Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ebef180-3425-3d62-8313-9b404498163b.roa
File:                     0ebef180-3425-3d62-8313-9b404498163b.roa (raw, json)
Hash identifier:          aUsplQl+z4TQnV/0kaexJnrym1R/CcGQIeXeUArBy2U=
Subject key identifier:   79:E4:E0:0C:F2:F8:23:90:6F:12:07:5A:F1:47:29:D0:5A:51:E9:62
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849FE1006D15DEA53418DFAFA00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ebef180-3425-3d62-8313-9b404498163b.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     20940
IP address blocks:        23.72.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:10:06:d1:5d:ea:53:41:8d:fa:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=dc568877-a301-43c7-8b56-54eae3489688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:f0:02:46:6f:55:b8:72:de:3e:e0:0c:7e:02:
                    db:e2:e0:71:1f:38:47:e4:ec:df:84:aa:c9:cc:90:
                    ae:65:a8:2b:16:1a:d6:67:b0:c2:39:62:58:64:28:
                    5a:bf:ba:2f:59:f1:55:14:fa:44:74:60:f0:4e:e4:
                    4f:fa:ae:1e:3c:f9:2a:cb:0f:5b:f1:70:74:d3:8b:
                    79:f6:51:6d:5f:e7:4b:10:c9:1e:28:d7:cd:67:13:
                    04:10:c2:59:d6:6e:02:3e:75:55:88:dc:de:fa:54:
                    56:0d:0c:92:69:c3:d5:27:2d:14:4c:d7:81:bc:da:
                    f7:29:77:04:64:88:53:68:93:4e:a3:56:5e:40:e9:
                    b2:de:ba:e5:a5:40:9d:7c:e5:73:5e:88:61:30:b6:
                    fd:f9:eb:41:a4:ca:91:c3:22:5b:20:92:9f:66:13:
                    e9:b3:fa:f1:b4:3f:24:d6:cd:aa:33:80:77:45:ff:
                    74:26:d8:c2:2e:4a:e3:2a:4a:2b:16:27:74:1e:6c:
                    2e:da:6a:e8:90:fb:33:31:2b:a6:ee:1c:8e:94:45:
                    cc:5a:63:3e:28:ae:09:b2:77:7c:76:9e:a9:33:ae:
                    0e:36:6b:73:4f:c1:1f:0c:2f:af:4c:96:1b:d0:ec:
                    69:95:22:b7:23:43:9e:bc:17:45:c2:73:93:43:32:
                    ed:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E4:E0:0C:F2:F8:23:90:6F:12:07:5A:F1:47:29:D0:5A:51:E9:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ebef180-3425-3d62-8313-9b404498163b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.72.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:02:3e:70:3d:5e:7f:ae:e5:3b:0c:02:fc:14:6d:bf:3f:76:
         61:83:f2:7b:ad:42:6e:04:e5:65:b6:32:1a:8c:19:b5:87:18:
         8f:ad:6d:9c:90:16:24:ee:6a:43:b3:af:21:b7:c9:21:ef:21:
         0a:8c:d4:bd:d8:3c:82:65:87:db:e6:3a:dd:28:5c:0a:fc:b4:
         29:b3:9e:93:2c:df:2a:5f:aa:13:9c:17:c7:e5:d9:06:b9:84:
         74:fe:8c:3e:83:5f:dc:5a:54:22:a1:6f:5d:99:ab:ef:71:e7:
         3c:f7:79:90:21:d8:9e:97:b8:b3:34:ca:9f:b9:1d:4c:ff:3c:
         d1:ef:3e:ed:ef:01:3e:38:c0:bb:7b:92:8f:2c:cb:c8:df:44:
         3f:28:9b:73:5e:6b:79:19:51:16:60:21:7c:90:e1:cd:db:50:
         91:48:6b:6d:c1:c3:6a:2a:75:5b:74:ce:6d:34:ea:7e:3e:6e:
         ef:9d:72:b4:cb:0b:2d:46:7d:a1:31:45:77:55:71:f1:0d:e5:
         7f:4b:49:60:39:34:1f:49:9f:12:b1:5e:4a:1a:c1:38:bb:c6:
         46:3c:84:fd:ab:b1:1c:76:44:83:10:ab:30:24:46:d3:b2:e0:
         0d:32:53:ea:c1:53:17:09:02:4c:91:07:f1:9c:75:bf:a6:9d:
         05:f4:f0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:54:02 2025 by rpki-client