Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/737e2f9f-de8a-3e85-bf38-f86d068a3f05.roa
File:                     737e2f9f-de8a-3e85-bf38-f86d068a3f05.roa (raw, json)
Hash identifier:          EE5x2kI6TSk9CX1L2mbz7b6LjRwz3MK0xaGywnasHsI=
Subject key identifier:   3F:31:59:B8:AD:62:B5:63:80:77:9A:08:16:3E:55:CD:DF:6F:99:31
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849FE100860E7751A3556D8BF00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/737e2f9f-de8a-3e85-bf38-f86d068a3f05.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     16625
IP address blocks:        23.74.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:10:08:60:e7:75:1a:35:56:d8:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=71e9e300-5fb9-4785-aea7-e4e2628c52ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b1:8b:42:3e:35:d8:e4:e4:ac:2d:0e:d8:0b:
                    73:ab:12:76:ff:1d:04:ff:24:8b:4b:cc:c1:12:9f:
                    aa:97:e1:39:8f:2f:3b:3b:e9:c9:24:72:80:bb:bb:
                    57:23:05:87:e7:e9:3a:18:ae:89:bc:e5:87:5f:f4:
                    df:04:01:a8:50:41:c9:23:99:42:9f:2f:f9:d0:bc:
                    de:63:a1:a6:cb:bb:58:e4:43:cc:b1:3f:66:f8:a3:
                    a7:46:21:83:f8:39:8b:6d:2a:f0:7e:83:e0:8e:5c:
                    23:be:31:c2:fd:0f:74:a6:eb:9b:58:93:32:7a:40:
                    56:1a:a0:f4:e3:bf:96:72:af:e0:be:d7:5e:29:b9:
                    b6:85:9d:5c:24:ac:e7:51:a0:8e:d6:ad:9f:38:05:
                    78:87:e7:f2:54:5f:5f:14:d3:d2:ce:0a:74:3b:68:
                    9a:f8:82:15:b6:cb:98:55:72:16:91:8a:ca:42:11:
                    2c:1c:96:ed:04:d1:92:75:fc:aa:20:ba:b4:c7:64:
                    53:30:f4:4b:d3:95:14:16:2f:02:b8:47:4a:d4:e1:
                    59:52:cd:01:ee:cf:8f:65:98:f6:c8:44:b6:c4:ea:
                    2b:a4:12:a2:a9:7b:10:a6:39:e0:da:c9:5d:20:51:
                    8a:48:7a:f9:01:c1:4e:38:24:47:9c:62:23:f0:25:
                    88:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:31:59:B8:AD:62:B5:63:80:77:9A:08:16:3E:55:CD:DF:6F:99:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/737e2f9f-de8a-3e85-bf38-f86d068a3f05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.74.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:57:f8:c9:ce:bc:c9:3c:39:6f:8c:19:bd:87:98:94:be:72:
         ef:c2:4e:da:28:73:78:9f:fb:1c:e2:76:3e:43:46:76:50:83:
         11:86:25:e8:d2:67:0a:f9:ca:b4:af:22:04:37:ad:6c:3d:5b:
         30:3d:c7:d3:3e:79:8d:a9:6b:a6:af:23:1a:62:b8:2f:cb:16:
         3f:50:d2:05:78:fb:20:2a:2a:96:7b:c3:3e:48:14:8f:df:20:
         08:37:12:7b:cd:ed:7c:b8:5b:33:eb:50:96:02:35:f2:4e:68:
         66:f5:d3:08:52:62:35:7f:74:58:bd:a0:67:68:a8:24:b3:d0:
         1a:24:22:33:a0:6a:06:c5:18:69:de:34:4d:78:6d:94:e0:11:
         08:2f:51:7b:79:42:fb:86:45:8d:93:f2:78:79:02:bc:a2:1e:
         94:43:11:a7:ac:b4:8c:6e:10:87:36:99:6d:f0:2a:74:f8:8e:
         ce:33:5b:83:05:37:89:1f:e2:d1:35:22:0e:13:e0:28:47:ec:
         57:a4:40:8a:c1:51:cf:15:b3:03:33:6e:ed:50:26:1d:7e:71:
         ff:31:aa:5e:7b:26:a6:ca:c8:97:8d:6d:73:ac:46:28:e7:d1:
         c2:15:30:74:8b:2b:38:89:83:3c:4a:6d:2d:9a:1c:8e:68:a1:
         84:62:d5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:40:39 2025 by rpki-client