Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb59342c-c19d-337a-bfa8-a6ef57425d89.roa
File:                     fb59342c-c19d-337a-bfa8-a6ef57425d89.roa (raw, json)
Hash identifier:          bLoiqFdiuifQkcTphvYfomAUmgxuaP1nJ7Q5tKtiY8U=
Subject key identifier:   01:11:0F:42:1D:6D:0C:38:2F:34:89:B1:D0:28:66:FE:96:3D:9A:FD
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A7A4B5290C92D982C25405B40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb59342c-c19d-337a-bfa8-a6ef57425d89.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     20940
IP address blocks:        23.212.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:52:90:c9:2d:98:2c:25:40:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=9d5c1b57-cfaf-41b3-b3b9-ad78e88e50fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c3:e0:2f:e2:f6:56:67:24:96:59:83:84:29:
                    1a:f2:34:60:b0:d1:ab:b4:ec:0d:54:8c:b9:5f:a9:
                    fa:d7:5a:fa:96:a2:1a:99:ec:94:d4:d5:a0:bd:a1:
                    0b:65:44:68:f4:f3:27:9d:a2:4d:c3:21:85:b2:6c:
                    d5:b4:47:e2:12:3c:b0:66:b5:c6:d1:ee:00:7a:1e:
                    45:db:61:7b:78:c5:ad:bb:48:09:bf:6b:9e:c1:10:
                    8d:0c:93:00:28:70:50:d8:a2:9f:2d:2a:81:34:0d:
                    bc:8f:b3:15:56:fc:ad:62:e8:65:d2:fe:4e:f3:47:
                    2f:b2:ae:33:3e:a6:18:b8:fc:59:20:5d:44:57:d0:
                    9b:4c:3e:e6:1e:9d:fb:80:fa:c8:f3:77:a0:91:c1:
                    ef:11:34:27:30:bc:33:ba:10:f9:89:6d:48:c5:90:
                    aa:f4:3e:fa:29:1f:45:79:0d:75:44:61:98:56:17:
                    95:e3:05:5c:26:c1:dd:86:f2:c4:02:10:94:34:1d:
                    94:91:d7:1f:68:f6:2b:4e:48:a1:31:ab:85:3d:fe:
                    94:1e:ef:0d:b9:fc:bf:66:c7:83:4a:8b:3f:0d:e0:
                    2c:ee:9a:3f:cd:29:da:30:1e:de:29:12:8a:71:5e:
                    d1:3d:b0:cb:9c:44:9a:1e:b2:8c:96:58:43:9e:bb:
                    f9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:11:0F:42:1D:6D:0C:38:2F:34:89:B1:D0:28:66:FE:96:3D:9A:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb59342c-c19d-337a-bfa8-a6ef57425d89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.212.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:c6:9d:40:5e:5a:d4:28:5c:d0:7b:51:f9:1a:86:fc:de:bf:
         6a:41:d2:7e:b2:f6:09:54:0f:ad:e1:95:46:6c:dd:92:c8:01:
         d5:da:6a:10:43:db:dc:a8:36:d2:c6:c9:55:df:e9:ae:32:fc:
         4d:8a:63:c2:e8:57:cb:d7:8d:74:e2:5e:0b:a0:83:39:7c:f4:
         12:24:38:63:21:b9:d7:29:03:59:7f:b9:ff:3b:0a:f3:f8:0d:
         a5:25:ea:02:8b:c3:f8:2f:db:30:c7:7a:f0:b8:7d:0c:f6:72:
         0b:f3:c9:8e:7e:bd:0b:9e:6e:95:82:55:11:d8:1c:86:90:7c:
         7b:69:f3:f3:89:87:ab:59:96:59:29:bd:54:60:83:d4:9c:00:
         e6:48:0a:79:77:3f:1e:57:0d:e0:b9:86:a1:60:2f:81:36:a6:
         81:20:04:9f:8e:f3:ac:d9:e5:85:70:76:f6:ae:c2:79:19:8a:
         5b:a5:fa:1a:f4:03:b0:e4:9b:2e:47:7c:88:0b:f9:72:cf:40:
         45:ee:9e:67:fb:e2:67:11:af:50:36:c3:a3:58:de:cd:c7:94:
         5c:0c:2b:d3:c2:be:73:a2:7a:90:80:a9:e3:16:43:18:e0:e8:
         ed:f7:ab:0c:6f:b9:35:2d:83:98:16:55:eb:22:96:4c:ec:b7:
         73:a8:0f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:54:56 2025 by rpki-client