Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1828ecab-23de-3bda-859b-56854c16fd66.roa
File:                     1828ecab-23de-3bda-859b-56854c16fd66.roa (raw, json)
Hash identifier:          GASTgMji6w6GsGcR/jrsdWtbrtXJuADBPoF/dEC4Bz8=
Subject key identifier:   FB:EF:82:33:6B:95:18:76:72:51:76:AD:82:F5:08:78:EA:71:13:72
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A4C3B266C64FE066CD4FDAC60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1828ecab-23de-3bda-859b-56854c16fd66.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     16625
IP address blocks:        23.57.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:26:6c:64:fe:06:6c:d4:fd:ac:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=c4160715-eb9e-4822-860a-088f1125bdce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:85:d1:dc:e4:58:47:8f:48:58:d2:89:29:d2:
                    6a:bc:aa:16:9d:bd:0d:a2:eb:c8:fb:dd:7e:fb:a3:
                    c3:f3:19:27:a0:bb:82:4c:c9:35:20:5e:52:42:66:
                    52:5b:13:09:0b:74:d9:b9:06:71:43:5a:ac:88:00:
                    bb:e4:93:82:41:66:41:7b:eb:0c:fa:f8:89:02:45:
                    2b:a8:c5:ac:23:ff:91:57:05:5c:e7:37:ca:6a:39:
                    9f:03:a3:bd:b7:9c:07:c1:02:f4:b7:45:6c:76:26:
                    8a:c6:43:9a:ed:7f:cc:59:1b:35:44:9e:8f:8a:26:
                    bd:9d:5c:6e:1f:90:1e:35:e4:6c:88:17:4b:6e:ee:
                    ae:63:19:00:d9:c0:95:03:c2:96:a0:20:40:04:1a:
                    99:7d:3c:7e:ad:bb:30:dc:be:e5:96:fa:8f:46:23:
                    61:14:59:72:c1:55:c7:c6:7f:8f:aa:69:74:17:2f:
                    a1:c2:7f:da:b7:8e:fc:fc:de:68:a0:35:2b:db:1f:
                    6f:a5:27:c2:64:10:79:4d:f7:a3:23:48:aa:e5:1b:
                    dd:70:31:39:a9:aa:bf:f4:69:57:34:93:c9:8c:d9:
                    f6:70:32:c6:c1:ff:30:ce:9a:4f:eb:31:2c:7b:a7:
                    1f:e4:66:6d:88:85:49:2c:f4:d2:30:63:3f:30:23:
                    d7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:EF:82:33:6B:95:18:76:72:51:76:AD:82:F5:08:78:EA:71:13:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1828ecab-23de-3bda-859b-56854c16fd66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.57.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:44:3b:72:a7:ff:a5:d2:8d:27:66:28:2f:41:fb:40:40:5b:
         9a:0b:e0:35:74:48:7b:ed:52:1f:e1:48:12:7a:3d:36:9d:ad:
         ca:e1:f3:1d:74:b9:75:1c:15:5e:83:64:ec:9a:fc:79:08:2f:
         de:49:81:cf:fa:c2:0d:10:df:07:61:09:54:48:f1:6d:94:9b:
         7f:0b:34:06:6c:88:5a:af:df:2a:45:c0:39:86:1d:de:32:e7:
         ed:d0:1b:0f:d1:ee:a0:6a:63:9f:c7:d8:b3:fc:e2:63:4e:72:
         e4:e9:8f:41:67:73:39:62:da:3b:14:00:d9:a7:82:0f:79:40:
         ae:87:1e:1c:04:45:ad:20:44:1f:ab:3b:cd:c3:ec:ea:a9:79:
         dc:43:38:00:a4:f9:cd:97:b2:80:37:85:ab:9a:8d:50:f2:42:
         89:91:ad:e0:60:fa:9e:0b:b4:49:a1:32:b3:b8:1f:a8:e2:bc:
         04:95:1d:f7:31:9f:9c:89:8b:86:5f:42:fc:be:35:23:b3:9e:
         d4:dc:c3:23:7b:30:5e:7b:03:49:82:26:f3:04:08:11:7b:66:
         4d:73:d6:2e:75:0f:a6:43:51:45:ba:55:09:e6:cd:6e:e8:b9:
         63:f7:22:1e:24:e6:80:1a:80:6d:66:02:22:01:bf:c1:90:59:
         2e:b8:02:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:25:47 2025 by rpki-client