Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bf2662b-f99a-30a9-89f8-3ae6187f2c2d.roa
File:                     3bf2662b-f99a-30a9-89f8-3ae6187f2c2d.roa (raw, json)
Hash identifier:          /aO9Ld97TnKPdxx8Y7Tg22gS2w/fpAQdbUgN3D6mroo=
Subject key identifier:   5C:A7:AD:2A:69:C4:1F:C7:7F:38:57:69:9D:F5:99:92:6A:D8:5B:6E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849B57A2393A726A6322427E680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bf2662b-f99a-30a9-89f8-3ae6187f2c2d.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     20940
IP address blocks:        23.216.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:23:93:a7:26:a6:32:24:27:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=ef8dbaf3-9063-4986-b0e7-fe7aab7742a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fd:a2:91:d6:3a:ab:eb:3d:5d:8a:33:29:05:
                    8b:9e:f0:ed:fc:af:0c:2b:d2:a8:c6:9e:d4:a4:29:
                    8e:e5:8b:3a:85:cc:21:43:6b:bb:6a:09:3e:4b:2b:
                    ce:ee:36:41:62:e3:5d:ca:77:ce:82:cb:14:6e:07:
                    21:de:70:7c:85:c2:a3:88:9b:cc:d5:3a:a6:b5:5b:
                    24:69:2a:d2:c0:0e:6b:0e:65:14:53:40:13:82:2a:
                    9a:1c:33:db:f9:a2:ff:14:8e:62:d1:55:48:da:d7:
                    d8:79:db:67:a8:40:8d:6d:ea:e1:55:a3:a7:c2:70:
                    05:fc:c6:89:97:0c:98:1c:74:d8:aa:45:8b:2d:5f:
                    f7:6e:fb:d8:79:af:0a:75:00:8b:ba:c4:55:2f:75:
                    a2:06:a0:0a:b1:4a:6e:0c:fe:c6:d2:52:4b:d9:e2:
                    96:78:f7:81:9e:b4:ea:80:82:76:37:5f:d6:97:f3:
                    77:0b:43:da:5d:0d:87:75:37:94:2a:46:3b:1d:0b:
                    6d:7a:48:1d:ec:9c:18:f4:f4:8d:6f:1c:1d:51:cc:
                    57:70:96:4b:db:62:6d:d4:eb:71:75:06:fe:37:67:
                    3b:09:a9:de:d3:21:73:d4:08:db:5e:74:90:08:56:
                    86:1c:26:14:a2:68:24:31:97:a9:eb:47:45:c7:9d:
                    a6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A7:AD:2A:69:C4:1F:C7:7F:38:57:69:9D:F5:99:92:6A:D8:5B:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bf2662b-f99a-30a9-89f8-3ae6187f2c2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.216.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:3c:ce:50:0c:42:d7:2c:75:b7:58:0e:f8:8d:ba:24:6e:95:
         13:25:a0:13:a1:86:5f:73:c2:21:4a:8a:e2:99:8c:e6:8c:54:
         b4:bb:68:95:e9:fd:b2:3e:0a:e7:7e:f2:9c:9d:dc:e7:5f:b0:
         c6:4c:94:d5:eb:7d:d4:ed:b4:85:c4:31:e4:7e:3f:52:b0:30:
         cc:47:1c:ec:22:d7:a9:f8:47:ab:0e:2a:97:09:de:7b:b3:76:
         d2:b4:cb:b6:ed:a1:dd:87:2c:65:0c:83:36:fe:10:c4:f7:76:
         53:88:c6:08:69:87:22:fb:fb:59:1e:52:6c:ea:de:2e:ce:ac:
         a4:aa:6d:2f:e2:71:f5:88:7b:8f:ad:c8:43:43:09:cc:1b:f9:
         d2:ed:27:fa:48:ed:a6:69:2d:cf:f8:42:16:ff:06:0c:57:aa:
         ba:08:f4:4a:b3:4e:eb:3e:3b:ed:2b:4c:19:cf:88:20:d7:3b:
         04:ce:b0:7b:4f:31:c8:92:e4:75:2b:92:0a:b1:19:4c:31:c9:
         83:e9:e7:3b:7f:7f:c0:9a:94:5a:1e:89:e9:dc:c5:1d:fb:1b:
         51:16:21:89:b7:e4:6b:68:53:eb:73:2a:c5:b7:b3:78:e8:07:
         64:96:cb:b5:1d:41:5a:6f:2e:2c:2e:0b:db:ba:dd:82:bf:14:
         8b:7d:6b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:15:43 2025 by rpki-client