Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d6d2752-b98b-34de-b162-805f6643900f.roa
File:                     9d6d2752-b98b-34de-b162-805f6643900f.roa (raw, json)
Hash identifier:          2uFMJR6Riwo0j56iSC/995Kzkul5gLzmNt6J98O5Ods=
Subject key identifier:   61:52:67:A8:6D:2A:7A:CB:3E:04:9A:A6:8A:48:34:AD:4A:40:05:2C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A4C3B293C57B9DBF899DA0900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d6d2752-b98b-34de-b162-805f6643900f.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     16625
IP address blocks:        23.59.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:29:3c:57:b9:db:f8:99:da:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=86e50cc6-9b7e-4a83-9f25-52a7452ecc16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:73:69:ff:72:55:6c:0e:3f:a0:23:be:d5:fd:
                    95:e4:35:82:5d:23:16:16:c0:07:ae:b3:e3:ed:c4:
                    8d:43:f5:d7:33:05:1a:cb:9f:a5:03:67:54:80:0e:
                    9d:b4:23:e1:f8:c5:3b:70:d8:7a:bb:fc:cf:e6:be:
                    c5:2f:8a:4b:9f:3c:f9:4d:9b:6b:83:3e:e2:cb:04:
                    0f:55:39:0d:69:ac:69:1c:e8:75:d5:3a:fe:48:06:
                    e5:b7:ee:dc:34:9a:01:43:d6:c2:9d:52:43:00:84:
                    33:5b:fe:5a:1b:3d:09:b8:79:7c:cf:6b:f0:5c:6f:
                    a6:89:a1:aa:72:21:55:85:bb:14:76:19:25:ba:e0:
                    e8:8c:6a:15:d4:fe:5e:56:74:a7:d5:9d:45:00:81:
                    76:e3:b9:fc:1a:d9:d8:f6:bb:fd:1d:f0:cf:3a:f2:
                    aa:21:49:87:9b:36:00:95:6b:65:01:96:6a:18:d7:
                    20:9e:37:35:e3:a6:14:6e:91:bc:16:89:28:f3:80:
                    0d:3e:a9:73:79:40:1d:13:c4:a6:3a:c9:7d:98:59:
                    de:26:0c:ec:2e:7f:29:45:09:a7:8c:71:19:7b:42:
                    f6:c0:53:dc:0a:58:68:0c:cb:f1:7b:5a:18:45:f2:
                    06:4d:53:d3:3c:da:80:dd:f3:fb:fe:15:2c:14:62:
                    ca:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:52:67:A8:6D:2A:7A:CB:3E:04:9A:A6:8A:48:34:AD:4A:40:05:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d6d2752-b98b-34de-b162-805f6643900f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.59.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:2f:83:d5:4a:db:9e:a0:10:5c:e9:b0:2d:51:6e:ad:89:70:
         50:ab:2c:f6:81:d6:d7:8e:8a:8a:d6:94:f7:90:82:ca:36:37:
         dd:aa:db:7e:0e:ac:11:a8:39:30:33:f9:30:d3:62:1b:a1:3e:
         a8:44:2c:d8:7f:96:d0:9d:06:db:a2:16:02:c4:91:7f:62:61:
         19:45:4e:9a:23:6d:0f:f4:52:06:03:8b:f0:1e:e6:20:b8:f8:
         cb:74:18:30:79:f3:c5:f3:ec:a9:4c:92:b4:aa:14:0d:c5:2c:
         bc:d0:eb:b1:0b:53:8e:62:1b:67:1c:b3:83:5b:b7:e7:7f:cf:
         5b:36:91:f0:ba:90:8c:9e:34:37:40:29:dc:36:36:e2:88:b7:
         4d:d2:02:cd:a0:68:ab:d6:84:a5:d4:2b:08:dd:59:5d:f5:e2:
         a1:31:68:d0:d4:37:2f:46:02:c4:c1:a6:00:89:ed:e3:c0:af:
         53:1c:0a:f1:b7:65:6b:c3:5f:d7:79:76:95:a7:8e:0b:fd:ad:
         a2:a9:40:d7:dd:41:f7:06:0d:44:3e:2a:59:aa:12:d0:08:e6:
         f4:1f:50:fe:3b:0d:e8:27:bf:a7:a4:58:f4:b9:9b:60:66:07:
         13:d6:38:68:99:fa:6d:b2:a3:3e:a0:6a:9e:74:ee:2c:71:72:
         77:ab:73:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:09:06 2025 by rpki-client