Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a6b5a7d-2972-3c38-b449-1cf4dad5f87b.roa
File:                     1a6b5a7d-2972-3c38-b449-1cf4dad5f87b.roa (raw, json)
Hash identifier:          DIKK0Pw4vjjxLFpuUd+eH5uvEnHtAsweJwr3DHXbgTU=
Subject key identifier:   53:0B:37:D3:36:AB:C3:95:11:C0:1A:50:55:6F:D4:9B:BE:37:A7:BC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848B8F0D769FB4956D971E8D2C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a6b5a7d-2972-3c38-b449-1cf4dad5f87b.roa
Signing time:             Fri 31 Jan 2025 02:00:39 +0000
ROA not before:           Fri 31 Jan 2025 02:00:39 +0000
ROA not after:            Thu 01 May 2025 01:00:39 +0000
asID:                     20940
IP address blocks:        23.206.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:f0:d7:69:fb:49:56:d9:71:e8:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 31 02:00:39 2025 GMT
            Not After : May  1 01:00:39 2025 GMT
        Subject: CN=2224c7a1-6a2b-4667-b527-2939f593be70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:32:b8:37:c1:48:73:76:16:13:86:99:71:8d:
                    30:99:72:9d:76:b6:ee:40:ee:f0:8e:f1:df:50:1c:
                    b4:dd:4a:e4:d4:f2:6d:da:57:28:91:73:8d:38:61:
                    cd:c0:52:4c:5a:1a:93:55:dd:67:10:39:a7:e6:44:
                    2c:cf:f1:49:0a:11:1c:13:1a:b2:1b:3d:d5:7c:5b:
                    12:8d:c8:19:0e:4b:55:1d:35:a1:43:61:78:3a:7c:
                    52:75:6b:fb:5a:87:53:18:5b:b8:34:ab:cd:14:32:
                    ba:97:7d:24:e5:13:84:39:0e:6e:8b:30:4c:13:34:
                    7f:39:90:57:1d:4c:41:ae:ce:47:63:5e:55:6b:51:
                    3a:29:b6:4e:30:20:15:48:6c:46:14:27:69:6b:2c:
                    e4:06:dd:33:56:67:ee:f5:bf:11:37:e8:6f:25:93:
                    6a:bd:84:5c:28:bf:f1:f6:2a:18:1f:8a:20:5f:e8:
                    92:2c:10:f2:eb:08:ce:38:74:39:47:f4:87:fb:57:
                    fc:bd:dc:34:d4:e8:93:89:7c:39:fd:14:33:4a:0d:
                    6b:8b:eb:80:4c:bc:15:34:a3:0a:16:ae:32:09:9a:
                    bb:cd:11:da:ad:e1:b0:80:85:87:82:c5:89:89:cb:
                    22:66:3c:c5:70:0b:03:70:6b:a5:92:94:c3:14:fe:
                    39:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0B:37:D3:36:AB:C3:95:11:C0:1A:50:55:6F:D4:9B:BE:37:A7:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a6b5a7d-2972-3c38-b449-1cf4dad5f87b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.206.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:20:74:0a:86:35:65:1a:9e:49:96:2b:bb:0b:a3:6b:e2:fa:
         c8:a8:4f:b5:fc:49:a9:c0:9d:3a:a9:30:da:0e:14:b8:1f:a6:
         00:13:86:d8:c9:38:16:47:f7:e2:fd:f0:3f:3f:42:7d:22:cb:
         6a:94:63:2d:a8:10:5b:42:52:1a:29:9f:1c:47:2c:7f:21:6f:
         df:34:1f:ec:f5:8a:b9:d4:bf:d2:46:66:09:54:e2:b2:86:9d:
         5e:17:b6:2c:9e:fc:8c:d3:a3:7b:50:f8:52:3f:66:e5:4c:84:
         db:27:3b:1a:94:c6:f6:6b:5a:e4:a8:b4:6d:dc:ea:27:0d:34:
         38:95:d2:fd:05:5a:d6:52:a4:8e:aa:ed:b0:08:02:fe:f5:2f:
         28:70:c2:6e:af:d9:8e:00:f4:f3:aa:12:c9:cd:77:a8:75:5d:
         b2:76:6f:1b:7a:99:e2:f5:c3:2e:98:85:69:8e:48:d0:b1:53:
         b7:7b:af:87:37:4e:14:c8:1b:72:13:a5:cf:70:17:82:19:15:
         c5:69:57:d2:99:8c:b4:8d:e5:95:59:e6:b1:6c:35:47:cc:e6:
         2f:e5:cd:87:fc:ec:c5:77:a5:89:dc:5c:79:ef:10:25:eb:18:
         4f:28:b4:4f:f3:bc:29:2d:5e:4d:7d:9c:0e:3d:71:7e:a7:31:
         15:3e:51:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:00 2025 by rpki-client