Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4228cd7a-c00f-3d4e-a508-389c70336c42.roa
File:                     4228cd7a-c00f-3d4e-a508-389c70336c42.roa (raw, json)
Hash identifier:          5WiB9awjrtMR+xF6xBntcTRXNX4qEnwY0MmXa/CMISU=
Subject key identifier:   C9:4F:7D:62:CF:28:45:BD:98:02:5D:A5:D8:45:49:84:9F:77:DB:1F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858492CC3838CC5270AD406D041C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4228cd7a-c00f-3d4e-a508-389c70336c42.roa
Signing time:             Thu 13 Mar 2025 13:43:20 +0000
ROA not before:           Thu 13 Mar 2025 13:43:20 +0000
ROA not after:            Wed 11 Jun 2025 13:43:20 +0000
asID:                     16625
IP address blocks:        23.217.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:c3:83:8c:c5:27:0a:d4:06:d0:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 13 13:43:20 2025 GMT
            Not After : Jun 11 13:43:20 2025 GMT
        Subject: CN=a6b6c4f7-aaf4-4fc6-a2b9-9137ba12493a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ef:a6:2e:d3:8f:ba:00:16:ba:1d:e1:72:50:
                    3c:ba:92:2f:01:f2:db:e2:50:7d:6c:9f:97:30:3b:
                    9d:8c:c4:e0:fe:a5:41:ca:fd:72:af:68:39:3e:4b:
                    11:6a:a9:2e:de:52:51:4f:12:2a:68:37:28:9f:67:
                    9b:33:89:9f:72:9f:e5:09:58:85:bb:4a:78:6a:f1:
                    e0:2c:b3:aa:a6:5d:98:a9:fd:d6:fe:7b:0b:0c:58:
                    87:03:50:09:15:5d:65:91:ff:49:c1:83:2f:dc:fe:
                    aa:25:62:d0:c6:11:82:77:e6:dc:3e:ff:3f:85:b9:
                    e8:a3:06:e2:c8:3b:bb:3a:d4:cc:e3:0b:6d:bb:03:
                    a7:72:a4:40:66:93:38:ed:73:37:83:49:6a:00:3e:
                    df:60:90:96:05:96:df:b5:f7:52:8d:e4:f6:c8:c0:
                    9b:0d:29:61:bb:05:6a:e3:68:15:c6:30:20:7c:54:
                    48:69:eb:06:79:31:4b:39:d3:3b:11:b3:9e:20:51:
                    e1:a7:00:46:98:0b:a7:cc:6f:27:56:03:f3:67:ec:
                    9d:1f:68:ba:25:3b:e2:9f:cd:58:23:dd:5a:cb:81:
                    7e:0a:7f:96:b9:73:cd:bc:9c:63:8f:5b:81:c2:ba:
                    d0:aa:5e:be:8e:53:d6:33:28:69:84:74:e2:3e:cd:
                    76:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4F:7D:62:CF:28:45:BD:98:02:5D:A5:D8:45:49:84:9F:77:DB:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4228cd7a-c00f-3d4e-a508-389c70336c42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.217.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:46:94:da:f8:ff:4f:75:31:1a:80:80:7c:52:7f:07:ec:7d:
         ea:27:2a:12:0c:d8:5d:96:fb:2c:72:8d:75:7b:1d:71:c1:64:
         89:5f:91:d9:26:3e:c5:7d:ad:82:50:c3:bf:0e:c0:ee:39:8d:
         d3:7a:57:ff:48:67:8f:79:69:42:67:b1:ef:5c:d4:81:10:07:
         f0:a2:37:4b:e5:66:ab:d1:c0:47:91:3f:cf:fb:11:56:36:7b:
         64:11:6d:2b:82:f9:a6:42:ec:ab:76:4a:ea:ae:d7:af:ca:da:
         7e:d8:f2:63:41:41:de:7b:67:09:eb:9a:1f:76:91:99:f0:08:
         17:f3:fc:40:9b:88:9d:95:75:38:9f:e3:fd:83:a9:ae:cb:88:
         2f:02:fb:d9:53:a7:74:c9:c5:f5:64:9d:8d:33:e4:a1:50:9b:
         e4:e4:98:70:cd:2f:9d:e6:dc:98:a9:4a:d8:46:6c:60:76:ff:
         21:97:79:65:2e:4d:34:bc:9d:39:79:c0:6d:5d:92:68:de:ac:
         d5:bc:b9:48:bd:69:bc:54:97:b7:03:e6:7d:fc:0a:bc:3f:5b:
         0d:63:ea:ab:1d:c1:dd:22:19:e5:1c:51:b1:1c:e1:18:95:d6:
         92:74:1f:87:07:2e:85:a9:63:fc:b2:8b:71:d8:87:6f:6a:a3:
         de:f2:05:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 15:03:36 2025 by rpki-client