Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a4bdd7b-c4f6-3769-8004-22b399df36c7.roa
File:                     9a4bdd7b-c4f6-3769-8004-22b399df36c7.roa (raw, json)
Hash identifier:          /Fl/uqBRqfXGfHAKNNDXWar4eQmQX982HZ/R+JugSzw=
Subject key identifier:   32:ED:18:4C:1D:13:AB:23:B6:45:A1:22:07:7F:25:EA:F6:99:F2:E0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849FE1001B0EFF255B43DC62000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a4bdd7b-c4f6-3769-8004-22b399df36c7.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     20940
IP address blocks:        23.72.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:10:01:b0:ef:f2:55:b4:3d:c6:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=aebd6295-8d07-44c4-bd47-dc143f2d5bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:af:4d:fe:7c:9f:18:70:2d:a9:ed:2c:1d:a2:
                    64:e5:13:01:12:1b:6b:47:04:64:f6:67:21:85:de:
                    8d:a3:cd:53:d5:bc:0b:a7:78:2f:35:15:18:5f:7b:
                    ad:7c:fb:19:16:d2:f7:d1:a7:09:aa:10:d9:8f:bb:
                    1c:a4:a6:26:f8:5f:42:26:53:bd:ba:d8:ff:e3:da:
                    74:c0:be:37:43:2f:fc:47:03:3e:b1:9a:1d:35:1a:
                    c5:79:2e:fd:8d:af:8d:2b:1b:a6:6e:0d:11:f9:f5:
                    0d:5f:17:d4:b4:ba:01:1f:a3:dc:b6:b5:30:44:54:
                    f9:f3:fb:f9:75:15:5f:c0:b7:03:61:b7:fa:8b:66:
                    3e:31:0f:88:77:d1:c5:4d:78:8a:f2:f2:52:e8:0c:
                    2d:cd:28:22:a1:fb:ca:c3:59:b8:f1:95:f5:6b:2f:
                    fb:05:3f:07:bb:ac:dc:e4:16:6d:6e:ac:83:ea:b4:
                    02:bb:90:0f:e1:c8:35:ef:c3:44:bb:4b:47:ec:44:
                    18:a6:64:68:4b:a6:89:19:f1:75:6a:89:81:1d:0a:
                    3e:12:0b:31:6f:f9:85:a0:a2:10:71:ad:12:dd:b3:
                    e1:e8:c1:ba:50:a5:d3:f0:fe:51:50:a9:7d:5e:08:
                    f0:f8:4d:c8:e2:88:fb:71:39:44:c5:90:5a:60:c4:
                    75:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:ED:18:4C:1D:13:AB:23:B6:45:A1:22:07:7F:25:EA:F6:99:F2:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a4bdd7b-c4f6-3769-8004-22b399df36c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.72.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:6b:9d:0d:40:99:45:cb:d3:d2:74:c6:7e:90:76:0c:5d:98:
         8d:75:57:87:f9:d5:1f:ce:f7:23:88:12:b3:20:b5:dd:1a:a7:
         59:2e:e0:9f:d3:31:db:de:23:aa:10:ad:b8:99:24:37:e1:ef:
         1c:39:a6:56:ca:ba:fc:b9:d7:1e:1a:68:00:a8:cd:4b:60:ab:
         a3:59:6b:f6:b0:39:37:03:f0:d8:3c:b3:5f:55:5d:2c:63:cb:
         34:e5:d3:0a:79:ba:4a:ab:79:17:69:9e:4f:58:aa:0f:d4:1c:
         98:3a:a5:57:21:50:b2:8b:f6:5f:48:03:65:5e:29:6d:53:cc:
         89:79:dc:4d:bd:ee:93:0e:cc:ba:45:0d:3e:08:dd:be:0c:c1:
         5d:7e:4b:4b:c6:a0:d7:0d:e6:a4:f4:32:e1:43:5c:a0:60:6d:
         65:49:4c:ed:e7:bd:84:2d:4d:70:1e:05:e9:e4:d2:e3:bd:86:
         12:14:52:66:a8:ff:d6:4d:c3:74:f6:0f:1a:d1:1f:11:56:3d:
         4e:12:91:5b:3c:56:9c:c6:32:ad:64:ab:de:28:17:c4:73:f3:
         f8:43:33:b5:a8:e4:b8:a8:36:e7:b5:2d:37:86:b5:da:b8:11:
         1f:98:de:4c:5d:59:43:a0:82:9e:fe:f3:a1:9e:64:02:31:09:
         48:95:94:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:27:26 2025 by rpki-client