Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e07dd21-49eb-3360-adb5-6205bda873b9.roa
File:                     9e07dd21-49eb-3360-adb5-6205bda873b9.roa (raw, json)
Hash identifier:          eFor6pdrVqfz3WrYhDb7IUMsfI4qsuCOUBmbtnEN8Eg=
Subject key identifier:   C7:28:F7:1B:F3:83:86:0F:75:F9:07:4A:99:25:95:22:D8:AD:FC:1D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A4C3B2548C19F01B04DC37840
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e07dd21-49eb-3360-adb5-6205bda873b9.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     20940
IP address blocks:        23.56.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:25:48:c1:9f:01:b0:4d:c3:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=24cd147d-1b84-48f1-92ad-d3a528251c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bb:a7:b1:ad:2e:8a:ba:80:6a:1c:8d:c7:b0:
                    98:f0:78:51:a8:31:35:2c:f2:a3:73:9e:ba:2c:65:
                    06:db:e7:a3:f2:5e:ff:63:d3:78:5a:77:58:92:cf:
                    9d:33:6b:b0:81:e5:84:4d:fd:49:25:0b:0c:f4:8f:
                    53:fa:d7:26:4a:10:f4:91:87:72:78:a3:e0:48:bd:
                    1f:e0:33:2c:b4:d6:24:1c:81:d9:13:40:51:1a:e2:
                    31:20:36:67:c4:8c:11:b5:ec:f6:cd:a9:00:de:aa:
                    36:0a:8a:95:9e:1a:00:68:ce:af:6c:6d:d3:d9:e7:
                    1d:19:a3:27:88:f1:d3:10:13:3a:b5:4a:63:ac:7a:
                    b8:fa:e4:57:12:28:07:3d:16:34:5f:26:9d:89:26:
                    51:59:d9:46:4c:a9:3d:14:fe:99:3d:ea:6c:b7:ef:
                    55:57:69:ed:e8:30:68:ec:62:0a:16:69:b7:28:3c:
                    5d:a9:09:4c:a0:01:96:f2:28:c3:a1:d1:40:fc:46:
                    de:04:24:a0:0d:6b:11:6f:2b:de:ed:62:40:6b:2f:
                    29:63:90:ee:c9:41:7f:59:6b:17:62:2e:de:dc:b6:
                    11:50:41:8a:8b:a8:3e:b9:42:31:bd:4f:bc:1a:93:
                    2a:97:78:50:20:a2:77:7b:8b:af:da:a8:fa:97:b6:
                    8a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:28:F7:1B:F3:83:86:0F:75:F9:07:4A:99:25:95:22:D8:AD:FC:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e07dd21-49eb-3360-adb5-6205bda873b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.56.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:21:d1:ba:de:37:d9:da:2a:9d:d3:0d:da:f8:40:3d:79:40:
         87:40:05:6c:d0:f0:ac:22:7f:54:8b:6a:1b:07:16:c4:35:14:
         b9:2e:32:ec:93:50:e3:90:f1:11:49:4f:c2:22:35:9e:d4:b5:
         7d:a5:43:c3:7c:02:b3:eb:a6:ec:27:a5:28:5b:94:8f:f8:44:
         0d:51:84:5a:7e:61:63:3b:4a:03:61:ab:0c:1c:c7:91:f5:a2:
         7e:7c:3e:89:9d:3d:96:d6:f0:63:af:57:f8:77:60:e9:42:00:
         c5:7e:82:51:04:53:97:cf:69:7a:a2:97:f0:6a:d6:d2:99:03:
         c5:0d:77:51:b1:f2:55:8d:8c:22:b0:5e:c7:07:dd:3c:97:35:
         e3:36:52:3d:b8:d9:17:cd:95:59:b7:b5:48:59:a1:44:3a:a1:
         d8:9d:d2:37:e3:2d:76:e8:dc:9a:a3:ae:88:c2:5e:e7:bf:c7:
         55:1b:97:7a:de:68:78:a9:19:2e:6a:62:1d:01:9f:fe:fd:c7:
         ee:d5:ee:d7:11:73:fc:7e:57:15:7f:3d:6a:04:e2:f6:07:31:
         7b:2b:98:92:8c:67:39:ca:f9:37:ce:01:3a:4d:f4:5e:79:67:
         ab:05:50:24:ba:07:7c:96:91:63:33:94:75:53:84:6a:c2:4d:
         27:00:69:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:28:41 2025 by rpki-client