Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a365fbe-ada5-3bc6-b160-48b36f4bbeff.roa
File:                     9a365fbe-ada5-3bc6-b160-48b36f4bbeff.roa (raw, json)
Hash identifier:          0otTT6I4iWrRlZ/rJ12Vy5bV6XELuNmpWfPJ98N0Bxo=
Subject key identifier:   CC:F3:06:08:8D:40:58:6D:9D:94:71:9C:87:B8:C7:F1:B2:97:53:36
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A3E45BAADF532FEDC7789A4C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a365fbe-ada5-3bc6-b160-48b36f4bbeff.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     16625
IP address blocks:        23.48.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:ba:ad:f5:32:fe:dc:77:89:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=d3ecac2e-d88d-4b21-8642-3347017b621e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6f:d6:72:5c:71:bc:37:8f:bb:da:a7:21:71:
                    e9:a9:1e:56:52:89:38:19:a6:89:bc:c9:a1:0c:5b:
                    45:b8:1d:95:1e:ca:5a:63:46:01:b2:98:da:ed:d8:
                    52:7f:cc:b8:54:42:ae:ed:bc:71:70:f3:1c:db:8b:
                    67:fc:01:84:b8:4e:20:78:10:18:ea:5e:6d:2c:16:
                    33:3d:6b:ad:a5:c7:9e:9c:70:53:2e:93:4f:53:2a:
                    ac:b3:9d:87:c9:51:cc:e7:00:8f:6e:b6:c3:e6:05:
                    5e:7a:4b:61:af:91:24:60:72:67:3e:6a:65:3c:f5:
                    5f:2a:15:ac:5f:6c:1e:4c:35:46:85:48:a9:a7:bd:
                    79:f4:a9:bb:c4:fc:26:e1:87:ff:32:9c:f8:5f:ec:
                    8d:31:69:cc:41:86:3e:42:66:87:52:20:a1:1d:95:
                    31:12:13:f2:ef:8d:54:94:a4:69:a4:7d:16:78:6c:
                    1a:2b:aa:e0:db:33:1a:73:3a:f5:25:76:8f:a1:60:
                    12:dc:c8:cd:4d:14:ae:54:8c:40:ab:07:fc:5c:a2:
                    7e:92:64:86:5f:37:e4:28:f4:7c:95:ff:f7:5c:37:
                    62:aa:97:93:5b:92:75:84:ed:d3:dc:75:45:af:c9:
                    d8:6f:ea:43:8e:3d:26:49:78:51:1c:d0:9f:e3:f4:
                    72:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F3:06:08:8D:40:58:6D:9D:94:71:9C:87:B8:C7:F1:B2:97:53:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a365fbe-ada5-3bc6-b160-48b36f4bbeff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.48.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:25:8d:c5:f5:ab:cf:e6:b6:7b:db:83:d1:2c:48:f6:93:1d:
         04:13:cc:45:07:0a:a7:21:04:82:12:a8:ab:c9:2b:c9:fb:1d:
         99:1e:8b:d2:5c:97:ca:50:ba:bc:28:e8:69:f0:bf:53:54:6c:
         21:d2:6c:8b:95:c5:68:f7:d8:81:b2:03:96:fb:34:02:88:a6:
         92:8d:f1:19:e3:7e:95:d9:8e:26:43:72:85:c5:05:6e:69:6e:
         5d:ac:9c:99:69:ee:44:63:bf:c8:cf:6e:a0:50:e1:d5:88:64:
         68:51:b5:a2:b1:aa:c2:18:a0:f2:53:1b:22:b2:51:d4:98:95:
         ed:17:3f:f0:e9:fd:73:58:58:aa:4a:99:b9:4a:28:a9:09:8a:
         0a:65:33:e0:10:7a:d1:7f:ba:6f:75:79:ae:a4:3b:bf:99:30:
         9c:32:b0:8a:69:99:1f:d5:0a:4d:57:a3:62:1a:26:85:57:88:
         88:d8:d2:7b:25:10:bb:c3:eb:05:38:9d:03:d5:ec:88:a8:b0:
         33:5e:0b:31:10:26:89:5d:6d:4c:0a:d5:5f:e1:83:28:e7:49:
         22:ae:7b:52:f3:8c:24:21:91:fb:50:5e:94:c5:b2:0f:2d:c3:
         a5:17:65:fe:4d:a6:bb:79:24:ce:73:57:02:2e:3b:ba:9e:2f:
         32:46:a6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 13:25:33 2025 by rpki-client