Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab2d3d78-d247-392f-a9dd-562366e852a5.roa
File:                     ab2d3d78-d247-392f-a9dd-562366e852a5.roa (raw, json)
Hash identifier:          NjnKg+h8MJZuqBj0xvHMfTFQbvjEYtANIEUi4hfuDSI=
Subject key identifier:   6E:EB:E3:1A:5D:BD:33:D5:48:A6:77:E9:39:2B:DA:2F:55:90:0C:45
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858496CE46AE2E4AEF167914BBE40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab2d3d78-d247-392f-a9dd-562366e852a5.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        23.60.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:6a:e2:e4:ae:f1:67:91:4b:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=70545c8b-2fc8-4ade-ae36-de6459615550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8c:4c:1c:40:ad:91:29:a0:26:65:73:12:a5:
                    80:11:88:7d:93:c8:61:ba:d4:2c:7f:fe:e9:88:2a:
                    bf:c1:36:d4:05:7f:54:ed:c6:db:fa:14:bc:1b:28:
                    02:4e:b1:c8:8f:42:05:d4:d5:8d:48:14:a2:03:3b:
                    fb:3f:18:b9:69:d7:50:a0:cf:21:ab:c8:76:a3:46:
                    95:f0:f8:51:34:7b:45:fe:38:0d:e7:a6:d6:84:21:
                    54:1c:ba:ab:a4:57:b3:28:b2:18:76:c2:3b:90:15:
                    dc:6f:85:12:09:8b:b8:fc:40:ac:27:50:aa:b5:be:
                    3b:8d:9d:08:96:b7:47:25:9b:41:03:00:15:90:b7:
                    1e:8b:0e:84:0a:32:93:26:fe:33:ec:96:3f:9f:79:
                    d9:d6:30:a2:d6:97:b4:7b:d0:6e:9a:a0:fa:e4:34:
                    f6:84:55:9a:73:62:01:40:27:77:c5:29:bd:a8:8e:
                    b6:c3:71:87:22:9f:b0:3b:78:51:36:6c:31:a2:37:
                    08:dc:e2:97:4b:31:68:c6:ee:fc:d5:d7:7b:1f:57:
                    76:44:31:cd:39:0d:5e:6f:dc:2a:29:da:3d:63:45:
                    bb:e6:54:e6:04:4b:0f:74:4b:2f:2e:2d:60:a7:6a:
                    a3:b8:2d:8c:a7:82:4c:67:2f:75:10:cf:3d:1b:b5:
                    18:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EB:E3:1A:5D:BD:33:D5:48:A6:77:E9:39:2B:DA:2F:55:90:0C:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab2d3d78-d247-392f-a9dd-562366e852a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.60.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:e2:35:32:bb:b2:85:a9:51:bf:ea:e0:49:72:e6:3c:00:7f:
         af:95:20:71:17:f9:9c:c5:47:6b:f0:dc:5b:7c:77:1d:e9:98:
         6c:08:b2:cf:70:57:be:e7:8b:0b:4d:f3:ee:7a:f0:3e:c6:35:
         5b:f4:21:8d:89:e5:2e:fc:a6:8f:2e:f0:6f:45:3e:9e:d3:93:
         64:23:ef:ee:71:b4:7e:a3:b6:45:1c:c2:4c:1d:bd:50:11:f1:
         ce:85:a8:b4:2b:b7:91:76:14:b0:6f:f7:56:a7:34:4f:af:7f:
         95:93:fa:be:12:b3:81:1f:0a:9e:c9:04:44:96:a8:c1:b4:59:
         23:98:38:3d:24:95:10:61:84:5b:3c:e5:c7:d8:b4:01:66:27:
         48:d3:55:6e:40:93:6c:53:53:f5:fc:89:63:12:79:cb:db:07:
         ce:11:3c:15:76:e7:04:4f:91:07:19:c2:cb:6c:9b:91:26:87:
         d3:ac:bc:16:59:e9:2f:6c:75:7d:16:30:58:52:fa:2c:ac:fd:
         22:8a:81:de:5a:ec:dc:b5:be:6a:cf:e5:81:0f:1e:47:27:1f:
         2b:f7:67:53:fd:5b:14:42:75:92:bd:b0:ad:1b:c1:98:41:12:
         14:8f:61:ef:38:42:79:a5:b8:20:6d:05:1c:63:5c:ab:83:0a:
         38:1f:3d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:22:36 2025 by rpki-client