Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74be3d40-a913-348f-b4d7-112446807197.roa
File:                     74be3d40-a913-348f-b4d7-112446807197.roa (raw, json)
Hash identifier:          qLFyQZGaKDVi1OCfUwuca4FTfV/qDn/N8p2uiD9zwAU=
Subject key identifier:   68:50:78:9C:C3:25:D5:62:86:46:78:9E:51:48:84:88:52:A9:FE:F2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A42758E62E124B51C4D0D0260
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74be3d40-a913-348f-b4d7-112446807197.roa
Signing time:             Sat 21 Jun 2025 01:00:48 +0000
ROA not before:           Sat 21 Jun 2025 01:00:48 +0000
ROA not after:            Fri 19 Sep 2025 01:00:48 +0000
asID:                     16625
IP address blocks:        23.51.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:42:75:8e:62:e1:24:b5:1c:4d:0d:02:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 21 01:00:48 2025 GMT
            Not After : Sep 19 01:00:48 2025 GMT
        Subject: CN=97092b3d-18fe-4d5c-9a38-97a2bdff844e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d8:da:28:a0:93:5c:1e:4f:9d:b6:33:f7:de:
                    61:10:99:62:92:41:ab:cd:8b:d9:14:5b:12:70:8f:
                    3d:a0:8d:d0:54:25:a3:2e:7d:10:4d:bc:78:b7:fc:
                    39:2c:9e:99:4b:ef:eb:d5:f5:fc:c3:b3:6f:d6:b5:
                    7c:36:bf:88:00:b6:f1:9e:de:8c:4c:e5:54:e7:b5:
                    ea:90:c7:b6:80:d2:43:f9:e9:b2:36:2d:92:61:e1:
                    d3:1b:47:60:e7:6b:a3:eb:87:8b:d9:ac:cd:43:3c:
                    86:2c:56:01:87:0c:5f:70:83:6c:52:69:b6:3e:98:
                    80:ca:ca:a3:be:2b:ca:58:da:6b:5c:4c:e4:78:94:
                    c8:fc:7d:c7:2e:72:39:14:c9:6f:5d:a7:18:b6:5b:
                    0b:65:c4:b5:8b:db:de:52:b7:a8:25:58:fe:42:4c:
                    bd:cf:48:df:ec:b9:8e:20:38:e0:53:76:e8:f2:ea:
                    0e:30:9f:9f:50:9a:c0:a7:a9:3b:0b:c1:17:a2:b2:
                    15:c5:70:4a:19:b1:cb:b7:64:48:98:07:55:a4:11:
                    58:72:49:37:58:02:2f:5d:a4:eb:bf:dd:b5:e0:5d:
                    94:6e:85:b3:f0:7f:ef:7d:24:71:87:69:d0:5a:6c:
                    dc:10:b7:38:cc:fb:cb:fd:bd:65:88:e6:1c:b6:68:
                    1d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:50:78:9C:C3:25:D5:62:86:46:78:9E:51:48:84:88:52:A9:FE:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74be3d40-a913-348f-b4d7-112446807197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.51.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:9d:21:84:4e:0f:50:4f:b3:f5:3f:7a:7e:1e:19:e1:ad:c5:
         b8:6a:c2:ee:69:b7:a4:65:e8:63:fc:90:af:f3:6f:23:6a:c1:
         8a:01:51:5d:22:a7:97:8f:ef:2c:78:17:68:45:0f:31:d9:7f:
         99:c6:ea:69:8d:aa:7e:8a:20:74:08:cf:6c:ee:16:e8:cf:b8:
         96:f2:3e:d9:8f:1e:48:6e:97:51:d3:db:ea:65:8e:67:b7:9f:
         f1:c5:f8:4a:fe:09:98:b9:7b:46:fe:ac:d0:7f:58:6e:61:6a:
         86:f4:f8:fb:13:f3:18:e5:b0:46:0e:7b:79:60:a1:45:78:cf:
         56:bb:51:8d:45:d8:d8:7f:4d:1f:dd:40:ac:37:36:2a:30:31:
         33:70:c0:3b:42:fc:25:53:7e:ab:ef:08:29:38:35:e4:1d:5b:
         e5:f2:f6:41:ce:a5:d7:c5:81:df:74:96:28:06:16:1f:40:ab:
         09:f8:b3:cd:ba:07:43:4a:fe:f0:46:ed:f1:b2:20:fc:91:dd:
         ae:13:11:84:6e:6b:b4:9f:51:f5:ad:ac:15:03:cd:88:ab:93:
         18:8a:26:dd:92:ba:1b:f2:b2:79:e6:5d:51:a5:09:15:db:5a:
         b6:45:14:53:a5:47:d8:cd:5a:96:74:ce:ef:48:bd:b1:1a:4b:
         65:34:2c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:39:57 2025 by rpki-client