Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41805192-5077-3d1f-ba46-33ad7b218aff.roa
File:                     41805192-5077-3d1f-ba46-33ad7b218aff.roa (raw, json)
Hash identifier:          PGDOlgyQMV9u44JdsWmEIZlKrtBR1o0Y18wBpDbs4+I=
Subject key identifier:   69:48:2F:AE:DC:5E:48:78:E4:36:7F:45:16:91:A1:2B:D0:15:F2:0E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849FCAA94EA2AB2964F400B3300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41805192-5077-3d1f-ba46-33ad7b218aff.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     16625
IP address blocks:        23.197.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:94:ea:2a:b2:96:4f:40:0b:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=df2f7f68-5d58-4f11-bafa-68963c1541da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:80:f5:eb:03:9b:36:4f:2c:22:fb:45:c9:e9:
                    98:89:e9:a3:b7:18:2f:89:93:80:21:47:52:ec:0e:
                    bf:2b:f5:80:f4:b1:b6:c7:5a:b0:ae:25:62:bd:48:
                    47:ab:ce:0d:46:d1:fd:62:b6:6b:af:ae:1a:8c:4e:
                    40:c5:12:9d:cd:23:eb:1b:08:03:eb:fa:a3:3b:7e:
                    87:10:9d:b1:56:6d:a5:a9:f7:93:de:76:d6:20:35:
                    d0:53:69:43:23:5d:56:47:92:70:e7:c3:ac:20:20:
                    1b:ad:6a:48:0b:ff:9f:65:82:2a:dd:a5:71:d7:66:
                    7e:90:55:63:bc:f9:fa:4b:f9:f6:78:14:96:d6:94:
                    11:cc:06:87:b8:79:bb:06:12:8d:21:b3:a8:86:32:
                    b3:79:06:e2:e5:22:1c:35:8d:a0:65:0b:88:6d:69:
                    98:2e:7e:11:9c:d4:fc:a7:2c:77:4c:96:9b:86:de:
                    ef:af:62:17:b5:bd:56:f5:c9:a4:12:79:31:52:46:
                    83:7f:97:56:f2:97:ef:0a:4c:79:e3:8d:34:27:ce:
                    20:2a:24:1b:6e:eb:de:6d:67:02:a1:9a:4d:d2:7f:
                    40:86:2c:a7:b9:5d:97:e3:04:e0:c0:53:e2:f6:21:
                    9c:5f:72:f8:b5:df:4a:19:1c:8d:15:56:a9:ea:a4:
                    25:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:48:2F:AE:DC:5E:48:78:E4:36:7F:45:16:91:A1:2B:D0:15:F2:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41805192-5077-3d1f-ba46-33ad7b218aff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.197.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:84:41:e4:d8:2e:94:bb:f2:af:d9:63:82:42:ef:9f:34:fa:
         cc:c2:01:b3:55:f9:68:b9:3c:ea:aa:43:e6:0c:ac:f0:b8:ba:
         0e:3c:a3:c7:60:2b:98:f4:7b:9b:35:11:be:b3:92:69:07:56:
         23:58:ac:04:7c:b1:80:cb:3e:d8:5d:6a:98:3f:9d:bf:71:e9:
         9e:90:e4:c0:01:29:fc:65:d5:82:df:24:ab:83:a8:37:7e:61:
         58:ac:24:7f:30:ef:57:e4:4d:3f:83:05:c6:9a:8f:b2:7b:ec:
         fe:ba:96:b3:b1:dc:c8:45:9d:a4:25:19:c0:ff:b2:4b:ed:13:
         76:33:cc:e6:15:7c:d0:cf:41:72:57:c7:db:1a:0e:96:48:bc:
         88:b9:b0:92:db:9d:0b:b0:ea:6b:4c:2c:0d:34:d1:25:fe:ae:
         20:b3:0b:ab:66:e6:6a:7e:67:9e:5e:9a:78:1d:7e:4c:cc:79:
         51:3c:2d:39:39:14:c9:86:c1:86:15:cc:20:a5:97:54:dc:2b:
         7f:87:e6:39:62:19:30:eb:9d:72:7a:a9:c8:77:15:5f:40:c3:
         d7:8b:40:0a:c4:04:36:c8:b9:1e:b9:b1:5b:8a:8b:95:c6:d4:
         a2:9a:10:a8:b9:af:df:eb:55:73:e7:3b:85:1d:7e:74:db:81:
         a2:10:19:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:09:58 2025 by rpki-client