Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a106f85-5ff6-3501-9c58-088c4aeba5a7.roa
File:                     2a106f85-5ff6-3501-9c58-088c4aeba5a7.roa (raw, json)
Hash identifier:          EYa7+SFmNh7/DrH7TpZ5OvZj8alZZQVzrdkile4SnaM=
Subject key identifier:   6D:D2:51:C6:2F:BC:51:26:B9:BC:54:C2:69:38:54:62:CB:7D:E0:D5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A1B6010A39540AC553C6DD700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a106f85-5ff6-3501-9c58-088c4aeba5a7.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     16625
IP address blocks:        23.32.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:60:10:a3:95:40:ac:55:3c:6d:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=50fc801e-c896-442a-a2f5-dafc4ed41db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:08:de:17:d7:8a:ca:8a:cb:09:d6:67:a9:6a:
                    1d:97:6a:dd:c6:2d:03:0f:56:cf:59:65:01:5f:4d:
                    0d:b7:e3:7f:5f:a4:99:f7:c7:40:c1:d3:15:23:44:
                    f3:26:7e:80:2e:5d:63:5d:4f:2c:5c:32:46:73:84:
                    55:6b:c5:15:75:84:cb:77:2f:91:d2:2b:cd:88:7d:
                    9c:fb:0a:ba:31:cf:62:fb:24:6f:27:c4:a9:81:8a:
                    02:0e:57:ba:9a:93:95:a0:e1:cc:a6:b6:a0:aa:56:
                    61:42:b3:f9:9f:e5:c3:f4:82:87:95:5b:d6:6f:5d:
                    e9:23:10:e4:14:58:64:14:b1:37:20:9b:5e:52:8f:
                    75:cd:88:e7:1b:59:74:c7:99:15:0c:2b:86:c2:ad:
                    da:87:05:c7:53:68:8c:30:1b:33:cd:7b:f9:2c:12:
                    21:14:8c:b2:58:11:8e:77:62:89:74:3c:2c:68:c5:
                    3d:ae:3e:05:3f:f6:e5:8e:2c:26:1b:4e:69:18:b3:
                    6a:d8:9d:fd:9b:99:aa:a1:f9:71:f5:ed:70:74:be:
                    c0:f9:7a:d7:d9:18:05:3d:92:d2:fd:7c:e7:f5:27:
                    63:59:f7:0c:05:03:62:89:2d:00:13:b0:6e:25:37:
                    ff:27:46:3a:e6:1c:58:7f:9d:e1:45:a0:a6:44:e1:
                    3c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D2:51:C6:2F:BC:51:26:B9:BC:54:C2:69:38:54:62:CB:7D:E0:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a106f85-5ff6-3501-9c58-088c4aeba5a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.32.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:5d:1d:8a:cb:00:af:ea:0d:b9:c7:3d:07:3a:3c:c5:9e:4e:
         b6:cf:40:03:d5:6e:ca:4c:37:d8:7a:1e:63:a5:2f:15:c7:55:
         77:8a:ad:01:f4:5c:34:9d:e5:dd:84:21:29:3f:37:36:43:75:
         71:46:3a:35:9a:a7:db:a4:81:97:42:0a:7c:ff:e6:8e:e3:7b:
         a2:b1:39:76:e5:48:b1:dd:f2:4f:63:7b:b6:16:69:dc:55:77:
         7b:c0:9a:16:d8:b9:5c:c5:88:69:a6:0f:13:1c:2d:3c:4a:a4:
         89:e5:40:d4:9b:f6:1e:63:c6:67:63:3a:0c:c3:c9:c7:22:e7:
         34:ac:0d:b4:03:55:6d:df:6d:8b:65:91:9e:ce:2c:83:46:e0:
         c1:c1:79:d2:c4:d3:5e:86:37:d8:f4:c6:57:95:5e:79:14:d4:
         3c:8a:61:41:89:49:f7:0b:cf:f4:7f:55:5c:08:7c:9e:b1:d2:
         2a:f3:ca:f1:5a:90:fe:2a:2f:a2:83:8f:7f:88:3f:b0:d0:ba:
         1b:8f:a5:89:bc:c9:22:09:66:85:7f:36:0e:54:f5:96:e3:9b:
         16:fc:04:26:12:99:fc:d2:dd:7c:28:93:54:de:12:f6:36:d4:
         42:d5:53:ff:9c:ae:78:e1:6b:03:66:0a:02:7f:ca:23:ca:57:
         e2:e6:46:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:40:11 2025 by rpki-client