Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/728a8c47-110b-3c41-8b43-6df2cc54317f.roa
File:                     728a8c47-110b-3c41-8b43-6df2cc54317f.roa (raw, json)
Hash identifier:          ruompllmf1o2o3yMFAF/Scyt/k2xVXXTmOOfLZ5NUHQ=
Subject key identifier:   50:1C:ED:11:8C:46:AC:DE:45:80:B5:1C:5C:08:42:03:CC:26:2E:D6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A4C3B2BC0E16FC6D8ACACC9C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/728a8c47-110b-3c41-8b43-6df2cc54317f.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     16625
IP address blocks:        23.61.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:2b:c0:e1:6f:c6:d8:ac:ac:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=100d9452-7f8f-4bb3-80ed-e16fdfd4012f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ac:40:6e:dd:cd:9e:01:a1:12:38:48:c4:ce:
                    fe:1f:fa:51:90:eb:ad:42:78:4e:02:e3:d9:10:82:
                    42:1c:65:39:a2:ca:8e:66:1f:80:fe:cc:65:c5:fa:
                    05:b0:7f:46:29:52:c1:31:12:40:d9:0b:47:73:ab:
                    9c:c1:fb:7b:16:85:c0:5b:ad:fb:37:82:af:15:e5:
                    f9:ba:ca:61:6e:62:bc:2e:da:ab:5b:68:dc:b7:a1:
                    79:7c:14:d2:77:c5:9b:46:2e:38:44:83:23:68:5c:
                    8d:c3:e2:49:34:80:af:bc:3b:44:73:88:bc:7d:c9:
                    9e:97:fd:7f:7a:c2:5a:18:73:05:a2:c5:bb:43:c6:
                    93:c3:c1:ae:29:1e:a2:43:52:bd:eb:63:fd:c4:54:
                    19:63:cf:d6:ff:10:e6:40:f4:01:32:87:07:90:2e:
                    60:c6:68:0d:83:d0:07:0a:5f:52:79:5d:5d:4d:75:
                    ee:6e:5c:54:9b:f9:02:26:16:d4:0d:01:38:42:0f:
                    4d:1a:29:b5:73:a8:a3:cb:39:19:5c:23:59:ea:f9:
                    f6:dc:bd:68:b1:48:d7:4b:a0:9c:a9:7c:46:f1:6e:
                    af:50:62:ea:c0:34:b8:55:4b:ac:9f:46:61:68:97:
                    4d:fe:23:82:09:86:24:b2:0d:42:c1:28:2f:33:c1:
                    13:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1C:ED:11:8C:46:AC:DE:45:80:B5:1C:5C:08:42:03:CC:26:2E:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/728a8c47-110b-3c41-8b43-6df2cc54317f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.61.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:d4:92:72:2b:af:bf:27:e1:14:20:13:dd:0f:6f:a0:b0:e2:
         2b:22:1c:1f:b7:0c:4d:a4:7d:15:88:14:e9:96:57:f3:2d:0e:
         28:0c:6b:5e:fe:10:27:5b:ed:0c:e6:11:80:0f:1d:b5:ee:c9:
         3e:aa:c3:65:70:05:f0:f7:73:8f:f9:58:28:1e:45:56:5d:32:
         9d:5a:a1:59:1d:01:c1:c1:7d:1c:5d:5c:8d:50:c9:bf:04:ec:
         9f:dc:3f:8c:d9:f5:15:d5:23:de:78:e4:3d:c3:b5:80:2b:c3:
         ff:19:e3:f4:f2:f5:c4:11:a4:a8:17:cb:ae:45:6b:3a:19:27:
         c0:ff:cc:a3:10:9d:4d:69:a4:9c:9c:94:a6:c0:14:07:03:ac:
         73:17:37:f0:64:b1:ce:98:92:b2:3e:51:ba:c3:2a:1e:c6:2f:
         79:4c:b1:6b:35:cf:a9:44:b3:d8:40:f8:53:c2:29:88:96:fb:
         e8:4c:17:7a:6a:00:a3:af:ec:c3:64:5c:fb:ba:ad:5c:df:4b:
         81:bd:59:38:94:12:a2:89:c8:3e:d7:3f:db:21:74:f5:3d:97:
         bc:99:63:f3:54:b3:88:c9:b8:79:73:a6:2a:eb:34:c0:1c:14:
         76:fd:32:7f:3c:9c:7c:a6:f6:c6:3d:73:82:bd:a4:42:3d:d4:
         b7:dc:fe:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:25:18 2025 by rpki-client