Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95ad31de-fea9-3363-9f29-6dfb7f1e3056.roa
File:                     95ad31de-fea9-3363-9f29-6dfb7f1e3056.roa (raw, json)
Hash identifier:          ElQrtCQ/ihPwjd3WHgz0tiCum7C1NX3b064Oe8FOPdA=
Subject key identifier:   73:CE:3C:7F:10:21:20:7D:48:42:A8:6D:E9:0D:C4:F4:0A:8F:C5:27
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A51D07C5B9AC17981F0D93C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95ad31de-fea9-3363-9f29-6dfb7f1e3056.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     16625
IP address blocks:        23.208.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:7c:5b:9a:c1:79:81:f0:d9:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=00f5df0b-aa73-4f52-bda8-666c7aa2ba10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2d:86:7e:f3:9d:c3:a3:75:e3:85:7c:f3:57:
                    5f:6a:9c:74:bd:ba:a3:96:11:a1:63:26:73:53:f6:
                    d2:ed:41:88:e4:55:05:bc:83:d4:1b:49:e7:04:dd:
                    03:3c:16:19:88:de:dc:01:b3:c1:82:5a:dd:52:b1:
                    9c:49:2e:4f:7b:be:96:08:b9:8a:ac:c6:11:b8:a4:
                    49:54:64:ea:f1:3c:5c:6b:66:a6:33:f0:60:01:af:
                    cc:15:6d:6e:ba:92:97:6f:e2:76:9f:a0:97:7a:4c:
                    03:a4:fc:ff:0d:f8:04:68:52:a1:98:0d:9d:48:be:
                    77:dc:9b:a3:1b:43:2b:78:ac:bb:96:7c:e6:1e:b8:
                    0e:cf:ca:57:6b:00:99:c4:f0:55:ef:4e:d5:08:dd:
                    5b:d5:fc:fd:54:3d:0b:6e:c0:d6:3c:e9:a5:6a:ab:
                    f0:f6:91:5f:c1:e0:5a:40:8d:f0:96:27:db:3f:45:
                    e4:30:41:92:e3:16:21:4d:d9:a9:f4:fd:9b:83:94:
                    9a:01:2d:05:76:16:77:7d:84:c0:5b:7a:79:b9:69:
                    fd:94:b8:14:b8:7f:89:6d:22:c6:fb:92:0d:76:16:
                    a6:98:7b:5b:29:50:8f:f6:99:06:c7:42:27:aa:43:
                    9a:ce:6a:24:1c:48:ad:e7:21:68:f0:34:c5:c5:30:
                    90:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CE:3C:7F:10:21:20:7D:48:42:A8:6D:E9:0D:C4:F4:0A:8F:C5:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95ad31de-fea9-3363-9f29-6dfb7f1e3056.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.208.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:23:f6:fd:56:29:bc:1a:30:2b:2d:fc:4d:89:87:91:05:2c:
         6e:d0:50:32:d0:77:d7:3a:f7:c3:2b:4f:1f:1a:f9:8c:14:05:
         fa:d0:2b:ab:5c:db:81:b3:84:a2:2d:06:59:4e:62:f6:39:ef:
         78:92:bb:b5:98:eb:6a:d5:c4:09:56:82:64:6a:71:5a:b8:1a:
         a9:5b:f5:6b:c2:26:aa:e3:ea:41:05:22:37:fe:33:f6:b2:e5:
         bb:26:56:14:66:6f:4e:1a:3f:17:ae:0f:65:9c:2a:4b:6d:97:
         de:ee:44:95:44:63:9f:be:d7:30:f1:1c:02:a6:60:10:8c:94:
         27:1d:b8:90:43:d8:7b:47:36:93:dd:84:15:3b:d9:43:55:d7:
         e4:5f:ab:09:76:29:ee:12:f5:b9:98:4b:7e:b6:f0:d7:81:e0:
         dd:0e:28:83:70:e9:02:73:ba:a9:9f:50:dc:2b:c0:c0:6d:c1:
         33:87:00:20:63:57:e9:55:55:f8:5f:ed:41:1c:2b:fb:ff:e5:
         29:37:d1:ae:13:15:de:8a:60:a7:be:fe:61:74:b6:c6:8d:8e:
         71:c9:be:3c:02:b0:4b:06:f6:15:23:73:6a:9c:4e:bd:87:a7:
         8f:24:90:72:26:d8:f0:0e:0a:97:a0:9e:d3:54:3e:5a:69:aa:
         3c:bb:31:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:19:14 2025 by rpki-client