Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cad8c1a0-7e26-314e-a1df-7b6d96a89bef.roa
File:                     cad8c1a0-7e26-314e-a1df-7b6d96a89bef.roa (raw, json)
Hash identifier:          Dy4rm6ClDKz6Nm+GNH5UBN1o4xXMb22VJw8MfBA3xd8=
Subject key identifier:   36:B9:F2:D4:4C:0D:EF:34:C6:A9:6B:2E:FC:86:E0:25:EA:99:25:56
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849CE9A4419AEAC7626FE75AE00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cad8c1a0-7e26-314e-a1df-7b6d96a89bef.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     32787
IP address blocks:        23.46.231.0/24 maxlen: 24
                          23.50.138.0/24 maxlen: 24
                          23.50.139.0/24 maxlen: 24
                          23.57.108.0/24 maxlen: 24
                          23.193.47.0/24 maxlen: 24
                          23.206.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:44:19:ae:ac:76:26:fe:75:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=9873ca39-a52b-4ec9-8516-d126617c4832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:da:6c:75:87:d1:8d:b4:a8:61:7e:bd:f6:8b:
                    26:0e:c8:78:7e:97:94:98:57:61:30:7a:02:b6:a8:
                    05:37:88:75:00:40:0f:54:8b:da:10:0b:90:50:db:
                    93:a6:17:ec:28:9f:40:b5:59:09:34:2e:93:c6:46:
                    37:98:3b:1d:09:ba:92:cd:af:43:53:17:66:2e:f4:
                    36:7e:d4:f3:2f:3c:af:cb:38:b8:e6:1d:cf:cf:94:
                    df:10:39:07:3b:42:1d:9c:4c:1b:04:94:16:fe:27:
                    2e:5a:61:4b:7f:9b:d8:7c:98:be:f7:f6:c2:09:ae:
                    83:87:92:35:5a:da:05:93:e8:0f:a0:fd:d4:29:f2:
                    af:be:64:13:bc:40:b9:da:0d:4e:6f:2a:c9:d8:a5:
                    85:d2:80:39:15:1e:a1:24:07:0d:bf:5e:ba:20:50:
                    c8:42:ae:3e:30:f6:e2:f5:ca:fa:98:cd:a0:fa:34:
                    28:80:cb:8d:b1:47:20:d9:af:56:59:bb:bb:34:ae:
                    f5:24:d5:1a:fd:80:d1:96:0a:8c:0d:66:ef:12:92:
                    14:3f:dc:cb:a4:79:f8:a7:11:da:34:fa:fe:9d:2d:
                    95:fc:be:cb:f7:2d:97:b7:89:55:18:87:f4:5b:ef:
                    e9:c1:81:69:14:21:ec:01:87:30:4d:18:14:f7:6e:
                    e4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B9:F2:D4:4C:0D:EF:34:C6:A9:6B:2E:FC:86:E0:25:EA:99:25:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cad8c1a0-7e26-314e-a1df-7b6d96a89bef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.46.231.0/24
                  23.50.138.0/23
                  23.57.108.0/24
                  23.193.47.0/24
                  23.206.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:e1:47:c5:e8:ed:4c:7a:36:e8:83:47:4c:ae:84:bc:a5:53:
         58:a0:0a:0e:e7:3f:3f:f2:17:71:21:f9:c9:a8:e4:03:f5:6d:
         f7:bb:72:9d:43:98:8b:d0:a9:4f:b6:70:15:c4:f8:fc:49:31:
         40:bf:49:00:2e:05:0e:a7:60:ff:e9:42:3a:b2:02:46:f5:02:
         22:2d:e2:85:8c:17:a8:47:ed:27:40:e7:d7:28:6a:27:b1:17:
         d0:d2:a9:6b:2b:a4:28:a6:59:00:f4:75:b0:94:03:4f:e3:9b:
         2a:f8:da:19:46:92:82:09:21:37:28:9f:e1:40:6a:fa:33:f7:
         f9:32:e1:3e:59:86:a4:52:2b:8b:ac:dd:52:d3:ef:18:6c:2c:
         b8:6c:53:87:0a:13:23:39:7e:2b:d6:8d:aa:9f:5c:97:f6:6a:
         26:9e:0c:8b:58:de:f2:c1:22:8c:18:22:69:a5:a8:00:ea:e3:
         97:c8:7f:95:a1:64:d1:1c:56:bf:fb:12:ac:94:7e:0b:f3:1f:
         22:d5:86:6b:77:14:20:e0:5a:86:09:a1:85:fe:a8:3e:72:17:
         3f:b5:81:a2:4e:fa:9c:82:46:50:0a:5e:05:60:37:99:9b:67:
         e2:4e:47:a7:21:98:33:c9:33:96:9b:61:48:38:7f:f4:b8:a9:
         0b:89:4c:c0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:16:11 2025 by rpki-client