:13:fd:47:
         52:37:66:4e:09:45:2c:ed:b7:80:1d:22:eb:28:7e:ad:d0:d9:
         a4:6c:42:1d:3c:84:c6:38:af:03:0a:f2:18:9d:54:d9:c4:ed:
         da:29:c9:0d:43:d5:ad:67:e7:16:9f:e4:a1:b0:80:1a:10:89:
         29:7a:62:d2:15:3e:cf:bd:e8:8e:9a:06:b7:22:31:a5:09:d6:
         2d:2b:cd:d3:65:3f:1e:5f:30:b1:94:b2:62:bb:fe:3c:f5:09:
         a9:98:d1:27:19:d8:82:92:1c:d5:9c:fb:34:8c:25:17:00:a7:
         9d:a5:97:cf:fa:66:39:30:c4:01:1d:6c:c1:79:40:41:50:a1:
         73:96:10:d2:d4:d6:04:63:97:bc:97:b5:09:7a:57:ef:7e:94:
         92:10:ba:b4:a1:14:cd:7e:79:33:49:18:c5:18:7d:ea:5e:6c:
         9e:14:5d:aa:e2:4d:c8:bf:e3:a6:c5:f5:ff:ab:70:f0:c6:7d:
         54:c9:e0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:33:35 2025 by rpki-client