Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/532754a6-6990-3695-833b-2cd74790fac1.roa
File:                     532754a6-6990-3695-833b-2cd74790fac1.roa (raw, json)
Hash identifier:          gh/RNUNNGYZqqltLUHUsalXyHI1io0Lqp/eFNR0vP7U=
Subject key identifier:   01:76:44:7C:B3:06:A6:13:53:2F:43:63:02:8A:EB:73:95:87:C1:09
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A4DA04D068238233958440580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/532754a6-6990-3695-833b-2cd74790fac1.roa
Signing time:             Wed 25 Jun 2025 01:00:49 +0000
ROA not before:           Wed 25 Jun 2025 01:00:49 +0000
ROA not after:            Tue 23 Sep 2025 01:00:49 +0000
asID:                     20940
IP address blocks:        23.62.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4d:a0:4d:06:82:38:23:39:58:44:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 25 01:00:49 2025 GMT
            Not After : Sep 23 01:00:49 2025 GMT
        Subject: CN=c1d278cf-102b-4b37-9830-7506c9e2e254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:74:60:ef:dd:8c:2e:b4:5f:2c:e7:c5:5c:1a:
                    de:c4:06:00:ef:56:ce:40:67:ab:bb:f1:cf:ed:6c:
                    a6:62:80:c4:d2:34:99:53:e4:7f:31:d4:7f:9c:08:
                    ce:dc:70:2f:38:72:75:e8:fa:01:d4:c8:f2:41:cb:
                    5e:04:20:15:6c:23:43:48:ad:cc:5e:46:28:b8:dc:
                    02:66:91:fb:c6:fe:a1:5b:dd:1e:93:a3:c8:27:4c:
                    da:6b:c9:68:f7:27:86:9b:5a:dc:a9:da:3c:42:66:
                    9e:04:3d:cd:fc:d9:fb:d4:b4:a0:24:da:97:cd:ff:
                    33:0a:77:ce:51:5c:ce:b1:21:5a:31:96:8c:b0:8e:
                    2e:70:55:88:a0:8b:6f:03:98:a0:6c:dd:53:37:de:
                    ca:55:5b:5b:bb:a5:22:e9:5e:81:bd:46:4c:22:5a:
                    fd:04:cc:b8:a0:b2:fc:86:27:fe:12:14:e8:5f:f8:
                    6a:b8:78:72:0d:c3:f4:9d:f5:3b:39:1d:19:fb:70:
                    7e:15:00:e9:e0:10:a6:2d:fb:f2:90:d6:c5:8b:ef:
                    c3:ce:dc:05:b0:03:de:1e:24:74:25:41:40:a3:4b:
                    3e:0e:12:76:5e:a0:67:62:7d:90:ee:3a:dd:41:d4:
                    3d:9a:bc:9c:08:df:8b:1b:37:cf:e9:7e:2a:67:88:
                    88:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:76:44:7C:B3:06:A6:13:53:2F:43:63:02:8A:EB:73:95:87:C1:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/532754a6-6990-3695-833b-2cd74790fac1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.62.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:6d:f1:55:54:06:a6:44:70:c5:19:a0:27:cb:80:ec:59:e1:
         6c:ce:ea:99:8c:6e:89:03:a0:eb:05:5a:8f:f5:4c:37:47:3f:
         71:a9:bc:30:2a:d9:00:14:cb:08:9c:bc:d5:b6:16:f9:90:52:
         18:d5:3c:d0:0c:29:16:69:38:f9:c1:11:38:5e:6b:dc:68:08:
         a2:ee:db:c2:37:4d:61:6d:b5:23:0a:0c:89:fa:f3:05:5d:5c:
         3b:2b:4d:74:ad:67:41:b0:32:91:d2:f3:e2:be:e5:f8:51:73:
         08:91:1e:97:50:02:a4:79:e7:8e:d5:9a:fd:24:22:ca:a6:18:
         2d:20:15:1b:ec:79:01:d3:ea:87:c7:41:72:0f:6a:9e:5f:9a:
         5f:ae:ba:18:ac:58:80:3a:10:6f:fa:f9:96:c4:66:b5:d4:e8:
         20:2b:f1:90:94:83:b3:ca:6d:fd:f7:77:9d:00:4c:91:a7:36:
         a1:b2:29:40:fd:7a:c9:91:3c:46:b6:6b:6c:3d:7d:43:6d:36:
         c4:c6:25:37:c8:af:3f:4c:0c:89:20:08:2b:a3:95:f1:ef:a3:
         02:82:3e:28:79:26:89:76:7c:03:70:33:da:a9:1c:45:d8:5c:
         80:c2:ca:5c:76:d4:93:e6:d4:ff:de:94:2d:d0:44:92:17:55:
         44:93:ee:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:53:18 2025 by rpki-client