Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66794028-2b4f-32c5-9dd1-cbfb24f9946c.roa
File:                     66794028-2b4f-32c5-9dd1-cbfb24f9946c.roa (raw, json)
Hash identifier:          4xzgJeqE0GTvL5yxpqJlQ/8N8UGsyBG0hfLmrmkfH4Y=
Subject key identifier:   C0:35:54:DE:F5:FD:CD:72:DE:F2:89:D8:7A:C9:3F:25:8C:0C:E3:30
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A4F05E21A8E44407FC64FEC00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66794028-2b4f-32c5-9dd1-cbfb24f9946c.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        23.197.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:e2:1a:8e:44:40:7f:c6:4f:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=9ee60e3e-a460-49b7-a1c2-6a3415da0d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:95:14:b6:85:47:c2:dc:39:8f:54:9e:5b:00:
                    ba:5c:28:b3:0d:76:72:08:2d:97:cd:28:cb:a9:e6:
                    7f:d7:18:09:97:b3:53:fd:32:42:18:68:fd:67:17:
                    09:34:85:49:ba:97:b2:f7:2c:b9:3b:ed:a6:09:40:
                    66:c7:3e:68:77:b4:8b:1e:33:98:ad:e9:29:98:c5:
                    5e:e5:42:48:e8:a1:a9:a4:88:45:df:a4:f0:18:55:
                    f3:aa:f9:3f:7a:88:e9:3f:b7:fb:a0:b9:7b:c1:97:
                    83:da:c8:66:45:73:db:39:31:b5:45:13:fd:2a:37:
                    7a:64:8b:a9:ac:06:d7:e9:94:9b:a5:99:6c:00:af:
                    a4:45:ef:06:dc:44:30:46:6b:69:e4:ed:d5:aa:b9:
                    43:b5:34:f3:18:af:9a:e7:10:14:7e:0c:7b:98:e0:
                    e2:af:7f:3a:9f:65:16:cc:67:4f:aa:a9:8f:48:2e:
                    ca:9f:f9:7d:e7:47:ad:3f:4b:35:2a:87:63:a7:c2:
                    a3:a2:c4:9b:a2:e9:dc:80:f4:9c:c8:b1:74:aa:bc:
                    bf:4f:f7:b9:61:7e:01:de:b9:2c:97:4f:bb:3e:58:
                    3b:18:9c:c6:0f:38:5a:76:a9:11:29:0e:f2:25:75:
                    87:b1:db:67:89:cf:5d:57:d4:c5:29:0a:74:ed:a6:
                    6c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:35:54:DE:F5:FD:CD:72:DE:F2:89:D8:7A:C9:3F:25:8C:0C:E3:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66794028-2b4f-32c5-9dd1-cbfb24f9946c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.197.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:83:8e:96:e2:94:be:0f:84:f1:4a:83:45:bf:d2:25:ea:99:
         c2:cc:3a:93:9b:25:61:ee:0e:5c:49:73:55:c5:b7:e0:95:d3:
         58:b0:fa:25:c9:5e:fd:62:b5:22:d4:12:ad:07:94:d7:de:67:
         78:5d:9b:4e:8a:ee:ce:3e:dc:46:fd:c1:cc:16:35:55:01:ef:
         d3:30:5c:5a:5e:92:2c:6f:8a:d4:36:cb:67:15:61:00:bc:5f:
         20:bc:0a:66:ac:03:cf:51:3d:bd:2b:95:9d:10:54:0d:77:9f:
         3e:f3:52:d8:3f:f1:1f:8f:29:57:c1:d8:fd:e9:7b:ce:9e:3f:
         f1:0f:a6:0d:85:e8:71:98:a8:70:45:f6:df:5b:9f:75:24:a9:
         05:ba:df:bb:89:27:b2:25:ed:76:74:d3:58:30:66:c4:2e:76:
         57:07:08:31:ba:fe:0c:6e:ff:3f:fb:ee:93:9f:33:ca:5c:9b:
         50:16:81:55:90:07:4e:71:19:95:13:52:2a:9c:1b:be:b8:35:
         08:69:b9:b6:c5:8b:79:d4:3f:0e:d9:cb:aa:0e:c6:c3:ad:05:
         ad:c7:7e:84:30:fa:d5:ba:04:71:cf:aa:12:5c:92:b2:ff:08:
         ec:a0:fb:b7:db:c3:72:df:ac:5f:41:bc:c7:7b:a6:b5:f3:23:
         21:8b:41:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:28:54 2025 by rpki-client