Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/83b514c8-421e-3be9-a56b-a908cacde433.roa
File:                     83b514c8-421e-3be9-a56b-a908cacde433.roa (raw, json)
Hash identifier:          Tcwl2nsoA33KO98qrifuNrpwowpH9FbsgrtVCj61K3k=
Subject key identifier:   72:3B:EF:8E:4D:6A:C3:E8:74:BD:52:8D:53:AA:54:1C:71:54:63:55
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584988CF6E9882F725A8FF67EE80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/83b514c8-421e-3be9-a56b-a908cacde433.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     20940
IP address blocks:        23.202.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:6e:98:82:f7:25:a8:ff:67:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=63830361-c637-4e4e-ab24-4c1009cf1c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cb:a1:14:bd:22:a3:fd:67:d1:ba:1e:11:3e:
                    7e:ec:a5:8e:9a:d3:dd:ee:a9:9e:40:37:c4:74:3d:
                    da:3c:5c:35:f2:c0:ab:da:d7:61:d2:ed:81:7e:07:
                    8d:d1:d5:be:ab:ac:ea:fc:a6:71:4e:e9:0a:40:a6:
                    7b:9c:3d:5a:73:b5:5a:29:86:d6:24:f2:f2:d8:db:
                    0c:ed:9d:47:8c:e9:9a:92:5c:5f:24:3f:b6:d1:a5:
                    91:c9:60:81:26:f4:f9:79:43:9c:1c:f4:9a:c4:05:
                    b6:0e:05:55:52:51:e5:08:f1:67:f1:11:73:12:12:
                    6c:2e:3d:e0:67:64:f5:e3:84:9a:13:d0:ce:38:3e:
                    3b:d6:0e:20:cf:db:d3:52:d9:dc:4f:b5:5b:eb:7d:
                    be:a1:0e:5a:f2:76:7b:1c:9e:79:e1:c3:27:82:60:
                    b1:95:11:40:e9:0f:0d:d8:aa:08:70:60:b3:4c:c3:
                    1e:8c:0d:d2:41:36:c7:b1:b0:e0:be:62:7f:c4:14:
                    b9:64:89:32:f5:0b:3a:10:4e:0f:15:7f:ac:33:79:
                    9b:0f:30:a6:6d:c8:59:4d:6b:e0:2c:5c:68:cb:ae:
                    15:d4:da:05:0a:1a:00:4a:cd:43:0a:ec:4b:8b:cd:
                    9e:1d:d5:dd:e2:76:06:9d:b9:80:b5:cf:a7:eb:6a:
                    54:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3B:EF:8E:4D:6A:C3:E8:74:BD:52:8D:53:AA:54:1C:71:54:63:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/83b514c8-421e-3be9-a56b-a908cacde433.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.202.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:5d:52:05:bb:2b:4d:94:ba:5f:9a:38:d9:4e:5f:8e:b7:d1:
         f7:bf:16:75:cc:45:0a:bd:7b:a6:64:85:bd:66:78:64:dc:6b:
         4b:f4:60:e4:2b:b2:fa:84:89:e9:89:25:c8:ca:65:f0:ed:bc:
         7e:4c:25:ef:84:62:70:fa:d1:90:ac:b1:a9:24:d6:23:42:dc:
         a5:26:91:ef:4c:f6:14:5d:2c:ed:49:15:69:20:fe:18:a5:c2:
         68:3d:5a:13:79:c9:cb:e6:2c:3c:4f:85:d1:47:c5:f3:b5:ab:
         bc:b0:01:b9:b5:3f:c0:35:89:d5:c6:c2:66:19:31:36:45:f7:
         9f:9c:06:37:13:b8:cb:49:b4:93:40:7c:0d:63:22:88:14:19:
         ae:5f:68:83:1f:02:0a:67:3f:f6:2c:d2:e2:b7:00:92:d2:ed:
         10:e3:8d:2b:ce:2f:2c:e5:a1:84:54:e5:2b:43:12:6e:6f:a3:
         20:ee:a1:97:27:9c:cc:51:85:56:a7:a7:28:c4:71:11:c5:a0:
         bf:76:76:39:b1:d6:c4:9a:72:04:f9:11:f1:ac:c1:7b:05:20:
         40:e1:a5:d4:60:07:22:28:47:8a:c4:3c:af:fd:cd:fd:41:c8:
         69:8c:b2:06:f5:07:ed:99:88:63:0f:ec:8d:af:2b:bf:ae:d8:
         9d:38:fc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:20:05 2025 by rpki-client