Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9bfe57eb-09f9-3b78-9cf9-5d56d59f007f.roa
File:                     9bfe57eb-09f9-3b78-9cf9-5d56d59f007f.roa (raw, json)
Hash identifier:          OnH0GRrg9nZjIsneVQpLUcfZANdlgXA07qHagUM+w4w=
Subject key identifier:   00:0F:04:31:7E:C5:0D:41:DC:A2:E6:89:15:8E:9F:E0:2C:4F:C0:87
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848C9B0E27F17CB8D7A8EAB2240
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9bfe57eb-09f9-3b78-9cf9-5d56d59f007f.roa
Signing time:             Thu 06 Feb 2025 02:00:39 +0000
ROA not before:           Thu 06 Feb 2025 02:00:39 +0000
ROA not after:            Wed 07 May 2025 01:00:39 +0000
asID:                     20940
IP address blocks:        23.219.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c9:b0:e2:7f:17:cb:8d:7a:8e:ab:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb  6 02:00:39 2025 GMT
            Not After : May  7 01:00:39 2025 GMT
        Subject: CN=eae2eee4-9886-429b-8df5-7f7dc1a48c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e9:35:14:90:2a:63:51:5d:e5:78:c9:74:09:
                    82:ee:72:06:cf:c0:23:53:09:39:ab:d5:68:47:bd:
                    3d:98:78:7e:6e:d9:7b:01:a5:70:b5:ae:79:34:54:
                    11:05:a9:59:36:5a:e6:46:7a:50:03:8b:04:af:98:
                    41:35:2e:1b:87:78:c5:90:17:32:e3:df:82:ec:ec:
                    50:72:e4:ff:12:eb:9c:ab:34:55:92:49:39:3d:1e:
                    f0:75:9e:b5:d2:72:8b:d2:fb:f0:48:6d:c5:d5:ed:
                    1e:dd:5a:84:8d:7e:b6:dd:2b:63:51:71:8a:ab:d4:
                    f0:89:9a:03:c5:fb:f5:70:94:1d:bf:42:89:ba:23:
                    94:cd:1d:50:a3:f6:0a:3f:d8:c9:08:ad:24:f9:96:
                    6b:10:19:e7:68:37:da:7b:be:f6:49:94:9c:4d:0b:
                    c3:02:ef:0e:e5:cb:b5:f7:e7:a3:44:d8:40:2a:bf:
                    83:e1:25:39:2f:2c:a2:c0:6b:c2:2e:2b:b1:39:f7:
                    5f:d4:1a:b0:2c:b7:bd:a7:43:6d:c2:da:b5:ae:d0:
                    f9:78:b4:6a:1d:1c:75:2c:21:ad:62:34:62:aa:a8:
                    18:27:0a:08:aa:c3:45:c5:3b:7e:bf:27:22:21:e5:
                    15:a2:56:48:28:14:30:4f:01:a8:24:40:d2:13:6b:
                    6f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0F:04:31:7E:C5:0D:41:DC:A2:E6:89:15:8E:9F:E0:2C:4F:C0:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9bfe57eb-09f9-3b78-9cf9-5d56d59f007f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.219.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:1e:ab:cd:f6:71:49:4a:86:33:1a:7b:43:71:23:98:de:d8:
         0f:a2:70:63:de:7e:14:ad:f2:51:c1:b8:1a:cb:49:4d:fa:dd:
         39:af:29:6e:8b:01:f2:e6:1b:53:b4:01:6b:61:8a:63:93:f6:
         d2:e0:f6:99:c5:4c:19:b1:a7:ec:b8:b7:9a:82:83:f3:a8:43:
         ee:f2:65:ba:db:ca:8e:1b:99:5e:35:ad:44:a4:63:76:8b:ac:
         63:75:ae:54:73:88:f2:eb:f0:57:d4:7c:25:ef:ee:ca:22:4b:
         f2:bf:d8:96:ec:89:45:a3:f3:ab:11:43:45:d2:16:ad:1c:10:
         8f:1c:c1:b5:29:51:c7:ea:30:62:1e:f7:52:2b:e3:22:02:6c:
         e9:02:dc:a9:c9:c2:b2:67:69:b1:55:ce:e3:22:d7:ec:08:51:
         ae:19:ef:52:87:5e:75:2b:e3:85:f1:3e:05:5a:6f:8b:65:7f:
         7c:31:df:3c:7a:6f:66:b8:42:cc:16:dd:94:16:ce:ff:62:ea:
         16:c3:d8:25:b6:ba:7a:62:fa:f3:97:12:bb:d3:b0:9f:35:60:
         91:d6:c4:dc:fa:6b:a1:19:6d:ba:de:65:b1:11:05:1f:3b:60:
         84:0f:33:24:75:3b:f8:82:02:f5:eb:d7:2b:2d:af:ea:87:5d:
         7b:97:9a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:51 2025 by rpki-client