Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dd64819-8848-3c89-b2ec-6c19190183c9.roa
File:                     1dd64819-8848-3c89-b2ec-6c19190183c9.roa (raw, json)
Hash identifier:          0DD58YrqpBHrXaWOLMaBGEVKZp/cB60KU9JqHky6DK4=
Subject key identifier:   0F:D8:95:16:4F:BE:98:AC:98:26:71:65:8D:A7:19:9A:54:44:2E:D0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ADECBD297514894CECE34FC00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dd64819-8848-3c89-b2ec-6c19190183c9.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     16625
IP address blocks:        23.211.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:d2:97:51:48:94:ce:ce:34:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=5950a60b-8905-4cc9-b3e3-aea9e2b6288d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fc:6b:fb:78:4d:c4:d1:94:cf:09:ca:a9:a4:
                    7f:76:7d:99:a6:b0:95:24:fd:b5:dc:0c:b8:4a:85:
                    83:4c:53:ed:92:b5:3e:1f:12:51:8c:b7:1d:14:58:
                    50:f1:18:36:eb:7e:50:ec:54:a4:1b:84:59:06:dd:
                    f6:07:7e:0f:4b:e3:14:e3:04:42:39:48:85:6e:33:
                    89:51:42:92:42:ad:03:82:38:af:e7:50:e8:f4:e5:
                    7a:d2:69:95:ea:21:aa:7c:c4:33:3b:19:3f:28:b6:
                    e7:f2:86:4d:3b:3f:52:f8:79:9b:78:64:83:7d:b8:
                    90:85:5c:bc:dd:c2:92:8b:59:36:73:3f:7a:e9:3a:
                    6c:cd:30:bc:18:13:5d:68:13:c4:e5:0f:de:49:a2:
                    f4:78:bc:4e:13:2f:d8:58:be:d7:da:08:75:51:85:
                    14:f8:17:e7:e5:e7:ad:c7:95:63:b4:bf:98:d9:98:
                    82:15:94:4e:ca:7a:9a:2c:b3:59:9e:07:14:be:ae:
                    70:3f:a3:d4:dd:b5:68:39:11:d4:d7:73:42:5d:11:
                    b4:8d:53:37:c7:49:0b:4f:c2:2f:d4:fe:b9:aa:18:
                    58:2d:c8:28:ed:8b:77:9a:0e:4b:4c:0a:9e:fe:24:
                    a7:3b:bf:33:f9:e3:37:53:52:c9:a4:0e:1d:65:1e:
                    f9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D8:95:16:4F:BE:98:AC:98:26:71:65:8D:A7:19:9A:54:44:2E:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dd64819-8848-3c89-b2ec-6c19190183c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.211.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:df:45:54:6a:79:dc:1a:8c:ee:13:66:67:49:7b:0f:f0:f3:
         7b:cc:a3:ff:d7:a6:43:e9:88:16:30:f5:78:cd:78:52:2f:32:
         33:2b:74:db:13:6b:b6:13:bb:2f:26:48:e1:09:90:ed:66:85:
         b9:c9:b1:5a:e2:2b:a0:f7:bc:47:fc:a9:fc:c2:46:c5:d3:b8:
         01:32:51:89:3e:db:8a:92:2d:e8:54:0d:a3:49:11:fd:5e:e2:
         55:e0:31:58:85:4e:49:04:ef:fb:50:a1:82:6c:e2:76:fe:b0:
         b0:ef:a3:a7:58:b1:50:05:d7:30:7a:dc:27:5e:19:8d:18:db:
         e0:b7:c8:21:09:15:3b:42:22:06:5a:d0:cc:eb:41:64:8b:36:
         b8:a2:1c:b1:76:25:ea:47:53:af:a1:83:9a:c6:fa:3c:f0:00:
         a5:a3:49:11:7a:03:f6:be:73:1a:c6:e6:b5:df:89:1f:ee:40:
         11:48:c3:fe:c4:13:b1:bd:57:2b:bf:b7:ff:e7:24:88:21:eb:
         9f:47:76:0f:a1:8f:b1:d4:88:83:23:90:80:11:ae:04:3b:b3:
         7b:58:7f:90:04:23:29:02:bb:ef:cd:54:48:b0:f3:c0:6c:7b:
         92:55:44:2a:62:ac:2e:60:00:8e:d0:f6:7e:9c:52:11:37:65:
         4a:65:7a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:14:11 2025 by rpki-client