Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e69fff0b-4e62-3817-8920-b8a9227d823c.roa
File:                     e69fff0b-4e62-3817-8920-b8a9227d823c.roa (raw, json)
Hash identifier:          RNj95Q64mJvSA+pTzuJkteVBeU+a1W86WJcR/qbaYws=
Subject key identifier:   ED:4C:D7:87:F4:BF:A3:71:13:D0:D1:A7:93:EB:DB:3F:55:31:96:44
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A8B0B682C233E102E6A9D2400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e69fff0b-4e62-3817-8920-b8a9227d823c.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     20940
IP address blocks:        23.221.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:68:2c:23:3e:10:2e:6a:9d:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=3a5b9241-b52d-447a-a0bc-44073106e1d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fc:d0:03:0e:58:e9:f4:a4:42:f8:8b:54:f7:
                    02:54:82:aa:0c:27:3d:bb:18:69:16:cf:35:87:60:
                    18:bb:2b:f7:f7:99:68:6d:cc:d0:5f:0c:b3:63:33:
                    fe:e7:93:dc:33:40:fc:79:88:52:ea:21:97:c3:52:
                    39:d2:c6:47:ba:85:48:fe:b6:c7:82:8f:d1:d3:ab:
                    a6:86:bd:65:6e:c5:2f:1b:4c:09:7f:e9:00:55:4e:
                    b3:d5:5e:5f:50:bc:b5:d4:a2:39:51:ad:b7:5d:18:
                    69:61:e0:99:ae:89:22:a1:e5:45:fa:c8:f5:91:2e:
                    6c:2d:03:6d:59:a7:a4:e9:06:b1:18:1a:d8:1d:54:
                    e9:a7:4a:76:d0:0a:63:67:67:05:24:04:1b:b5:ef:
                    19:4a:e1:e3:12:97:86:cb:c7:35:7c:a6:cc:c6:b3:
                    71:2e:44:9f:c6:62:83:e7:b5:cb:9a:5c:67:59:89:
                    15:5f:97:d7:07:b7:d1:42:2c:38:8a:cb:82:55:55:
                    da:d9:83:91:68:db:6a:5c:ac:ce:7d:f6:fa:32:fd:
                    e5:11:9d:cc:56:f0:7d:79:fb:51:8a:be:e2:a8:de:
                    d3:ba:af:00:0c:e3:20:60:e3:56:64:c4:3d:13:81:
                    e5:57:b5:ac:2e:de:9d:a6:f2:97:5d:1d:dd:31:d0:
                    9b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4C:D7:87:F4:BF:A3:71:13:D0:D1:A7:93:EB:DB:3F:55:31:96:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e69fff0b-4e62-3817-8920-b8a9227d823c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.221.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:2c:14:74:8c:08:68:99:0c:f9:0b:e7:97:c4:cd:8a:ad:51:
         27:49:62:b7:e2:28:88:42:a1:d3:1c:ac:1f:4d:7c:7e:7b:28:
         df:66:06:da:43:9e:40:3c:77:e8:e2:a6:33:aa:5c:fd:1a:75:
         4d:68:7f:a0:fb:b5:8d:42:8c:e2:da:80:00:2c:17:ae:00:14:
         45:f4:84:a0:18:42:2d:c9:10:e9:7b:23:3b:02:40:fe:f8:aa:
         37:7a:c0:e9:89:6d:ed:44:f2:12:ef:6a:37:59:85:a2:6a:88:
         78:b4:b5:db:73:51:19:9d:44:c2:36:78:10:51:47:e6:23:dd:
         8b:fc:d4:01:cf:58:e0:5d:b7:6f:88:c9:47:39:61:50:94:a1:
         00:34:9b:d9:66:da:6a:50:b7:fa:29:d3:52:fc:95:89:d2:94:
         e4:09:d5:82:71:1e:a4:9b:2e:07:65:0d:95:be:b0:10:ed:79:
         a8:bc:c4:8b:62:54:1e:2e:15:af:fa:a0:ed:e1:0c:86:3c:7e:
         08:67:42:87:75:72:58:fb:84:f4:84:62:82:7d:35:d3:e5:56:
         c5:fe:28:94:82:0f:07:bf:56:4a:ef:6e:b8:80:b5:18:27:c3:
         52:78:42:51:50:11:e6:c3:2f:a3:eb:83:c1:40:cc:54:19:93:
         f7:95:cc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:52:13 2025 by rpki-client