Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7bc14a56-d75f-3f2f-bf6c-535915dca773.roa
File:                     7bc14a56-d75f-3f2f-bf6c-535915dca773.roa (raw, json)
Hash identifier:          rn4TdCR7Zj+vbgd/1aO05rIk3POjrPPEy9qhYuoTwQE=
Subject key identifier:   5B:42:D8:01:17:10:6E:89:0F:38:AB:1D:2E:FE:71:5F:DC:B9:2D:AF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849B57A23D1F7AAA3CBDC6969C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7bc14a56-d75f-3f2f-bf6c-535915dca773.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     16625
IP address blocks:        23.221.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:23:d1:f7:aa:a3:cb:dc:69:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=8e1a9ac9-2c7a-4243-801b-c66b0bd78585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c9:a8:b2:5b:7d:3c:bb:f3:f1:e6:aa:83:e3:
                    39:93:ba:8e:ba:28:a4:68:79:4b:b9:66:0d:3b:61:
                    1c:62:1f:61:b5:22:fb:96:01:44:22:ae:52:cb:28:
                    d6:2a:78:97:0b:2d:c7:39:f5:9e:19:37:39:c3:bd:
                    b2:cd:d8:53:9f:a7:e9:48:26:2c:f8:57:04:7f:51:
                    28:ec:3d:3f:8f:53:8a:18:00:bb:df:77:3b:42:56:
                    4a:81:cd:20:18:4d:ef:d8:d7:8b:ca:0c:c7:9b:fc:
                    13:5e:7b:1b:97:da:ea:e5:48:f7:e1:f6:f5:31:41:
                    13:7f:d2:59:a1:db:96:1f:a9:d8:42:07:48:4c:df:
                    5d:2f:ad:49:75:7a:7e:ff:ed:ad:ca:5d:9d:45:ec:
                    15:30:78:a1:71:ab:a4:b2:12:88:10:3c:c4:35:1a:
                    a2:3f:1f:e1:0e:00:26:49:80:e0:85:75:bf:97:44:
                    61:cd:07:e8:16:d9:61:4e:a2:9c:6a:4b:7d:b7:f9:
                    0f:d2:78:82:e1:52:27:b4:2e:9f:c3:fa:52:96:c8:
                    4e:18:99:e3:fa:55:95:d5:bb:fb:ae:9e:7d:7e:54:
                    25:ac:bc:00:0d:29:46:8e:b0:a3:5c:42:7a:32:68:
                    eb:f5:c9:ec:40:33:80:ca:89:30:e3:e1:c7:3a:5e:
                    b2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:42:D8:01:17:10:6E:89:0F:38:AB:1D:2E:FE:71:5F:DC:B9:2D:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7bc14a56-d75f-3f2f-bf6c-535915dca773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.221.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:d5:3e:4f:0c:62:aa:ff:26:d4:f6:2b:6c:1e:d6:71:be:70:
         e9:22:d0:9e:af:eb:47:76:4e:9a:98:2c:07:be:6d:93:28:ca:
         5b:a2:c8:ec:f5:a4:0d:c7:f8:1e:f6:98:fd:f7:53:0d:5a:5e:
         26:7d:92:ab:63:9a:99:0a:94:83:67:6e:34:c9:46:3a:6c:45:
         ab:e1:02:7d:9e:9f:0a:8b:e4:ae:b5:da:87:69:79:ec:88:12:
         13:db:9e:d7:e1:d8:ef:39:35:e0:d1:ed:a9:43:08:b8:38:71:
         2b:74:75:a5:57:12:0e:fc:71:8b:83:9c:40:65:90:53:9b:6e:
         fc:eb:1e:18:d4:1d:af:71:c5:49:15:55:12:65:35:e6:ce:fb:
         13:50:30:68:91:46:ef:41:ce:bb:9f:4d:db:3e:18:de:c1:bd:
         99:df:57:88:8d:b4:14:fc:fd:fc:32:b9:5d:bc:42:07:e7:a5:
         1c:18:5a:c3:13:0b:12:dc:ec:81:c2:47:6a:62:d8:6d:47:43:
         88:5d:fd:ed:78:86:d9:50:5d:21:78:18:2d:5a:db:0e:80:2b:
         24:36:e0:d6:94:c5:59:6f:f6:2d:d7:05:f1:e3:73:d4:6c:99:
         0a:57:23:6f:ce:81:07:41:52:c3:ab:e0:13:be:0a:aa:5c:2f:
         bf:4a:18:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:15:45 2025 by rpki-client