Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52314d9a-3693-3646-8e84-02d485f09e09.roa
File:                     52314d9a-3693-3646-8e84-02d485f09e09.roa (raw, json)
Hash identifier:          k9RzcOltDkymBaPo/8JT7F7i5S9+dJ/YgFcl6VZoQw0=
Subject key identifier:   B9:02:31:34:17:82:AE:1A:98:1D:77:43:85:F2:D5:04:5F:41:B5:D5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A3E45B2F9D0E0860ECD8CC400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52314d9a-3693-3646-8e84-02d485f09e09.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     16625
IP address blocks:        23.48.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:b2:f9:d0:e0:86:0e:cd:8c:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=b9fd465d-2af5-4884-97a2-12125045ed4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ad:c3:ff:b1:23:55:5b:73:c4:9e:f4:d5:ba:
                    fe:22:37:d1:35:dd:d9:23:d8:75:31:d3:61:f4:7b:
                    e6:68:e7:32:34:e6:c4:2f:06:3d:3e:26:f7:74:16:
                    ad:ea:b1:9a:7a:b3:af:70:f2:ca:fb:55:76:04:35:
                    36:ce:c5:dd:42:b0:e2:51:2f:a2:f5:79:25:70:c9:
                    ff:9e:c4:38:7e:27:e5:49:8d:3d:0b:af:cd:c1:80:
                    93:ba:56:29:08:22:a3:e8:ba:9c:78:d2:0d:4a:fc:
                    9c:ba:89:0f:ae:2b:fe:cb:b4:81:9a:e2:a2:9b:e6:
                    23:55:36:8e:df:48:84:b1:51:8f:6d:9a:d2:0a:b8:
                    08:75:77:e6:d2:33:a7:36:a5:c9:8a:64:b4:54:04:
                    eb:ed:93:67:69:7b:46:04:c8:df:2f:34:00:39:12:
                    d6:ef:8e:87:9c:59:f6:9f:b7:35:de:e7:2f:cd:c6:
                    1e:e7:72:c7:df:54:90:bc:ff:ba:c3:47:e8:7b:e2:
                    e2:72:51:ed:5a:dd:ed:f8:0d:63:9f:6a:e7:d2:c4:
                    6e:f8:8d:b9:63:71:90:63:50:8d:00:14:e3:5c:a7:
                    5f:55:37:4a:b0:16:81:c6:d1:be:cd:03:df:fa:75:
                    0f:19:59:cf:b3:7c:13:25:07:e9:ed:05:a1:5c:4f:
                    6e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:02:31:34:17:82:AE:1A:98:1D:77:43:85:F2:D5:04:5F:41:B5:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52314d9a-3693-3646-8e84-02d485f09e09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.48.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:bf:07:96:e3:6c:53:cf:22:14:85:73:2c:92:ab:35:b9:5d:
         f0:87:1d:33:b3:32:a6:26:53:89:4d:21:51:52:2b:49:c9:3c:
         64:be:fe:a8:e0:78:77:bd:e9:5b:c9:92:9d:de:b5:38:ce:02:
         c0:b1:20:bf:39:c0:86:12:a1:f9:4b:35:de:c7:f0:d9:5b:91:
         fa:6a:d9:c9:9f:db:97:42:1c:e8:95:fe:f6:2f:82:46:97:7b:
         0f:8f:1d:bb:0a:a8:ea:2d:fe:08:67:16:e2:64:7e:df:70:97:
         5f:6f:96:26:06:82:3a:30:39:c6:e6:75:76:74:25:55:11:2d:
         8f:f2:fc:e5:12:8e:98:d8:61:68:bf:d1:98:55:0f:98:dd:fa:
         2b:ea:bc:f9:70:10:c9:88:f7:08:88:6f:52:6a:73:92:77:4d:
         77:66:14:c3:03:8e:cf:2f:3e:23:94:15:37:58:72:5e:1b:4d:
         bf:82:3c:b8:56:5d:16:89:2e:b5:6b:ce:ab:17:58:75:2a:c6:
         11:b5:1c:6a:c0:36:ac:a5:32:e2:6d:fa:7a:da:57:80:c1:97:
         af:1f:41:35:48:fb:c3:38:db:72:2f:1b:20:5b:a3:fe:fa:b5:
         3c:91:bc:05:5f:1d:37:cb:97:93:12:0e:7c:d9:70:ba:cc:26:
         79:77:1c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:50:34 2025 by rpki-client