Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c8506cf-1749-33d4-8318-a3469fd1b169.roa
File:                     9c8506cf-1749-33d4-8318-a3469fd1b169.roa (raw, json)
Hash identifier:          gwuVdCgbg+GOe83cjFM7edC4GjQ+ihHMX+/VZwDCh2Q=
Subject key identifier:   9D:CC:F5:10:4B:26:05:71:8C:15:C5:C1:8D:75:27:58:42:19:81:CE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AC2E0F6CBC0F53C7CE8B8B300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c8506cf-1749-33d4-8318-a3469fd1b169.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     35994
IP address blocks:        23.33.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:f6:cb:c0:f5:3c:7c:e8:b8:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=f2dfdb86-206c-42b6-accb-52dec1fd9344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9a:de:e7:c7:25:a9:04:17:2d:50:29:75:a2:
                    f5:e2:48:a2:58:2c:8c:f1:30:4f:d2:87:17:8b:a4:
                    66:6e:04:dd:08:bd:61:6f:2f:19:cc:4f:e3:2f:cb:
                    a5:5d:6c:2c:11:8d:e8:49:80:04:80:5b:53:c6:e0:
                    46:41:37:08:c4:34:b0:ef:88:ba:5e:b3:9b:17:5c:
                    d8:86:24:de:95:39:dd:74:6d:db:74:c3:c4:7f:92:
                    96:8e:c6:9c:6e:7a:0e:bc:5d:2d:c0:ee:a3:f7:37:
                    ae:5c:4d:8c:14:64:02:39:96:2a:21:b1:7a:95:a7:
                    fc:12:45:ff:9f:ee:35:bb:5c:9c:6c:3d:c0:ab:e2:
                    f5:f7:90:13:b5:eb:82:af:41:9c:af:56:33:e6:71:
                    8e:e2:2b:cf:a3:1e:09:88:6d:e5:56:70:00:13:2f:
                    a1:a1:16:8d:6e:e1:bf:d6:80:44:22:40:65:73:08:
                    39:44:ef:22:19:bb:8e:83:99:06:89:8c:02:62:c0:
                    5e:4b:c4:b6:39:d9:d4:d8:78:c9:f3:e1:e0:72:e1:
                    b1:0a:09:35:25:9c:2a:48:06:e5:cb:91:1b:1b:87:
                    cd:17:53:2c:c3:e5:6d:7b:ef:50:a4:fc:e1:40:8e:
                    fc:76:a5:f9:32:b9:59:8c:d9:e2:fd:c5:76:8c:7d:
                    95:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CC:F5:10:4B:26:05:71:8C:15:C5:C1:8D:75:27:58:42:19:81:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c8506cf-1749-33d4-8318-a3469fd1b169.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.33.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:a7:b3:c7:e8:be:6a:99:99:90:f2:94:d4:00:da:cd:c2:03:
         5a:1e:1f:7e:e7:d9:70:84:4f:2c:d2:e3:19:29:6b:11:55:99:
         38:00:1c:fd:2a:7c:41:6d:34:97:7e:1a:90:af:7a:05:72:76:
         78:d9:0c:79:21:dd:d3:79:07:f7:05:5e:3d:d5:0c:d0:77:37:
         9a:ac:b9:f2:0f:9c:d3:ff:37:64:9b:36:17:1c:cd:81:81:40:
         a9:8c:92:7b:9e:74:8e:a0:d9:3b:88:55:d3:55:48:88:14:d8:
         da:75:44:80:d8:ba:bb:d6:c8:a2:08:c4:94:62:3d:73:be:88:
         c4:db:f1:de:03:be:9e:01:cd:3d:a9:2d:a2:6f:3b:ca:61:55:
         ec:d6:d6:5e:2f:76:a6:a7:07:de:ac:10:f2:ae:a7:a2:e7:75:
         79:37:b8:52:8d:2f:a1:54:da:a1:2c:96:dc:ca:44:d9:e3:ed:
         77:a7:ce:54:08:3c:36:ac:28:c2:59:5e:f9:79:6d:33:af:88:
         6f:77:ee:0e:bb:e9:18:c8:9e:d7:fe:9d:74:40:33:60:24:0b:
         88:e6:1b:3e:35:a1:45:48:ba:d8:1a:3e:c6:08:b9:05:a1:d1:
         d1:12:15:03:04:a8:e8:01:ad:1d:4a:57:81:67:c5:ae:59:67:
         99:7a:47:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:56:47 2025 by rpki-client