Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe5bba32-8ffd-36cd-900f-7c80deb0dce9.roa
File:                     fe5bba32-8ffd-36cd-900f-7c80deb0dce9.roa (raw, json)
Hash identifier:          wAnM5noI1xgudtXqZdhaRhjozjsbp3iAc3NigpG+Gqg=
Subject key identifier:   FE:F7:1E:92:F4:E6:B3:99:45:70:67:73:D9:4D:9F:D5:99:96:86:55
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A1B6014150CA0E9674ECAAD80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe5bba32-8ffd-36cd-900f-7c80deb0dce9.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     38040
IP address blocks:        23.47.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:60:14:15:0c:a0:e9:67:4e:ca:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=b904f61b-a847-475e-a1cf-85cd13839165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:20:89:8e:7f:c8:24:d2:39:c0:cd:80:22:d5:
                    e8:ba:13:13:e8:5b:d4:d1:46:00:33:be:30:b7:e8:
                    1b:29:69:f6:33:e1:e4:cd:d0:71:7a:16:5a:74:f8:
                    fa:86:a2:dd:58:b7:13:c9:f6:17:64:4e:ad:e5:ac:
                    8a:8d:02:65:ea:6b:10:bf:e1:ba:dd:49:3f:c9:64:
                    34:27:aa:69:87:fc:ea:0c:1c:65:a9:c8:d3:e4:dd:
                    6d:2f:59:17:8f:63:50:e4:93:6d:f2:25:7c:e7:3f:
                    5d:10:dd:91:38:6a:d4:62:ff:13:32:1d:5d:28:a4:
                    4e:6b:9a:67:4d:bb:ef:10:ce:29:89:b7:45:18:13:
                    6a:ba:e8:a1:1a:d0:74:fd:fa:29:68:8d:77:02:4f:
                    da:3e:1b:61:e2:2a:db:e4:72:3c:bc:57:ba:f1:23:
                    b6:65:f6:a8:84:50:d3:44:83:19:7a:a0:45:30:da:
                    62:71:7e:57:87:ce:73:77:5b:1a:03:a0:de:8c:af:
                    75:00:79:3d:0a:55:4b:5b:7d:99:7b:07:7c:9d:92:
                    28:bc:d5:a1:a4:d9:00:5f:e9:d4:0f:d4:2f:b4:ac:
                    4a:5a:13:25:f2:46:99:cf:6b:7d:37:9f:5a:ae:4e:
                    dc:6e:8e:86:59:9d:86:91:6c:69:63:0b:45:d3:57:
                    4a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F7:1E:92:F4:E6:B3:99:45:70:67:73:D9:4D:9F:D5:99:96:86:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe5bba32-8ffd-36cd-900f-7c80deb0dce9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.47.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:c5:66:41:22:8a:09:fd:a2:6f:a3:28:19:b6:8c:4b:60:bf:
         7a:4d:ec:cd:67:fc:49:5b:d4:d4:5e:aa:4d:c3:3c:9d:c3:0c:
         f5:a1:68:d4:4a:1f:66:81:1b:0e:c9:7c:34:12:ff:89:28:c5:
         d1:dc:97:84:24:23:a2:32:b0:69:27:99:b9:c9:19:54:2e:26:
         10:35:fb:a8:d5:42:aa:7a:3e:a0:ed:df:96:60:21:7f:ee:b0:
         fd:dd:3c:ad:94:fb:b2:ce:58:47:c3:02:ef:92:b9:23:92:94:
         46:85:7d:23:c0:8f:bc:3d:c5:50:b2:95:9f:20:b6:0d:f2:1b:
         59:91:db:66:4d:8b:d9:d8:93:f6:93:6f:5d:c6:9a:eb:61:47:
         35:f4:66:6f:23:8e:62:10:5b:a7:4b:84:85:e6:b1:46:34:e4:
         c5:fa:a8:3f:9f:72:e6:3d:9c:76:6e:35:d7:96:50:6f:51:49:
         a8:a4:a2:ab:df:e0:f6:52:6a:c8:7e:ab:d0:e4:7b:39:82:46:
         1b:28:c9:74:7e:4a:8e:01:b7:16:a2:12:d0:db:12:ee:b2:8c:
         de:4b:b9:96:12:fe:cd:f6:36:8c:af:2d:be:a9:74:a2:1f:f8:
         7b:92:5a:ad:b3:bb:c1:00:00:28:66:4c:27:21:c3:b9:f5:59:
         ab:cf:f6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:52:09 2025 by rpki-client