Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/272171a4-017f-3b82-97f5-03fea01f86d1.roa
File:                     272171a4-017f-3b82-97f5-03fea01f86d1.roa (raw, json)
Hash identifier:          SvSE76PKp2F90rbNVKwRl/GpQb3tsV7pPMQ6UxyEurE=
Subject key identifier:   86:DC:0C:4E:1E:2D:ED:BD:8B:4D:E7:C4:2E:8B:88:06:DF:87:59:9B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858488DAB62E62FB39A0589BE3DC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/272171a4-017f-3b82-97f5-03fea01f86d1.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     20940
IP address blocks:        23.61.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:62:e6:2f:b3:9a:05:89:be:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=43dc507a-2705-4e9d-abf3-0ee681d9aecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8e:07:27:44:3f:a1:15:c1:4e:1d:a3:84:0c:
                    db:cb:ed:0b:fa:dc:76:c3:94:94:c9:f2:50:2c:48:
                    16:30:50:99:a9:f7:78:82:7a:e3:fc:cb:5c:82:9b:
                    5a:47:c6:0c:eb:f3:27:96:62:5f:78:87:d8:d8:d6:
                    a6:f8:f6:17:5e:26:f9:e5:fa:65:e4:ac:56:b2:f7:
                    49:d1:7c:6c:73:1e:45:2f:58:08:b1:f7:cf:90:f4:
                    ae:b9:77:05:cc:ed:d9:35:69:86:19:68:5e:32:67:
                    13:8a:08:cd:f9:c9:64:e1:47:43:38:5f:90:60:07:
                    7a:46:eb:ba:60:46:54:9a:a3:52:6e:91:26:c3:b0:
                    7e:21:5b:ff:25:35:f7:71:1f:bf:7f:80:f3:72:62:
                    be:ed:1d:bb:42:b5:8e:40:ab:46:61:e0:9f:a1:11:
                    86:e3:f5:b3:d3:f2:08:7e:e2:93:69:2c:c6:7c:4a:
                    2a:55:c6:c7:04:54:29:2f:fe:70:b7:42:b6:5f:32:
                    12:90:f1:5f:af:58:97:c7:01:ab:ab:07:19:f1:22:
                    92:77:7d:a6:63:8d:7f:46:8f:3d:f7:f7:32:7f:60:
                    ac:2d:22:fb:0b:f8:3c:46:49:88:04:9a:f0:d7:30:
                    a9:4f:46:a3:ee:50:3c:90:aa:ed:1a:0e:3a:45:36:
                    9f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DC:0C:4E:1E:2D:ED:BD:8B:4D:E7:C4:2E:8B:88:06:DF:87:59:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/272171a4-017f-3b82-97f5-03fea01f86d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.61.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:f6:d2:3f:bf:21:6b:b2:2c:93:6a:98:1f:98:33:de:65:82:
         76:0f:7e:d5:ca:4b:77:2c:f2:c3:29:ce:6e:58:81:d1:b4:8d:
         4b:c8:df:d3:dc:18:8e:ec:2b:8e:c6:fa:26:46:37:31:cb:9a:
         c6:92:c1:46:17:43:85:ae:ba:58:55:36:58:99:e5:c1:f7:3b:
         93:82:f3:46:6f:22:ce:dc:1a:f4:32:03:13:8d:bc:c3:c1:ee:
         fa:ba:2d:45:7d:05:52:a9:26:47:3a:3d:a3:a2:f5:50:d0:ca:
         03:fb:a5:43:3d:a6:d1:68:be:b4:9a:f7:88:a6:48:c3:13:d6:
         3d:68:ad:3e:ae:0c:14:64:79:59:ca:82:3d:2b:3e:b7:a2:66:
         bd:3a:c9:25:bb:37:57:65:27:ef:7d:0a:86:a2:74:23:6e:61:
         e6:ec:6b:1e:c3:b1:b5:15:a3:88:d6:6f:e2:43:3d:2e:69:92:
         0c:7b:d3:8c:b1:2f:b7:b3:6f:84:ef:12:c5:19:32:16:79:42:
         f7:75:c7:1c:f5:89:a2:4d:4e:89:0b:d6:6d:fe:73:7c:f0:9e:
         05:e3:8d:38:99:a1:f6:73:da:03:c1:5b:d5:9c:d8:56:93:29:
         eb:29:fc:63:bd:fd:6d:4c:49:3f:17:9e:66:16:9f:7e:3a:e5:
         9d:9d:85:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:41 2025 by rpki-client