Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8abe964-571c-33e2-b05c-0f35a7c8ce9b.roa
File:                     f8abe964-571c-33e2-b05c-0f35a7c8ce9b.roa (raw, json)
Hash identifier:          CJFP/663uaBFvhhJFiEHA0XmNnEe1OnPUFs23W4PHt0=
Subject key identifier:   12:4D:D6:67:34:15:AC:EE:76:D4:DC:91:E2:20:0C:1E:02:F0:F8:34
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A03A55C89CC76B6A008F932C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8abe964-571c-33e2-b05c-0f35a7c8ce9b.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     16625
IP address blocks:        23.2.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:5c:89:cc:76:b6:a0:08:f9:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=18211d12-5466-4e2b-bba7-5527b8d56434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:06:de:94:ae:6d:3f:3f:a0:ec:d8:92:f9:45:
                    24:dc:d0:c4:df:e0:cb:43:52:eb:a5:98:1f:06:37:
                    31:73:44:b0:a2:10:2d:5a:78:c3:55:0a:70:13:ae:
                    28:8e:df:e5:cc:8f:12:25:0f:d1:a6:f9:10:c2:62:
                    1d:9a:e4:d3:86:c4:1c:b7:f8:17:d5:af:76:b0:5c:
                    12:95:fc:97:57:07:f4:8c:7f:3f:0e:b1:2d:22:fa:
                    6a:7b:7f:cd:a3:28:60:69:3a:8d:f1:07:8c:d0:99:
                    8d:ae:f2:a3:8b:8d:40:73:d0:fc:cb:50:0d:df:5d:
                    a8:35:33:6a:73:16:b2:d0:a5:b5:1b:0c:11:21:0e:
                    24:71:aa:95:53:78:fc:96:37:d4:6a:85:b1:a7:4e:
                    1e:d8:77:d6:a2:8d:88:0f:e2:87:ad:29:74:19:b7:
                    f5:74:9a:bc:09:52:81:3b:24:df:20:1f:12:47:68:
                    66:df:a6:d5:23:19:c7:68:d0:43:6c:29:48:62:63:
                    41:e1:c0:8e:22:36:12:64:26:49:fc:c8:08:82:b2:
                    a1:da:2c:3c:d3:1b:37:fe:a9:93:49:2b:60:b0:03:
                    a2:2f:ae:bf:9e:43:aa:11:e4:51:48:27:2c:a0:68:
                    54:8c:36:5c:88:ed:b4:19:8f:1e:d3:29:ae:e2:78:
                    98:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4D:D6:67:34:15:AC:EE:76:D4:DC:91:E2:20:0C:1E:02:F0:F8:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8abe964-571c-33e2-b05c-0f35a7c8ce9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.2.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:72:48:1b:ba:48:30:59:f5:9f:c4:be:67:c7:21:94:b2:d0:
         76:cb:46:f5:4a:2d:21:b3:c1:27:5d:c9:d5:7c:0f:01:85:c2:
         5b:8b:29:14:8b:d7:fa:82:5e:54:a1:da:2a:d5:5f:95:8b:9d:
         f2:a5:26:43:d2:31:5e:5c:e2:94:cb:39:b0:5c:86:a2:ac:6b:
         a6:4b:23:2a:e8:ac:67:20:92:92:0e:fb:ea:71:51:d8:8b:4f:
         43:76:b6:3d:06:a7:03:99:3c:db:d6:a5:e5:72:03:b6:b0:f4:
         40:2d:af:cd:23:2e:ee:05:bf:89:ca:bb:7c:73:66:cb:c2:95:
         c0:64:db:28:45:a9:e7:bf:d8:d4:b2:53:b3:bb:d2:4d:1f:4a:
         7d:88:2a:c9:fa:8e:60:7e:a1:d0:c6:59:41:8b:0a:ed:2d:e0:
         e7:42:c5:0c:e8:a8:91:53:8c:0f:3a:28:5b:a2:6e:de:54:5d:
         8a:3f:c6:f8:76:00:93:25:94:d3:6e:c6:fe:27:07:0b:5e:20:
         43:2d:22:cc:96:1c:6a:cd:72:70:e2:f3:ec:b5:ae:96:a3:dd:
         85:55:56:33:8e:de:f2:de:c0:b9:08:de:bd:9d:86:29:95:63:
         b2:f8:d2:b9:91:f3:99:aa:19:65:62:0a:e3:55:6c:6e:39:3a:
         82:a4:b6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:39:20 2025 by rpki-client