Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56c28c8c-0936-30c7-938f-2e45daa4801e.roa
File:                     56c28c8c-0936-30c7-938f-2e45daa4801e.roa (raw, json)
Hash identifier:          uJLnawMoGyeAQm5tIOPT/MISZVBKzAhzVlvHrG749GM=
Subject key identifier:   15:CB:1A:78:D2:29:45:D9:91:F0:5E:3E:8D:F2:50:78:3B:66:38:4F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ADD668F911A4896B275B27440
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56c28c8c-0936-30c7-938f-2e45daa4801e.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     16625
IP address blocks:        23.50.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:8f:91:1a:48:96:b2:75:b2:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=23168947-0c6e-460b-902c-30a7ff38f070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:cc:bc:25:97:9e:01:12:4c:ea:ec:46:da:77:
                    1f:ce:bc:fe:7d:10:9a:3f:89:ba:ae:00:3a:a8:3b:
                    2f:a6:93:5f:d6:11:02:ca:de:9d:b4:9e:4b:b0:b7:
                    52:93:8e:5e:02:5a:6d:7a:77:dd:35:66:08:32:fc:
                    8b:71:15:3d:8a:d2:6a:1a:49:a6:73:5b:b6:81:aa:
                    2e:67:b5:71:bd:9d:93:0f:22:4c:73:2c:8d:3a:e6:
                    d2:ef:cc:5a:6e:34:d4:4a:1d:19:6a:7a:84:72:31:
                    f1:be:02:0f:5d:6f:a6:ef:99:b4:33:35:4c:d8:03:
                    9c:ac:d3:82:78:08:4d:98:de:79:d4:f0:d5:ae:44:
                    d3:1c:2e:05:88:aa:79:2f:4a:67:bf:d0:51:d2:d6:
                    9e:b1:e1:30:c0:d5:4e:1f:1d:51:16:01:cc:b3:66:
                    7a:69:ab:ef:39:4f:43:e5:f4:90:cd:e4:4c:8a:05:
                    7e:2b:c3:f6:b9:48:34:a4:f9:90:09:71:df:ee:ec:
                    10:3f:8c:ec:37:a1:a4:5f:9d:c5:d0:24:98:12:33:
                    ae:6a:86:5d:fb:a9:26:d1:52:2d:34:53:7a:ee:ce:
                    cb:0d:34:48:b2:a3:af:07:fa:e5:78:84:bb:1e:da:
                    2e:7c:35:46:77:f4:4a:88:6d:25:dc:cd:c5:46:ce:
                    3d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CB:1A:78:D2:29:45:D9:91:F0:5E:3E:8D:F2:50:78:3B:66:38:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56c28c8c-0936-30c7-938f-2e45daa4801e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.50.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:0e:93:6b:9b:4d:88:0c:61:2c:ae:64:a2:96:3b:c2:19:c2:
         84:fb:05:76:98:40:7a:d0:1b:8a:e1:e1:32:5a:1d:51:3f:e0:
         13:ae:9b:be:11:d4:ce:7c:26:90:e6:a3:2d:f8:ee:15:ea:cc:
         7c:56:cf:81:28:13:95:40:63:b2:6a:69:fa:fb:f8:10:5e:c1:
         ea:d8:09:45:66:3c:5e:62:a5:53:93:cc:1e:cb:c0:9b:72:72:
         87:f1:a9:25:b8:f2:f4:9f:df:e2:f3:7c:f2:a8:67:df:4e:4f:
         e7:09:76:8f:b6:5b:a7:88:1e:59:49:21:ef:8d:a3:d0:0d:2e:
         de:73:94:67:ae:c5:f5:72:47:08:ca:fe:6e:57:ce:02:21:ac:
         8c:64:a0:27:be:e7:29:72:bd:24:c9:99:5f:80:65:76:d1:87:
         95:30:90:72:ad:42:f2:11:79:ce:ee:44:e7:74:47:88:5c:47:
         ed:bf:a6:3d:04:a7:f0:a4:c1:57:05:40:5d:fa:d2:17:39:28:
         c3:5c:ce:fe:08:0b:d4:da:03:77:45:4a:87:a6:08:8c:7f:97:
         cc:f1:14:0c:d2:30:37:41:8f:cc:2c:f5:bc:74:95:e7:d7:44:
         5f:63:7f:e3:08:68:be:1c:b3:dc:e4:88:34:1a:04:ba:bb:e5:
         ad:ca:83:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:21:58 2025 by rpki-client