Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71d2563b-6ace-3885-96b9-4c03a1612715.roa
File:                     71d2563b-6ace-3885-96b9-4c03a1612715.roa (raw, json)
Hash identifier:          Xaox+k5U2nA36tXC2x1toGALLYvkK8cJrcs5vXcQ9Ok=
Subject key identifier:   6B:4D:3D:19:91:86:68:FB:61:5B:44:2E:A7:F4:14:17:B4:0B:FD:45
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A4C3B360FD8D779DAD763E080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71d2563b-6ace-3885-96b9-4c03a1612715.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     20940
IP address blocks:        23.58.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:36:0f:d8:d7:79:da:d7:63:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=2ef4536e-3238-4357-9705-eea5ab6e229d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:05:9f:0f:05:75:e0:c9:be:61:fe:00:d2:5e:
                    3d:69:19:95:c9:64:e3:66:74:74:9a:5b:87:8a:42:
                    3f:c5:60:12:49:bb:ae:1d:f5:67:48:e2:b7:fa:6f:
                    bb:26:c9:b9:32:42:e7:db:ac:a4:b5:5b:7d:c3:80:
                    62:c1:13:d2:bf:96:85:1f:79:f7:42:5d:bf:47:f4:
                    93:86:2b:21:49:04:9c:f2:44:6e:12:53:c0:dd:c6:
                    01:20:f6:51:65:3d:f3:da:10:ae:22:4f:18:59:c4:
                    fa:50:c9:57:b1:fc:06:9a:16:ea:04:53:71:71:0a:
                    52:a9:76:a4:d9:3c:2d:88:86:51:fd:f4:a3:10:15:
                    3f:00:ee:51:06:93:5a:2e:8a:e7:25:f6:2e:20:69:
                    30:5a:da:57:15:59:2b:1c:5d:90:67:e5:c3:44:b5:
                    ec:b1:06:4e:6d:a5:bd:ad:31:52:71:96:4d:da:c1:
                    9e:bd:ac:6f:9b:9b:7f:1f:21:e9:8a:fb:b7:d6:02:
                    d8:74:38:75:10:bd:e6:31:b3:09:d8:b1:7a:32:1f:
                    fa:99:51:9c:6a:5c:8d:31:74:44:2c:ec:fe:ae:46:
                    9d:87:df:0f:6d:43:fe:dd:b9:b6:30:49:aa:b3:33:
                    ee:c0:5e:03:43:73:ca:7e:63:e3:7a:3b:34:18:35:
                    e2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4D:3D:19:91:86:68:FB:61:5B:44:2E:A7:F4:14:17:B4:0B:FD:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71d2563b-6ace-3885-96b9-4c03a1612715.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.58.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:1d:39:45:72:e3:c1:0f:74:51:aa:db:3f:2b:99:15:2c:82:
         c5:64:a0:12:33:65:f4:2b:a7:be:96:12:47:c9:44:2e:0a:84:
         7b:ae:0c:83:00:a9:f6:61:04:17:9d:b2:07:22:cf:90:0d:64:
         bf:89:1a:39:69:54:5b:f1:94:5d:5a:fd:8b:d7:4a:15:e2:05:
         61:2d:73:a2:64:d5:9d:d0:c4:cc:60:d1:fe:be:83:99:b5:bd:
         24:21:18:8d:5b:84:ef:d5:2a:fb:07:03:01:a3:c8:02:0e:1a:
         ae:b7:e6:25:6b:5d:4d:d2:d1:19:6e:26:f6:db:d9:c2:31:d5:
         3a:36:17:e6:72:ca:e7:67:13:dd:da:1f:08:40:bd:e1:1d:49:
         ab:54:28:70:e7:83:65:cb:a0:11:68:0d:5c:32:59:8b:1c:1e:
         66:7f:6d:8e:4a:0c:76:47:b5:a2:4e:a1:9f:67:eb:0f:58:fd:
         59:0b:3a:e0:b3:08:3c:9f:c5:14:93:b7:8b:34:74:20:46:9f:
         fb:20:ed:88:53:3d:cd:a6:3d:68:ed:a1:46:fc:75:7b:cd:ac:
         af:34:69:51:d1:8c:f6:7d:c1:94:07:c0:df:92:a3:57:f5:2d:
         de:44:f0:43:32:e0:df:a9:1f:2c:90:bb:97:57:5c:76:1c:f4:
         fd:ee:fe:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:13:16 2025 by rpki-client