Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6db7d794-a7c6-38ad-935d-5abaa18d8002.roa
File:                     6db7d794-a7c6-38ad-935d-5abaa18d8002.roa (raw, json)
Hash identifier:          7pApbNDn8cXHyP3GVG1un42iRIqlckKpvEEa9ofryBo=
Subject key identifier:   15:B1:3E:8E:C9:1C:E5:E5:4E:C8:C2:56:57:73:DC:89:7F:A3:11:C0
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584A3CE02B83774F815FA916CA00
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6db7d794-a7c6-38ad-935d-5abaa18d8002.roa
Signing time:             Thu 19 Jun 2025 01:00:50 +0000
ROA not before:           Thu 19 Jun 2025 01:00:50 +0000
ROA not after:            Wed 17 Sep 2025 01:00:50 +0000
asID:                     31898
IP address blocks:        23.239.238.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:e0:2b:83:77:4f:81:5f:a9:16:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Jun 19 01:00:50 2025 GMT
            Not After : Sep 17 01:00:50 2025 GMT
        Subject: CN=8ff6a999-3d34-455f-a9fa-366ccd2af966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:be:1e:d1:2b:5c:ff:e2:82:f3:9a:50:ef:a3:
                    85:bb:83:1b:e3:b1:7d:8d:cb:78:30:ac:8b:d2:6a:
                    47:97:be:b8:28:a9:af:96:c9:fd:35:ee:57:10:10:
                    e5:09:28:d0:e6:64:fb:fe:99:a5:18:70:bb:78:4b:
                    8a:36:94:36:0f:41:b2:be:35:ac:6f:fa:d0:15:60:
                    d2:c1:c9:a6:ec:29:9d:42:d1:b4:0f:19:2d:fc:81:
                    ec:3a:be:6a:57:0e:e0:ab:b1:a2:ec:e0:78:d1:de:
                    37:90:36:d9:cb:fe:08:7f:31:b5:4f:b7:d0:55:80:
                    7e:fd:62:55:86:f7:7c:8c:7e:0d:8c:3a:72:53:f7:
                    45:f1:86:d5:26:c4:6c:12:b5:ff:d5:c1:1a:bb:0c:
                    b0:ce:5a:6b:fc:67:e4:f2:c7:d7:b5:e1:5c:f3:46:
                    20:35:65:99:78:cf:74:e7:ee:35:35:1f:aa:da:f5:
                    a0:f9:15:f7:3e:6f:70:b7:62:fb:e8:ba:95:ba:05:
                    8e:64:e7:86:4e:d9:87:ec:fe:8a:cd:8b:6e:26:4b:
                    fc:55:c3:68:b9:98:a6:8a:66:09:40:8d:39:97:18:
                    b8:71:57:e1:99:ad:28:7a:46:d8:5e:99:db:78:e9:
                    1b:1a:b1:26:f9:30:46:3e:cb:43:11:c9:42:74:f7:
                    c6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B1:3E:8E:C9:1C:E5:E5:4E:C8:C2:56:57:73:DC:89:7F:A3:11:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6db7d794-a7c6-38ad-935d-5abaa18d8002.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.239.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:96:ca:75:c1:4f:4d:b7:01:ac:05:8e:22:1f:2b:4e:f8:c6:
         cb:8f:4d:28:c2:5f:5e:59:2c:13:a0:f6:da:6c:74:41:5f:8e:
         39:80:fd:90:b7:b1:2e:c3:d4:cd:48:16:67:ab:ed:2c:1f:b1:
         5c:3d:bf:b1:82:00:ff:e6:30:6b:19:9f:fe:8c:6f:74:a6:1b:
         6e:eb:94:f4:22:86:d5:ae:29:20:aa:52:bd:10:d6:85:0b:dd:
         2e:e7:54:d0:55:80:eb:8b:49:47:13:9f:7e:8b:82:79:57:2a:
         47:cb:5f:85:1a:3c:20:2d:53:fb:db:7d:e3:89:ef:c3:34:9d:
         5f:7c:d7:06:6a:d1:8a:64:a3:56:86:01:bf:93:39:76:c9:a4:
         8e:d8:46:16:48:17:4d:68:66:d0:53:69:9d:47:fa:2a:f2:5b:
         7d:94:d6:bc:05:61:85:c7:46:5c:be:c9:66:88:3a:5d:85:b3:
         85:cf:17:b5:63:a6:29:43:6e:3f:38:69:f2:59:ec:93:18:ce:
         f9:24:61:70:6f:f3:76:d9:db:98:83:54:10:59:7f:5b:cf:15:
         5e:a8:78:b3:fd:32:ca:cb:46:38:86:8a:15:83:c0:a1:65:2e:
         c4:4d:43:af:7a:e4:8f:fa:e0:1c:a4:7c:b1:2e:00:63:09:13:
         45:62:53:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 06:06:14 2025 by rpki-client