Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc47f7c2-3cfe-3f60-aa5c-0ab42c14edba.roa
File:                     fc47f7c2-3cfe-3f60-aa5c-0ab42c14edba.roa (raw, json)
Hash identifier:          6iOnXFhGQ6BMt1oNCiSYhWAsTHy2Vlznx1tuADUZ8jI=
Subject key identifier:   5F:2D:09:86:72:8D:BE:A2:0A:C6:A3:5D:5C:72:A5:98:0F:67:22:D3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A03A56F205B982D4894B6DA20
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc47f7c2-3cfe-3f60-aa5c-0ab42c14edba.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     16625
IP address blocks:        23.14.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:6f:20:5b:98:2d:48:94:b6:da:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=02c8abdd-5b26-4c74-b3e2-d2d2fa3111f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4a:a0:4b:7e:04:1f:07:48:25:ee:79:05:5d:
                    4e:4c:3f:f1:5f:f0:5d:a1:a3:8f:f6:46:0c:72:b2:
                    48:90:39:09:22:3d:5a:f8:3b:0c:77:32:43:a3:63:
                    a3:58:df:f4:68:50:ee:50:08:2f:d9:35:46:27:04:
                    1a:82:65:9c:3c:90:eb:e0:f2:4e:58:e0:97:17:c3:
                    a3:d2:b8:c7:b2:c3:e2:27:55:29:02:0a:d7:35:a5:
                    f8:07:9c:4e:df:30:07:d1:54:c1:7e:9a:04:81:00:
                    69:f5:26:4f:55:72:8b:e4:f9:b8:0f:a8:1a:8b:c4:
                    e1:7a:9c:ea:bd:81:84:00:c8:06:45:47:89:58:94:
                    57:84:3e:ec:36:f2:4b:ab:3f:10:20:1e:1a:89:4c:
                    f3:43:f4:13:93:b0:e2:94:53:c0:e2:d2:a7:cd:22:
                    ec:9d:f1:5e:56:a3:26:38:69:49:17:15:f9:12:9e:
                    48:51:cd:73:51:7d:ac:ce:57:4d:22:4a:7f:1d:d3:
                    40:58:44:ae:78:57:1f:f5:8e:e6:44:31:b8:aa:5b:
                    25:c2:50:b4:80:17:0a:35:9b:d0:78:58:bc:2a:1b:
                    8a:92:b8:bf:21:f2:0e:ee:6c:2a:4c:2e:51:bc:d5:
                    58:d7:d8:f7:bf:44:ac:27:60:33:2a:e9:e7:1d:b8:
                    ce:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2D:09:86:72:8D:BE:A2:0A:C6:A3:5D:5C:72:A5:98:0F:67:22:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc47f7c2-3cfe-3f60-aa5c-0ab42c14edba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.14.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:f5:72:4e:0a:d2:90:31:2e:47:87:14:3a:af:c2:d1:88:65:
         fd:dc:4e:8f:91:90:78:53:32:95:b9:75:ac:d8:ce:79:1c:a0:
         92:c8:59:f1:f2:25:a4:6b:5f:45:5c:fe:b1:06:8b:8f:aa:8b:
         91:60:7a:6b:06:19:b7:70:44:91:58:03:4f:25:ff:4e:5c:2b:
         70:de:a3:8e:c7:b1:d6:67:7e:be:0e:74:84:ac:ed:8e:e2:3a:
         10:91:3c:c0:20:f9:0c:6c:4e:a4:df:44:6f:6b:10:07:ca:66:
         9f:77:b3:6d:e9:da:82:55:1b:fd:cd:c9:6f:d7:86:93:c7:b9:
         3e:76:13:86:56:e1:7b:01:7f:4c:b3:29:ce:73:8a:1e:45:e7:
         22:8f:15:9c:b4:10:0c:d9:d5:eb:97:a6:ae:e5:ff:f7:81:9b:
         30:59:7b:ef:4b:5b:6b:b6:b2:89:2c:ba:80:0b:0a:e2:df:37:
         e0:4f:06:91:0a:da:97:5b:75:4f:8a:f9:2b:3b:38:94:2d:e6:
         39:eb:73:50:dd:46:14:cf:4a:2e:0f:72:1a:3d:8f:c4:5b:06:
         80:44:60:83:a0:95:3a:81:78:f4:b7:b8:cd:ff:b0:bf:4f:b7:
         db:c3:2c:b2:c6:77:48:74:cd:04:35:19:f8:63:a0:ea:bc:14:
         f4:d9:17:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:43:33 2025 by rpki-client