Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2fd097ee-bbd0-3d05-aed1-9bb79970e4aa.roa
File:                     2fd097ee-bbd0-3d05-aed1-9bb79970e4aa.roa (raw, json)
Hash identifier:          6q6XbIYOclUxtgWSQvN0/Ps3cWA/x/znhllPnV1ij8k=
Subject key identifier:   BB:7A:D7:B6:F9:F0:C1:2C:B4:81:7F:D8:B6:BE:2F:73:FD:84:7E:56
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A4DA0486827D58EFE109B3578
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2fd097ee-bbd0-3d05-aed1-9bb79970e4aa.roa
Signing time:             Wed 25 Jun 2025 01:00:49 +0000
ROA not before:           Wed 25 Jun 2025 01:00:49 +0000
ROA not after:            Tue 23 Sep 2025 01:00:49 +0000
asID:                     20940
IP address blocks:        23.62.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4d:a0:48:68:27:d5:8e:fe:10:9b:35:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 25 01:00:49 2025 GMT
            Not After : Sep 23 01:00:49 2025 GMT
        Subject: CN=487696d2-2c66-4c8f-9b2e-30d8ae6bc069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cb:7f:e5:e8:6c:2c:20:6b:8f:03:51:f8:b3:
                    a1:c7:c2:b8:41:7d:32:12:fe:32:f9:92:b5:35:8c:
                    bf:5c:3d:24:b6:4b:38:1f:96:0e:92:fb:ab:c5:51:
                    60:13:3a:88:22:f2:0b:e5:00:7c:d0:5d:2d:e2:08:
                    68:30:76:72:a0:28:83:9c:e9:bd:c1:74:4e:a4:95:
                    26:e4:1c:01:27:18:17:e9:2d:85:4b:55:e2:83:5e:
                    7b:f8:67:82:0f:8b:99:af:1a:f4:4a:71:91:12:3b:
                    e9:9e:48:84:b6:f9:db:e3:a0:db:d2:e5:23:19:87:
                    97:a5:35:34:bf:7e:a1:d6:37:72:17:9a:4b:fa:06:
                    8e:40:c2:8a:fb:15:b6:23:be:e8:59:d7:b0:7c:30:
                    4f:9f:ba:2c:55:9b:72:d7:bf:0b:78:3e:ba:5a:20:
                    31:db:7e:30:68:2f:e7:22:06:e3:2e:5f:84:0d:09:
                    bf:66:ed:2e:39:07:5c:65:a4:1c:1e:17:2b:b8:8c:
                    70:2b:7f:b4:95:6b:b7:2e:a7:8c:90:0f:af:f0:cc:
                    3e:66:fe:3e:25:ae:92:40:b3:37:e3:9c:87:32:c3:
                    bc:8c:b7:e6:2d:20:bb:29:5a:b5:71:5d:8e:99:63:
                    37:03:99:72:3e:42:ae:00:4b:f7:9c:fb:60:4f:ca:
                    76:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7A:D7:B6:F9:F0:C1:2C:B4:81:7F:D8:B6:BE:2F:73:FD:84:7E:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2fd097ee-bbd0-3d05-aed1-9bb79970e4aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.62.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:e6:30:ea:ca:61:53:4e:02:c3:c8:c1:54:c8:32:0e:5b:17:
         64:a1:91:4f:77:5e:87:c9:2e:7f:81:a3:05:54:0b:24:2e:1b:
         eb:db:3c:49:1e:47:ec:31:32:16:b3:9d:3e:7b:21:44:9c:e8:
         f4:9d:3e:d8:c2:4c:8a:40:c5:81:19:c4:c6:f0:0f:f7:2b:a8:
         a4:2b:c9:ce:06:28:47:d2:1a:56:dc:23:f7:35:7c:60:10:22:
         80:88:59:8c:25:d1:0b:50:06:07:2f:ab:a8:2f:89:c0:13:a3:
         39:dd:e1:19:3d:6d:42:9d:a5:11:5f:07:98:cc:51:55:a9:11:
         82:cb:2c:a8:e2:8d:dc:cb:20:95:2b:cf:42:6b:8f:aa:dc:fb:
         20:5d:a8:d5:0e:35:bf:bf:3d:f4:e4:49:03:df:f9:c7:55:ba:
         45:f0:50:59:20:61:80:54:fe:f2:c4:ab:c7:1f:ad:ab:1d:de:
         00:d2:15:c1:36:72:e4:a3:d1:b6:98:ce:15:f0:f7:0b:ef:8e:
         3e:f5:1e:46:57:90:7f:1e:b1:09:95:32:00:2f:97:6f:f3:11:
         99:e9:0a:dc:89:74:c1:9d:ca:13:e9:4e:e2:1d:e3:b9:98:37:
         dd:33:c9:91:32:db:9e:b3:f2:fa:e3:ea:e9:53:67:bf:f8:03:
         d9:5a:46:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:51:40 2025 by rpki-client