Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a9e89375-e9e1-3964-9d84-0a887ebf94cb.roa
File:                     a9e89375-e9e1-3964-9d84-0a887ebf94cb.roa (raw, json)
Hash identifier:          Yu8M8luiUrwAf0L/Mt0NCQCFoeKzqe2luZWtwxblzmc=
Subject key identifier:   55:EE:0A:7D:3C:D0:CB:2D:F2:7C:7A:2B:A6:3F:12:34:94:40:CC:A2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ADECBCFC874F5E7AB08552B40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a9e89375-e9e1-3964-9d84-0a887ebf94cb.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        23.73.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:cf:c8:74:f5:e7:ab:08:55:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=eb96a864-9415-41cc-b2a0-dc5aecf9cf36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e7:4f:48:ec:28:cd:ec:59:7e:db:86:fb:23:
                    47:23:fe:b7:05:c8:09:c2:0f:0b:c1:7c:98:f0:13:
                    29:10:ae:9e:73:0f:fa:54:75:18:a4:25:74:af:63:
                    bd:05:c6:7e:6c:48:09:5e:b3:26:63:f3:6f:74:b0:
                    30:f5:fd:36:f1:63:98:f9:0f:e0:06:8e:e6:1a:c1:
                    6f:23:8d:4f:24:45:cf:3e:d8:bd:a2:c1:f8:7c:b6:
                    41:ee:43:ea:ff:b9:17:36:1d:db:fc:66:7c:4c:12:
                    1e:d3:0c:6e:5f:c4:6e:c9:b6:97:28:9c:f9:28:27:
                    a0:2f:9e:58:a6:8f:ee:c7:a1:e2:aa:50:f2:b6:2a:
                    6c:9b:b4:b8:92:78:79:8d:89:75:75:de:9a:0c:1a:
                    39:8b:fe:89:bd:12:cb:59:35:d1:07:7e:72:87:3a:
                    d6:86:f5:08:a0:df:9e:f5:68:02:88:99:21:4f:ad:
                    3b:d5:ba:29:e5:ca:9c:88:a1:45:52:5b:e2:65:b7:
                    5d:e2:9c:7f:1e:00:f4:c2:e1:e3:4b:0d:8c:43:6d:
                    50:60:38:b7:75:db:f8:8c:fb:96:68:09:6d:69:26:
                    45:88:44:e2:9e:cc:8f:50:b5:f6:3b:9d:a6:d4:34:
                    69:3e:1e:cc:4e:45:0f:d2:1d:e7:46:47:9a:34:d1:
                    08:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:EE:0A:7D:3C:D0:CB:2D:F2:7C:7A:2B:A6:3F:12:34:94:40:CC:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a9e89375-e9e1-3964-9d84-0a887ebf94cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.73.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:ad:d1:91:b9:6d:7c:de:be:0c:c0:99:26:7e:90:ed:b4:55:
         29:cf:f9:e3:31:cb:80:eb:26:ea:e7:45:2b:40:f2:2e:a4:21:
         32:4c:17:d4:2b:4e:a7:20:08:e9:47:c0:1f:9b:2a:10:e8:87:
         0e:8b:bb:be:9b:2a:a6:68:a4:41:6f:19:df:d0:57:a3:41:60:
         17:ab:6d:e0:47:02:63:3b:0b:33:1c:aa:1b:b0:a2:14:44:d8:
         92:73:5b:9f:95:f8:55:f4:48:d8:2b:33:f2:85:6e:af:57:45:
         86:68:93:25:5a:a8:65:18:27:a6:d0:f0:c5:d5:05:54:97:1f:
         d3:90:88:ed:5b:d3:17:d5:8f:e1:75:dd:77:58:2d:1b:75:5c:
         68:7b:42:14:3d:eb:4a:a3:de:f2:a3:6d:98:88:ac:b4:b2:64:
         09:45:f5:82:02:49:70:0d:52:ab:64:60:78:78:6f:e4:d1:53:
         72:a3:f5:e3:eb:bf:f2:00:60:a5:c4:89:67:70:48:e7:6a:04:
         f7:59:9c:61:c3:de:4a:dc:f8:c8:ab:5e:0d:f4:99:3a:f0:cd:
         8a:96:da:a1:e4:77:ea:95:88:43:a5:ab:a7:44:c4:e6:11:94:
         4e:f4:c6:01:df:ff:52:5e:c4:0e:c9:39:58:92:e0:c9:56:5e:
         7e:7d:42:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:01:09 2025 by rpki-client