Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ffc13584-4948-3ea9-92fd-98f056b693d4.roa
File:                     ffc13584-4948-3ea9-92fd-98f056b693d4.roa (raw, json)
Hash identifier:          sk7HgsjtYz4waaO4DKXjBeYUDq5/rgXlZ3LqrWLk+Sc=
Subject key identifier:   E0:2E:9C:63:8F:F1:1B:28:68:95:1B:CF:A9:0D:46:B2:C9:05:21:9B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A093AAE471CC42724054BF8C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ffc13584-4948-3ea9-92fd-98f056b693d4.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     20940
IP address blocks:        23.55.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:ae:47:1c:c4:27:24:05:4b:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=34460cb9-1572-48f4-8bad-497366b39541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e6:b2:81:0e:93:18:ac:40:67:a5:f9:e8:41:
                    bf:0c:94:ac:66:ff:21:e5:b1:9e:28:a9:f2:99:42:
                    3c:dd:a8:87:0a:7f:0e:c1:04:ae:50:08:a2:27:fd:
                    13:20:64:3b:95:d5:4c:6d:80:db:0e:76:5a:f6:45:
                    b1:d5:6f:ca:a5:1c:1d:2c:6d:86:14:35:a4:f3:fd:
                    72:34:9f:19:5e:ec:78:5f:f6:15:33:ff:b8:29:dc:
                    dd:59:12:2d:d2:48:b3:45:0d:2c:53:cd:cd:1f:23:
                    10:13:95:cb:d9:e9:58:f9:9e:66:b8:86:29:81:05:
                    96:8f:a4:be:e1:5f:93:f2:fb:c5:70:21:c2:42:2c:
                    71:13:07:bf:2d:1e:51:ca:72:b3:a1:53:e1:54:fe:
                    ee:27:3d:bf:f7:6d:24:61:55:7b:7d:25:8a:fb:19:
                    7d:ca:b1:02:16:08:64:89:c7:66:2a:70:f2:53:1d:
                    4e:5b:8a:20:87:bf:f2:f1:eb:05:b8:39:47:b7:e3:
                    17:ab:cf:06:3d:59:f1:47:48:e2:c8:5b:1a:49:ef:
                    64:79:e7:63:ae:40:a2:7f:d4:81:f1:01:05:5e:24:
                    69:5d:b7:23:e6:71:39:21:c3:c6:39:a3:2c:22:82:
                    57:20:59:ef:ff:5a:13:76:54:18:cf:5c:4d:7f:3d:
                    11:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2E:9C:63:8F:F1:1B:28:68:95:1B:CF:A9:0D:46:B2:C9:05:21:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ffc13584-4948-3ea9-92fd-98f056b693d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.55.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:bd:96:f2:ab:45:02:9e:01:fd:d5:76:4b:a2:ec:b5:69:5d:
         c8:f8:bd:d2:a7:4e:12:d3:69:ae:01:f6:bf:e9:f6:30:12:c1:
         83:61:96:19:a8:8b:ef:0d:cd:8f:0a:41:d0:ef:bf:da:57:d0:
         48:3d:b7:cf:ed:bb:80:12:93:a2:d4:9e:27:99:26:2f:d5:b2:
         9f:5b:96:e0:8e:86:9a:fd:d7:37:65:30:b7:55:89:6f:65:bf:
         4d:f6:f4:f3:37:70:fb:fd:5f:f6:52:74:d0:ce:22:bb:22:30:
         4e:b6:2a:95:05:57:94:cb:0b:3c:0c:06:a1:fa:0c:fa:92:56:
         95:08:33:71:32:64:99:00:48:ec:e5:a6:df:54:fc:22:93:a9:
         ea:06:ec:4e:7f:7d:af:9f:57:b3:d0:2d:95:be:69:18:25:a7:
         0b:c0:e9:96:33:aa:1c:ca:b4:2f:f7:3e:26:7d:9b:55:18:74:
         ad:f2:5b:50:33:94:53:a3:ff:9c:a8:98:da:8a:fa:a6:26:5a:
         43:15:c0:c9:db:b4:17:ca:a2:ab:57:56:08:28:15:60:9d:e1:
         cb:e5:96:47:1c:03:c1:74:e0:a8:a0:b2:40:5b:4a:1b:01:26:
         a9:d8:95:81:d9:b7:8e:3f:e8:bd:e8:e3:9f:07:6b:73:d8:ab:
         8e:f6:10:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:35:16 2025 by rpki-client