Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06f4cdd6-7003-3d36-8862-8825571ab6f5.roa
File:                     06f4cdd6-7003-3d36-8862-8825571ab6f5.roa (raw, json)
Hash identifier:          AFN/jARWt3HSzDo+dpKkn+uRa8lOT/WsGYCrfj0lCrA=
Subject key identifier:   66:85:24:26:43:EF:AB:24:8B:1F:73:F8:DC:0E:42:2C:ED:5C:E0:16
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858498769D50ECB18602EE2212C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06f4cdd6-7003-3d36-8862-8825571ab6f5.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     16625
IP address blocks:        23.200.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:d5:0e:cb:18:60:2e:e2:21:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=c656933a-d894-44c7-a060-6a23f1eaa0c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8e:11:1f:76:12:0d:be:cf:07:28:97:b2:ce:
                    b9:b5:ac:53:5b:ac:74:e6:36:93:44:21:aa:8d:ae:
                    66:fd:3e:a6:02:1b:62:ac:fd:95:6c:80:b4:78:44:
                    49:54:2a:36:8b:f4:53:3c:aa:5e:7f:90:f5:2f:0d:
                    6a:9d:3c:9b:be:d3:3b:51:df:af:33:8c:36:95:f3:
                    de:05:f5:a5:c4:9f:fb:c5:ac:c7:70:5f:2c:75:5e:
                    55:a1:e6:d0:fa:4e:f1:6a:f4:14:33:7d:65:f3:30:
                    10:09:bc:3b:59:e4:13:7e:42:25:c2:8f:60:36:fc:
                    de:ba:91:7f:98:7f:ab:a2:77:a1:85:6b:c6:a3:3d:
                    c0:22:70:3e:e7:12:1e:b2:d4:29:22:d0:42:24:27:
                    fb:86:2d:94:4e:6b:34:c5:ce:71:81:17:74:a5:aa:
                    0b:13:82:dd:75:f6:0d:88:2e:a0:af:9a:54:d3:79:
                    3d:c4:e8:6e:b3:49:48:e4:80:64:26:10:15:3c:d8:
                    61:51:3b:06:d4:bb:5b:11:41:a9:ec:20:10:ba:1b:
                    9d:38:7c:40:76:76:7b:80:dd:1c:07:b4:e5:3f:43:
                    81:17:5c:f3:d9:4a:5d:55:6d:77:3b:7a:ca:67:cc:
                    42:3e:37:c2:3e:15:89:a5:6a:25:86:34:c1:75:b9:
                    39:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:85:24:26:43:EF:AB:24:8B:1F:73:F8:DC:0E:42:2C:ED:5C:E0:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06f4cdd6-7003-3d36-8862-8825571ab6f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.200.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:be:b6:a6:03:08:9e:5b:31:d7:53:07:21:8a:59:b2:78:d2:
         f5:ef:7a:81:15:47:43:df:55:4d:a8:be:59:11:7d:fe:ec:7b:
         eb:92:b4:aa:85:cc:1d:5c:e0:54:5e:d6:51:9e:79:25:1b:23:
         1a:15:39:52:65:3a:d5:f7:f1:d9:e0:e8:4c:97:11:f2:e2:9b:
         50:a7:85:41:1d:03:a2:d2:80:dc:e1:1f:09:4c:45:f2:be:6f:
         8e:da:8b:f8:e5:11:df:08:83:fa:d2:4e:97:67:8c:72:66:82:
         29:d1:9e:e5:26:d6:b8:f7:ff:7a:51:ce:bf:4b:25:52:d3:b2:
         55:e2:46:ba:b5:60:1b:47:32:c3:4a:1d:5d:62:57:ab:7e:59:
         a9:ae:bd:45:2b:68:13:d3:d6:47:d1:7a:8d:8e:13:d0:27:0a:
         7c:34:17:94:6b:c4:f5:48:21:ae:a5:1d:36:62:2a:ff:52:de:
         ac:4e:d1:e2:37:63:d8:e8:09:73:a4:80:df:40:a3:3d:38:d2:
         41:5a:fd:68:85:60:55:88:5f:87:28:75:b5:93:5e:4d:ec:ae:
         d0:ee:ff:24:e0:ee:ea:59:30:f0:c9:b4:c9:d8:43:39:bd:db:
         67:05:2a:eb:61:8a:af:7a:08:7d:3a:e4:4a:04:cc:dd:3f:9b:
         45:5a:d0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 02:45:07 2025 by rpki-client