Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/54810562-42a6-3ffa-ad60-f3db583d0709.roa
File:                     54810562-42a6-3ffa-ad60-f3db583d0709.roa (raw, json)
Hash identifier:          YuhwtNqpnzLznpVVQXZD3AtoLNFZtuvsZ+D7ZfnBto8=
Subject key identifier:   EA:3A:D8:43:8D:BE:4F:D1:8C:61:E0:DF:98:80:14:8E:F9:2D:A7:34
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A3A15A4466CD03123FF9782F8
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/54810562-42a6-3ffa-ad60-f3db583d0709.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     20940
IP address blocks:        23.40.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:a4:46:6c:d0:31:23:ff:97:82:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=df3fbbf2-0324-4fb9-aeaf-017677a863aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:27:aa:58:76:b9:54:32:ef:a1:82:98:40:19:
                    e2:7f:59:99:d7:c0:d4:d0:dd:a8:5c:89:6d:35:0d:
                    02:9b:6c:96:18:59:ae:98:f7:c9:c9:47:64:ef:dd:
                    2d:46:ca:aa:d2:1f:d1:ae:57:2d:93:c3:18:c1:f3:
                    dc:e7:f3:72:8a:f3:7b:3f:36:00:19:36:d2:1e:80:
                    8f:2b:76:d3:1f:06:d9:41:ff:d6:50:ca:16:54:3d:
                    c8:12:83:6c:c6:6b:61:23:ab:e5:bc:16:71:39:90:
                    e0:21:be:2f:c5:33:e6:91:2c:5c:12:04:b6:5f:84:
                    45:d7:44:ca:64:1f:f0:ae:92:b9:13:3a:fb:8d:ab:
                    31:9b:71:c1:a6:3f:af:28:c1:e9:54:3b:eb:aa:f9:
                    f3:60:80:66:36:c8:fc:06:bc:f9:1a:d3:53:cb:c3:
                    16:ec:90:2e:6b:c3:8a:0c:e4:74:48:ac:73:1b:3e:
                    2d:d1:e6:90:9b:b1:90:1e:7a:e4:10:54:bb:8a:ad:
                    0d:dd:e1:1e:8a:32:87:dd:8b:d3:c1:36:70:4b:92:
                    cd:c0:b4:08:09:e9:47:54:a3:c0:88:2d:4c:fe:5d:
                    08:99:5c:ee:27:d4:4a:56:76:21:7f:57:d9:27:c6:
                    46:5d:5f:2b:74:6a:77:31:4d:32:9e:aa:ec:23:4f:
                    5a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3A:D8:43:8D:BE:4F:D1:8C:61:E0:DF:98:80:14:8E:F9:2D:A7:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/54810562-42a6-3ffa-ad60-f3db583d0709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.40.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:e9:9f:54:f9:87:73:09:7f:6d:d9:05:cb:e7:0a:42:67:23:
         2c:15:cd:0a:99:cc:31:25:aa:db:16:d4:0f:e0:c9:a3:6c:27:
         2e:c4:f7:aa:8d:c3:14:60:7a:c7:51:93:33:64:46:a9:88:6c:
         d0:17:b0:16:46:fb:ab:7b:3c:25:66:82:13:e6:40:1b:8c:ce:
         7c:97:c8:8a:8a:0c:7a:8a:d4:fd:0c:33:04:9c:75:4b:8f:9c:
         41:e0:58:bf:aa:1f:9f:96:eb:ac:0e:8e:98:36:69:fb:fa:52:
         b6:6a:73:a6:f2:e0:b5:98:7b:3d:ac:f8:7c:7f:2d:a7:29:fc:
         f7:f4:c2:bd:5d:99:ce:3c:5d:da:12:a0:b0:95:e6:36:3e:0d:
         21:d0:20:11:da:26:37:09:ed:3d:c9:02:4e:a2:64:9f:48:a2:
         20:60:dc:91:ee:6a:38:f2:8d:86:21:25:55:3b:a3:74:42:a5:
         3f:6f:85:25:35:4f:50:d4:75:ce:91:84:e2:3b:d9:48:91:34:
         92:98:fa:30:6b:b8:58:c4:b7:2c:05:7a:1e:d3:5c:e9:25:47:
         ca:89:d5:5f:e9:5e:10:d5:ed:a6:e0:70:19:68:1a:54:c8:3a:
         6e:46:10:ba:30:46:de:f9:bf:06:07:f4:19:9e:07:6b:bc:ff:
         da:3f:f4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:48:47 2025 by rpki-client