Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5dc27846-6918-3b2b-8d83-78b27d4b0a2e.roa
File:                     5dc27846-6918-3b2b-8d83-78b27d4b0a2e.roa (raw, json)
Hash identifier:          i967wjjpquorbrvHEC855tTNDTrC2zKxkgtP3cRkwzM=
Subject key identifier:   01:C3:72:E5:99:B8:94:18:03:13:13:33:11:E9:4E:58:04:B4:35:EE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AD3A11036E37C346A31B52A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5dc27846-6918-3b2b-8d83-78b27d4b0a2e.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     20940
IP address blocks:        23.64.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:10:36:e3:7c:34:6a:31:b5:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=0f2ff96a-276c-4d49-8414-6ecab6f4f87f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e2:a3:20:9c:ae:7d:fe:17:f9:4e:38:e6:f3:
                    1d:b1:86:b6:0a:04:64:40:41:82:5d:5e:4e:3e:36:
                    3d:ca:b7:9c:7a:53:3c:37:c1:2e:1c:d1:7c:8e:66:
                    8c:0e:91:34:0a:94:85:65:64:20:69:ac:92:e7:df:
                    76:96:dd:88:75:60:80:6a:6f:ee:03:1b:45:11:ed:
                    c2:10:7d:a6:c3:31:0e:f9:32:e4:a0:84:3f:59:85:
                    63:77:b5:56:8f:72:ef:8b:f4:da:61:94:7d:06:81:
                    8d:b4:33:38:c8:d1:92:a4:5b:9a:a0:f7:20:29:11:
                    d1:2b:bf:0e:e7:4d:13:b3:b7:ca:6b:46:a5:46:2b:
                    e0:8c:da:c4:98:e7:8d:81:94:b3:c3:58:9b:c6:fe:
                    73:71:56:43:ff:18:d1:6b:cd:62:72:72:17:10:b2:
                    27:03:75:44:c9:63:5c:a9:58:fd:2e:ef:e4:28:59:
                    d9:2e:7d:76:9f:bd:cc:cb:62:58:a4:1a:64:46:ec:
                    57:9f:bb:0a:5e:63:0a:8c:5c:2f:77:de:a9:bf:8f:
                    b6:6a:8d:27:72:ba:22:e9:ed:0a:ad:5a:65:b1:78:
                    33:ca:c8:14:f2:67:cf:f3:17:56:c6:25:88:31:5c:
                    c2:c2:e8:25:d6:58:ff:25:6f:ee:74:38:76:0e:29:
                    74:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C3:72:E5:99:B8:94:18:03:13:13:33:11:E9:4E:58:04:B4:35:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5dc27846-6918-3b2b-8d83-78b27d4b0a2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.64.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:f9:25:cb:72:70:a3:9b:2f:cf:2e:01:0a:e5:d4:d9:55:f8:
         bb:a1:fb:90:ad:ec:44:10:18:d8:0d:a9:4b:8a:67:ed:e3:e0:
         d3:c5:aa:60:6f:0d:c4:a9:a3:5c:f5:80:b9:f7:04:58:0a:3a:
         8d:16:e3:bb:db:2b:17:3c:9d:32:5d:cf:a5:2f:12:43:72:20:
         41:89:2d:f2:2e:08:81:75:b0:66:86:3d:6f:68:78:b0:10:27:
         87:f3:d4:45:9c:3a:31:81:7f:ca:24:63:0a:ad:6c:9b:7d:20:
         95:cd:ae:f1:a0:3b:8a:44:17:30:30:4d:54:cc:4d:71:83:0f:
         bf:7e:5a:ac:ef:2b:c0:42:8a:14:dd:16:db:27:eb:2b:c2:80:
         e8:0f:c6:b7:9b:2a:ae:47:81:f0:d0:8b:82:27:f4:05:27:06:
         a9:fa:b3:1d:3a:83:5b:46:0a:1f:40:b7:cf:73:22:e0:bd:6a:
         ed:2e:d4:34:ae:c6:e3:03:ce:13:65:29:6d:70:d6:bb:b6:01:
         51:f1:db:11:bc:ef:8a:33:ac:f7:e0:83:19:3d:c4:3e:73:5b:
         79:57:bb:0c:ca:65:12:d8:c0:ec:bb:a5:b8:a9:33:4d:86:45:
         f0:11:ff:09:d7:7d:d5:44:f6:93:8d:79:e6:8e:e2:2c:c8:7a:
         b4:c0:6b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:55:47 2025 by rpki-client