Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/04ea8587-fe43-3201-bbfb-45cbc49c548e.roa
File:                     04ea8587-fe43-3201-bbfb-45cbc49c548e.roa (raw, json)
Hash identifier:          x34S0RdqQTFzdgYNSsQkPSkhAmddGHaxHKrlMSyPttg=
Subject key identifier:   9C:11:6B:5B:CE:55:DF:49:B7:18:D6:F7:4E:A8:9C:B1:4D:04:9F:76
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849E91F9F547BD951D0A1363360
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/04ea8587-fe43-3201-bbfb-45cbc49c548e.roa
Signing time:             Tue 20 May 2025 01:00:49 +0000
ROA not before:           Tue 20 May 2025 01:00:49 +0000
ROA not after:            Mon 18 Aug 2025 01:00:49 +0000
asID:                     12222
IP address blocks:        23.79.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e9:1f:9f:54:7b:d9:51:d0:a1:36:33:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 20 01:00:49 2025 GMT
            Not After : Aug 18 01:00:49 2025 GMT
        Subject: CN=683e0f59-efbb-416a-a77b-cf9403fb8047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:12:33:08:71:99:89:6b:f4:52:a1:c4:6a:a2:
                    b4:f9:1c:c0:bd:be:c0:9b:68:3c:da:9f:e0:f3:dd:
                    5f:21:1a:ea:b1:c3:17:84:48:7c:85:20:ff:a1:4d:
                    74:02:d6:60:de:e3:a2:d8:b5:2c:cd:a7:1c:ad:4e:
                    d9:12:6f:84:e6:8a:b8:2f:66:e3:0c:9c:98:1e:d1:
                    bc:1e:50:fd:92:36:ad:02:2a:13:7b:a9:45:48:f7:
                    42:12:58:40:1e:02:56:e5:9c:02:d4:8c:1a:01:51:
                    ba:2f:33:f8:4c:78:e3:46:d8:76:46:c7:56:f8:f9:
                    93:72:d7:d3:d7:6f:66:b2:f2:d8:e1:88:22:b7:14:
                    5b:10:41:87:83:c0:1c:45:99:42:16:db:93:db:cb:
                    60:42:4b:bd:0e:4d:59:a2:c6:57:83:cf:5c:be:c4:
                    b5:33:da:1d:f9:82:59:bf:04:32:f9:f7:66:5a:ae:
                    43:62:80:ab:2e:c9:d3:1a:1b:bf:f8:3e:22:b2:94:
                    85:08:c1:86:f0:23:0c:19:78:54:fd:ce:db:74:06:
                    c9:56:f6:6e:63:15:88:08:a2:a0:c6:96:76:5b:cc:
                    fb:fa:3e:10:28:16:9b:c7:8a:ad:6f:e5:08:c5:f3:
                    64:c9:76:88:59:7e:fa:12:98:e1:bf:94:99:91:c9:
                    da:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:11:6B:5B:CE:55:DF:49:B7:18:D6:F7:4E:A8:9C:B1:4D:04:9F:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/04ea8587-fe43-3201-bbfb-45cbc49c548e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.79.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:dc:bc:6b:a5:f6:f6:f7:f5:da:47:1e:96:0b:e3:83:dc:95:
         c6:e2:16:7c:a2:1a:9e:a4:5e:8a:d4:82:3b:90:c5:a8:c3:ac:
         1c:9d:a2:41:b7:06:41:c3:eb:bf:6a:08:6e:1d:7c:5e:2e:9b:
         98:13:08:53:cb:5e:da:73:6f:c6:18:52:12:cc:11:74:4b:9f:
         94:67:77:57:cf:dc:3d:e2:f3:97:bc:6f:3f:41:51:5b:50:98:
         38:e3:95:31:df:9d:b2:41:00:1c:63:be:4c:e6:e4:08:09:0a:
         4d:7d:de:31:72:85:95:37:df:e2:4e:cc:d4:a0:0a:c3:1e:3f:
         89:af:f4:14:3b:b9:f4:77:9a:d9:16:dc:a8:16:11:1b:d8:64:
         25:35:f7:eb:c9:8e:03:0d:53:c4:e1:ba:4f:d4:f9:05:49:a9:
         47:4a:71:f1:11:38:b4:fa:95:89:42:88:1f:a4:26:41:17:30:
         64:38:0a:06:a0:1f:e5:40:4a:c0:58:c8:79:91:47:ee:8b:1f:
         ec:3a:b1:c5:fd:de:64:0e:fd:8b:85:42:71:91:69:4b:16:f2:
         95:5d:c2:37:37:5d:57:b9:0b:fc:08:64:d3:d6:e2:28:19:0f:
         0f:07:a3:cd:3f:92:a0:3a:12:0e:d7:6d:2d:c0:87:5d:71:b1:
         c9:c7:c9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:56:54 2025 by rpki-client