Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21809af4-fa91-333f-9b5e-dd6512a58959.roa
File:                     21809af4-fa91-333f-9b5e-dd6512a58959.roa (raw, json)
Hash identifier:          lCkGxYjDDcZ0usqVLorSA1pV2aT5Ra7//u2AvTSagZg=
Subject key identifier:   1F:37:7C:BD:11:D2:12:B0:0F:2B:B6:2A:0A:28:37:48:E2:36:5F:A8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AC876460251FA990C87F55F40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21809af4-fa91-333f-9b5e-dd6512a58959.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     35994
IP address blocks:        23.73.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:46:02:51:fa:99:0c:87:f5:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=07064843-68bd-4aff-8dc7-7b129cd2d7db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:aa:20:48:ad:0f:51:f0:01:73:e9:23:37:90:
                    0f:fe:3b:75:42:97:6b:dc:d3:f7:07:59:7b:93:35:
                    27:aa:e6:81:87:54:b8:69:6c:8c:3b:56:5c:37:cd:
                    4f:d2:4b:72:14:05:0f:d0:4e:66:ba:dc:02:d3:11:
                    50:d1:32:af:8e:65:ec:d2:e0:68:c6:8b:85:94:e5:
                    6c:b1:ec:4c:c7:e5:36:1a:f1:d9:56:68:82:66:df:
                    96:8e:4e:70:b6:7b:56:3c:30:17:bf:f8:7c:20:4b:
                    b3:40:a1:82:55:74:b6:53:90:a6:e8:fd:46:cd:e8:
                    37:52:30:75:e0:ff:fe:5d:66:e9:3c:59:90:58:3b:
                    93:14:34:43:a2:77:3e:cf:62:df:1e:3c:4c:62:8c:
                    ff:64:8e:b8:5e:e0:23:a8:54:d2:55:c4:5a:db:89:
                    88:b4:2a:5b:e4:8f:1b:87:5c:34:13:1a:44:dc:e9:
                    dc:b6:ce:93:a2:65:54:1d:e2:07:f7:1a:13:cc:26:
                    13:9a:92:9a:d4:63:c4:84:b7:c5:90:92:e6:13:1e:
                    63:fe:03:3a:af:84:8b:7f:91:6b:2e:87:73:b0:b8:
                    f7:e6:66:20:09:f5:f2:b6:13:3c:70:0f:71:be:19:
                    8d:1e:d8:34:a4:7c:77:a9:5d:2e:d3:bc:b1:65:0e:
                    81:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:37:7C:BD:11:D2:12:B0:0F:2B:B6:2A:0A:28:37:48:E2:36:5F:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21809af4-fa91-333f-9b5e-dd6512a58959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.73.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:0d:29:7c:9a:25:a9:4c:16:d7:62:52:95:44:b3:b2:76:34:
         cc:67:99:85:cc:e1:60:fb:12:a8:f3:3d:d7:66:3f:ec:c4:27:
         ae:a8:74:a8:a6:5c:bb:b6:34:21:98:29:1b:50:bc:46:76:08:
         84:d0:16:cd:9a:d9:83:54:f5:f5:9f:50:41:56:54:fa:50:2c:
         44:5d:69:4a:0b:b9:05:59:fd:c2:df:38:38:35:ed:91:1b:b7:
         d6:b9:bc:71:1b:bc:6b:a7:19:77:32:1e:8b:20:c8:e2:af:d9:
         61:93:52:3f:83:21:bb:c6:8b:8d:4a:60:c1:6a:eb:3f:70:47:
         8a:fb:cc:ed:87:39:6c:ec:a8:c2:af:00:34:71:c3:aa:55:12:
         2f:ca:7f:5e:15:81:35:4e:60:bc:ab:5d:89:28:d1:82:74:bf:
         2f:73:98:db:ba:2c:26:29:4f:90:1f:b3:7c:af:83:69:71:5e:
         89:7e:e5:51:e3:f4:61:f0:a3:c0:99:f2:74:c7:0c:06:30:f7:
         3d:65:c0:6e:c5:b0:cb:ee:a0:52:96:66:70:6a:b9:ee:ca:34:
         27:36:1c:3b:12:90:13:3b:a5:14:31:da:2d:68:2e:48:52:56:
         23:f2:b1:b3:a1:10:78:d1:0f:76:32:aa:6d:4e:3b:5b:07:66:
         39:07:b0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:51:50 2025 by rpki-client