Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1f92ad0-4921-3413-ac75-89036ab2304c.roa
File:                     b1f92ad0-4921-3413-ac75-89036ab2304c.roa (raw, json)
Hash identifier:          0qk/oqkEO1H2Yq+B58F7fXCh+nFvHqHmuD9k0zu9Uuk=
Subject key identifier:   ED:E3:E6:D4:BD:AD:EB:CB:E3:2E:8F:9D:03:25:DB:DB:BD:ED:87:03
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858488DAB6601772247ACA607A880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1f92ad0-4921-3413-ac75-89036ab2304c.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     16625
IP address blocks:        23.54.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:66:01:77:22:47:ac:a6:07:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=20eff385-833c-4c9f-bd6b-e2e42b3da92d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:50:bd:51:08:5b:d7:5e:8f:87:66:db:cd:87:
                    d7:83:4c:3c:ba:ed:a4:df:b8:24:10:be:00:be:54:
                    78:45:fd:00:e3:c9:8c:fc:e8:79:59:65:5d:a7:43:
                    f9:31:81:5a:ba:d8:3c:5c:ea:c3:37:78:cc:7e:b0:
                    38:ec:84:96:39:e3:58:e2:d6:7d:f2:a3:ad:b4:d6:
                    b6:d3:e1:e3:3c:4a:41:23:d3:ac:94:f3:72:4a:ee:
                    df:23:e7:91:28:2f:6f:07:45:cb:31:9b:b7:3c:b4:
                    17:e4:9a:47:82:be:4d:ce:b5:d2:03:8a:e2:b9:fe:
                    e8:c9:d4:86:be:e9:c9:81:96:87:44:2d:79:5f:71:
                    07:ba:63:06:cf:46:45:43:91:9d:ad:50:29:d2:36:
                    f7:4a:28:28:f3:43:00:be:0d:f6:f0:a8:8b:b3:6b:
                    5f:0b:40:28:2c:e0:69:c2:b6:18:c4:39:0a:e8:0d:
                    ad:5f:e9:c7:2e:73:a3:2b:a1:2b:3e:1f:31:91:20:
                    12:84:71:b9:68:63:97:c6:3d:8a:8f:84:f2:47:53:
                    8b:b5:18:52:92:4a:f0:6f:69:b9:bf:9f:f7:26:fb:
                    9b:b4:fe:17:6c:58:a2:bc:5e:1e:ea:b0:f7:c1:22:
                    2c:26:d9:a7:7d:a3:a7:63:a9:48:51:43:bc:8f:bf:
                    a7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E3:E6:D4:BD:AD:EB:CB:E3:2E:8F:9D:03:25:DB:DB:BD:ED:87:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1f92ad0-4921-3413-ac75-89036ab2304c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.54.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:bd:aa:a6:85:67:4b:0a:df:a7:0d:e2:dc:70:00:6e:6d:9c:
         19:b0:1c:38:2e:85:d0:49:eb:37:43:23:72:c3:d0:07:cb:a4:
         bf:1e:f9:74:08:eb:28:1a:a9:73:31:ff:bd:ef:0f:e2:6b:99:
         8d:19:97:20:6e:6d:73:a0:ca:86:70:73:cd:75:a8:8d:23:79:
         63:26:8a:0c:11:84:9f:66:df:3a:39:ca:63:90:bb:d8:e0:e4:
         4c:ba:7d:20:d7:48:c4:74:7f:c1:12:58:4e:83:ad:49:00:a6:
         78:70:50:02:4a:2f:2f:2a:2e:01:fe:ac:fd:04:0f:db:13:ab:
         86:80:cf:65:4f:59:58:65:72:f2:6e:4e:57:0f:27:3f:1d:b6:
         2d:c6:db:36:ee:b5:10:21:e2:4b:53:df:86:cd:17:92:b5:03:
         86:95:79:78:58:12:34:cf:ed:ae:a7:4f:f6:4c:f8:57:5a:a1:
         c2:c3:91:f8:1e:af:e0:71:f3:bf:01:0f:d0:bb:fc:0a:7d:13:
         9a:ad:b8:6b:49:d1:c9:30:e4:83:82:19:0f:40:b4:53:98:a7:
         e2:85:8d:49:4e:35:2e:57:7d:fa:34:37:ef:83:0b:de:98:5a:
         d0:c7:a5:77:7d:ef:5f:5a:06:1d:d0:88:d1:bb:d5:83:4f:47:
         e4:29:b5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:34 2025 by rpki-client