Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63a1aa3f-6233-36a1-bf27-4b443b22755a.roa
File:                     63a1aa3f-6233-36a1-bf27-4b443b22755a.roa (raw, json)
Hash identifier:          cuR0q2dS26JiAn9OV3oaSPp6RzAmbbtU1XNrhSc+Mxw=
Subject key identifier:   F9:2A:A3:B1:F1:B6:C1:E8:05:06:A3:A0:D3:6A:CB:B4:2C:59:B8:61
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B004BFACBA7D0D5F2A7C356B0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63a1aa3f-6233-36a1-bf27-4b443b22755a.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        23.59.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4b:fa:cb:a7:d0:d5:f2:a7:c3:56:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=1fc5488d-7140-46c6-a2b2-bc41270c9130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ec:57:1b:16:45:47:e0:4f:6d:27:e9:4b:c4:
                    a7:f8:db:14:50:20:f3:5a:c4:02:82:a2:f3:f3:70:
                    e8:58:3d:89:65:7a:a8:66:ca:9d:1d:15:21:2f:b7:
                    11:cb:ec:ff:61:2e:72:9f:00:8a:20:e8:2d:c1:42:
                    39:9e:86:da:48:8d:01:d0:33:f5:9e:ff:32:37:a1:
                    71:f2:e4:43:c8:8e:ed:18:19:7c:d7:2e:8d:3c:a3:
                    5b:85:c9:ec:2f:9f:ba:85:dd:78:e6:5c:b8:32:a4:
                    ab:c6:98:b5:a4:ae:0b:33:37:91:b9:ae:62:f7:b1:
                    f7:7e:16:a7:e0:2c:e6:3e:ae:42:58:dd:af:c9:5e:
                    1a:bc:3b:d6:70:90:b4:5e:88:ef:a5:b2:7a:37:0b:
                    43:b7:c9:3c:fb:7e:bb:77:96:9d:6e:1f:53:c3:d8:
                    71:09:4f:d7:66:5e:73:e0:55:aa:52:3a:96:74:f8:
                    d8:dd:c6:82:e1:39:bd:a7:41:f8:90:b6:cf:a7:4a:
                    78:bb:9c:7a:dc:98:f2:1f:d2:53:40:da:ff:06:b0:
                    00:2a:98:93:2b:51:f7:9a:f2:8e:2f:99:3e:2f:ce:
                    b8:68:aa:f1:a5:77:a5:0d:38:35:81:d8:8e:c2:f1:
                    8d:e8:65:fb:5a:64:e6:c3:40:bb:9d:72:e2:02:d8:
                    45:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2A:A3:B1:F1:B6:C1:E8:05:06:A3:A0:D3:6A:CB:B4:2C:59:B8:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63a1aa3f-6233-36a1-bf27-4b443b22755a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.59.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:7a:91:c6:84:95:f4:3e:67:8f:ba:85:e4:52:9b:ec:f0:ba:
         71:7f:ec:c5:97:d5:e6:39:ed:9b:bd:d2:19:92:e6:94:cf:59:
         64:f6:93:1f:ac:cb:2e:ff:01:37:be:13:3c:8f:74:eb:85:c9:
         b4:3c:be:30:12:6b:a0:01:30:fb:fe:be:18:d5:0d:94:37:05:
         09:34:3e:ff:2d:bc:4f:55:6a:29:30:36:90:ab:b1:d3:85:a0:
         41:80:f3:e3:0c:ce:f9:4e:81:74:7b:c5:4d:4e:cc:63:7b:f0:
         89:27:1b:17:f8:56:3c:3c:47:11:33:26:ce:c6:6a:71:73:25:
         a6:da:37:49:56:59:eb:e7:a9:ae:38:be:dd:3f:71:34:02:f3:
         7a:e2:f4:38:de:ea:5a:1a:db:1e:44:67:e2:d3:e6:3d:54:ca:
         d6:d9:75:b0:bb:e8:ec:50:a5:16:8c:9e:a3:9c:d4:9d:16:e3:
         89:11:10:72:03:84:72:97:1d:34:b9:aa:a8:60:ce:93:b2:4b:
         e9:9e:14:53:8c:53:db:69:14:2e:59:2f:f3:5f:d2:24:57:69:
         3d:1f:fd:97:5f:67:5a:3f:f6:db:e7:65:a7:5a:4e:5b:11:45:
         08:ba:ec:af:ea:44:58:d5:db:fe:f7:25:17:5a:cc:d7:3f:9a:
         34:96:f9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 05:19:17 2025 by rpki-client