Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5dca33c-d5d4-3abf-823f-227f0c79fa5a.roa
File:                     a5dca33c-d5d4-3abf-823f-227f0c79fa5a.roa (raw, json)
Hash identifier:          E9fx9In8VxHGkOJL+CE6tB+L/8l+BlmQ4z7PAtLpvko=
Subject key identifier:   E5:EE:62:50:45:69:3D:08:20:9E:A7:45:93:39:BC:B5:C7:52:A2:BB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849B14A4EFD2BBBF58E5111AFC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5dca33c-d5d4-3abf-823f-227f0c79fa5a.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     16625
IP address blocks:        23.62.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:4e:fd:2b:bb:f5:8e:51:11:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=1c67180c-2fb1-4f43-aacb-34b70b39f484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:26:68:33:e4:e1:ec:50:d3:67:8f:0d:2a:de:
                    1e:11:a2:80:ef:0f:31:18:fd:1e:da:75:5b:ed:9f:
                    47:2e:88:12:1b:de:74:e9:1b:cd:c9:0b:4a:1a:02:
                    1d:70:f6:1d:ba:1f:8c:ba:2f:de:3f:57:dc:bd:bc:
                    89:11:19:5a:4c:53:9f:ab:91:87:a9:08:99:89:89:
                    7a:6c:dd:d7:57:08:5c:8a:b4:24:dc:80:61:93:42:
                    a6:6d:f9:88:df:44:6f:53:45:37:ce:f4:66:ae:da:
                    44:00:b0:d8:c5:2e:e4:05:0f:8a:cd:75:23:02:7b:
                    86:b2:c3:bc:8a:2f:a2:52:4d:1a:7a:30:b4:8d:1e:
                    29:f6:fc:ba:14:2c:1a:68:fd:0c:74:17:70:2f:20:
                    1f:12:5e:7d:d0:0c:ad:9a:cf:80:a0:47:55:25:2f:
                    ce:c4:72:0c:16:fd:1d:6a:e3:eb:11:3d:bb:7a:78:
                    73:73:1c:76:f1:09:31:02:fd:de:50:1b:f5:a7:af:
                    06:41:64:82:a4:bb:57:c1:18:95:82:a9:51:40:82:
                    75:e3:2b:d8:65:40:8a:bb:a2:3c:da:2d:ba:83:10:
                    6f:b3:31:89:1b:b9:36:09:6d:5f:9b:59:2d:4c:10:
                    39:4a:4a:44:58:74:91:33:2a:63:d9:51:4b:7a:2b:
                    83:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EE:62:50:45:69:3D:08:20:9E:A7:45:93:39:BC:B5:C7:52:A2:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5dca33c-d5d4-3abf-823f-227f0c79fa5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.62.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:f4:6e:ea:26:3f:60:4a:7c:12:db:ac:5b:f1:de:21:12:fd:
         72:5a:29:2a:1a:de:59:51:e9:2f:dd:82:1d:08:d2:7f:1c:78:
         2a:cf:b3:f9:e7:a0:a2:83:46:11:b6:21:e1:63:a0:cb:ed:ef:
         cc:10:49:9b:61:dc:4c:52:db:d9:65:dc:f5:7e:ce:8a:d1:a3:
         be:11:7e:e0:d0:15:13:f6:f0:f2:fe:27:c7:47:33:41:28:61:
         78:65:33:ca:eb:2a:e2:be:f8:e1:4a:ed:0a:e2:47:73:c7:c5:
         a7:25:54:31:58:51:d5:6f:ce:29:06:1e:f1:2f:ec:28:90:13:
         8e:a1:7d:0f:46:e4:45:8d:90:27:c6:6e:47:99:03:d4:61:15:
         99:11:92:3b:a4:ed:d9:a3:43:04:4a:46:6f:ce:84:ff:e9:50:
         a8:10:6c:a7:98:df:09:f7:44:dd:f6:c8:10:28:c6:9d:c5:9c:
         76:62:a6:1a:e2:d2:fa:ca:07:5c:ad:1d:2e:d4:6b:c3:bf:22:
         aa:1a:b4:3e:17:4c:11:ad:e0:5b:78:4b:ed:3e:03:cf:95:09:
         bd:c0:aa:ac:1a:66:11:96:86:56:51:07:98:a0:b0:0d:bb:95:
         3a:4e:92:ba:3f:49:c3:cf:9e:a1:3a:7f:c7:17:8b:e0:34:c5:
         e8:6d:07:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 01:22:38 2025 by rpki-client