Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68034935-a1e3-39b8-b6a8-49dedadd873a.roa
File:                     68034935-a1e3-39b8-b6a8-49dedadd873a.roa (raw, json)
Hash identifier:          d0xsoswppvFEaJMpVFtNIMCA0yy1a7TMmO9XcXAjLR0=
Subject key identifier:   1A:31:35:7F:DF:42:59:42:A6:25:A0:3C:C2:9C:1E:AE:BE:94:F8:2A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ADECBCB6763A918292DDF9700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68034935-a1e3-39b8-b6a8-49dedadd873a.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     16625
IP address blocks:        23.40.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:cb:67:63:a9:18:29:2d:df:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=4dde473a-0c36-4b8a-9689-914c5431771f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7c:f4:aa:94:5b:14:87:c4:1d:a8:90:e4:4c:
                    9c:ed:67:c1:39:39:3f:64:82:96:f2:fc:ac:e5:a2:
                    3a:08:77:33:36:b7:ee:13:2a:87:a5:8d:e7:47:57:
                    eb:f1:05:54:85:5e:3c:07:b6:f1:13:ac:de:0d:1f:
                    7b:22:b4:39:26:bd:51:4d:c0:c5:6c:8f:51:c3:82:
                    3e:68:b1:37:d3:66:3f:bf:27:f3:f8:e6:ab:a4:ca:
                    f4:3a:40:0f:cb:dd:0d:d3:cd:e3:10:69:fb:33:5a:
                    9e:8e:55:9a:0e:fc:f6:b0:ce:c8:a8:02:83:2a:1c:
                    aa:f2:f7:96:7b:04:7b:d3:0a:2e:0c:4c:a6:96:e1:
                    0d:a8:e1:81:8e:be:28:d9:2e:59:d6:83:c3:f6:7e:
                    c6:6b:04:1f:cf:4a:11:74:58:db:79:75:98:22:3d:
                    ee:22:a0:ba:59:df:fd:7b:28:10:3c:bf:ce:22:a1:
                    70:08:b1:d1:d4:50:d4:a7:1b:77:ec:c8:10:9c:87:
                    26:03:74:c9:c0:1d:d8:ca:e4:50:a0:8f:b7:70:c8:
                    38:a6:08:7a:17:72:34:26:40:9f:55:f5:03:6e:ef:
                    26:97:d8:6c:98:3e:fb:a5:38:ca:57:92:99:59:c5:
                    fd:94:a2:c0:e6:ff:42:00:80:ce:3d:84:bc:08:3f:
                    76:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:31:35:7F:DF:42:59:42:A6:25:A0:3C:C2:9C:1E:AE:BE:94:F8:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68034935-a1e3-39b8-b6a8-49dedadd873a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.40.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:2d:72:49:1a:c7:7a:30:fe:f4:2c:66:fc:f1:f7:a2:30:28:
         92:66:e6:b2:73:1f:8b:8d:45:19:0e:26:07:f4:24:60:19:6e:
         aa:c8:b3:f9:16:d6:32:77:3c:d0:22:58:1f:ef:94:54:f2:41:
         b6:3e:e6:7a:f5:86:58:97:36:ec:fc:38:33:cf:89:ed:14:dc:
         12:4b:bd:7b:fe:1e:07:fb:0f:26:1a:f0:1e:7b:74:f0:a3:b9:
         00:ea:da:32:70:4d:da:fd:57:14:05:a8:9d:73:52:ab:23:8c:
         10:5c:55:e5:62:ba:6b:58:4c:0b:a8:28:ae:4a:07:c0:38:e2:
         12:f8:1d:25:f7:dc:9e:7f:cf:f3:b1:cd:6f:22:10:d8:ad:6c:
         f2:9c:d8:1e:cc:34:ff:b1:b4:c5:64:e8:0b:00:0b:17:d6:c9:
         74:93:8c:8e:47:47:16:14:23:b6:49:ed:69:03:42:04:1d:be:
         a4:77:e2:44:be:a3:c8:a3:29:91:e4:7b:03:3b:e1:fa:b7:c1:
         6a:7c:3b:f5:65:09:ab:48:ee:5e:e6:fb:86:b3:3d:0f:5c:4c:
         f2:43:fa:6b:cc:63:a0:48:c0:11:f6:ea:47:44:00:4a:ca:16:
         3f:a3:14:3f:1f:1c:7a:10:09:56:b2:91:5c:94:27:47:4f:88:
         7e:09:1a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:59:50 2025 by rpki-client