Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84950b3a-15d7-3b08-9186-13789c4594b0.roa
File:                     84950b3a-15d7-3b08-9186-13789c4594b0.roa (raw, json)
Hash identifier:          vExMqID9tKB6FarqtQ9rNzvsAvebZ9jy6gL6XS1QvY0=
Subject key identifier:   02:10:9A:C4:3B:9D:0E:A8:CA:4E:E5:FB:FD:BF:FD:86:27:BA:9B:9C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849E2252E84CF3EE5D2AD18FC80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84950b3a-15d7-3b08-9186-13789c4594b0.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     35994
IP address blocks:        23.33.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:2e:84:cf:3e:e5:d2:ad:18:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=9474c482-c5f6-4ce0-ba7e-97867d82f60d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:95:61:34:87:a6:62:a5:6c:17:fe:62:eb:a7:
                    c2:61:d6:4f:f1:7c:aa:96:15:ea:1c:59:9f:5b:74:
                    5f:e2:1b:2f:7a:b4:c1:e5:36:f5:17:7c:d7:6f:15:
                    31:7d:29:24:a2:be:28:37:1b:0e:75:63:94:34:62:
                    1c:af:3c:91:72:fc:5f:98:0a:c8:00:3f:f3:68:70:
                    65:3a:bb:98:4f:5d:b1:58:03:1f:14:1c:a9:89:03:
                    f6:9a:91:66:ef:6f:ff:1a:cd:01:ce:dc:f3:5d:87:
                    76:bb:89:da:89:87:03:c3:25:f5:6f:aa:e2:50:cd:
                    dc:91:fc:91:04:85:23:70:e7:1e:17:ae:4f:4a:f1:
                    57:5f:b3:e9:26:51:17:33:75:c1:30:6b:53:58:36:
                    b6:b4:2b:79:46:0f:34:f7:7a:65:ae:b8:5a:5d:64:
                    0a:b6:f5:f1:2e:ed:dc:b8:fd:f1:11:81:8e:af:70:
                    b2:e4:a1:a9:2a:a3:bf:ce:bb:a3:98:eb:fb:b0:6f:
                    04:bc:52:74:ae:02:b6:9d:fb:4a:3c:05:15:85:25:
                    89:c1:39:52:4c:47:e3:80:db:3e:21:d4:46:10:7b:
                    6f:18:fa:ba:51:85:49:a5:2c:ee:e5:8b:85:f5:18:
                    d1:86:ba:96:bb:a8:4d:ea:07:f1:d4:02:cb:af:e3:
                    af:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:10:9A:C4:3B:9D:0E:A8:CA:4E:E5:FB:FD:BF:FD:86:27:BA:9B:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84950b3a-15d7-3b08-9186-13789c4594b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.33.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:a0:29:f0:0e:a2:8f:0b:75:3c:31:fc:82:0f:99:9c:6d:20:
         a8:d5:41:1d:63:82:81:1a:65:79:7d:6f:9f:74:40:dd:46:ff:
         ec:bb:40:56:af:96:f4:6e:ad:de:69:30:3e:11:29:68:68:aa:
         a0:57:39:4d:1c:73:86:63:47:42:d2:92:4e:a4:e8:a0:d9:6f:
         9e:c0:dc:6d:6b:f8:48:c7:30:38:ac:57:09:05:c4:0a:e4:ae:
         09:d5:74:b6:0e:78:7a:20:31:a8:47:89:81:b5:f1:44:73:9b:
         f5:02:05:ad:64:47:ef:df:c5:ce:2e:0c:af:45:1b:6f:26:47:
         79:f5:80:d1:4d:18:cc:df:d6:3d:1b:37:b1:7b:7e:b5:18:74:
         4b:6d:0f:a6:5d:c4:93:3a:dc:f7:5e:31:8a:10:0d:04:46:c0:
         3b:3a:01:57:07:c2:dc:48:c2:1d:8d:98:d1:64:44:12:fc:6c:
         8e:79:a0:dd:0a:04:33:fb:f1:6a:a5:4b:af:ff:6e:2d:fd:64:
         0a:ae:7c:11:81:37:67:e4:bc:59:55:2f:c1:a5:4e:88:28:63:
         c2:23:fb:a1:76:6b:d7:22:00:76:1a:e9:26:7e:bb:3a:6f:e9:
         27:c1:6e:45:27:5d:31:f0:97:a2:26:9a:49:19:37:e7:a8:a0:
         d3:ee:c1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:07:47 2025 by rpki-client