Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca133652-5504-37dc-9d0d-5dfd675c228e.roa
File:                     ca133652-5504-37dc-9d0d-5dfd675c228e.roa (raw, json)
Hash identifier:          8UrkMBwIDjI3oB/DoZ6TFPY+TWQxTair7uZ6TsmEnBs=
Subject key identifier:   4A:7A:E4:AC:88:0C:71:EB:CD:DE:A8:14:34:FD:3C:4C:26:36:47:9A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A4DA04EF8B2161ADE52D11A40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca133652-5504-37dc-9d0d-5dfd675c228e.roa
Signing time:             Wed 25 Jun 2025 01:00:49 +0000
ROA not before:           Wed 25 Jun 2025 01:00:49 +0000
ROA not after:            Tue 23 Sep 2025 01:00:49 +0000
asID:                     16625
IP address blocks:        23.63.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4d:a0:4e:f8:b2:16:1a:de:52:d1:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 25 01:00:49 2025 GMT
            Not After : Sep 23 01:00:49 2025 GMT
        Subject: CN=2fda0c91-04c2-4568-b8cb-b31b3b5d6026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:61:27:ec:9d:fe:f1:3b:0e:f6:b5:50:76:c6:
                    0a:54:e9:62:97:eb:2c:be:54:93:23:a1:72:e9:87:
                    74:c4:97:d6:e4:84:12:b7:fe:05:0f:62:d5:69:47:
                    7f:ca:49:cc:64:4b:7e:94:2b:69:8d:99:6f:b1:d6:
                    e1:1d:7b:5d:08:71:59:b9:cd:f9:8f:a4:b1:12:d2:
                    e9:04:4b:40:ff:a2:12:72:c9:63:6b:bc:86:31:64:
                    8d:bc:ef:2f:91:3c:b1:df:a9:b0:61:13:28:5b:c1:
                    f3:9e:8b:0a:21:2a:3a:9c:37:2f:20:cc:a8:e1:5d:
                    5f:71:d2:ef:57:6a:3b:7d:b4:3a:80:1f:7c:18:77:
                    cd:6a:13:d5:b6:b8:4a:84:81:a9:73:d7:bf:6b:64:
                    c6:a2:c6:eb:a5:80:7b:0d:89:54:9d:76:32:1f:24:
                    a7:0e:a7:ed:a3:be:f1:db:f3:0c:e0:cf:60:9e:7e:
                    dc:a5:ef:65:bc:53:5d:b8:5a:14:81:4b:84:bd:d7:
                    e2:1a:e9:77:d5:4d:1a:61:0f:cc:92:e2:23:c2:ec:
                    cf:94:01:18:cf:f4:93:a6:07:c9:43:94:2c:69:28:
                    26:0a:dd:58:36:6c:61:64:5a:6a:7d:e8:b7:67:5b:
                    e2:fb:bd:28:62:b3:ec:2a:6b:13:d7:47:b3:c8:fe:
                    ac:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7A:E4:AC:88:0C:71:EB:CD:DE:A8:14:34:FD:3C:4C:26:36:47:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca133652-5504-37dc-9d0d-5dfd675c228e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.63.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:9d:c4:33:93:87:38:cd:03:6b:4d:1e:36:5e:87:ea:63:fc:
         a6:1c:29:77:02:d5:b0:66:49:0d:0f:80:8e:e1:09:c6:25:0b:
         0d:20:58:6f:6c:ed:fd:55:ac:43:cd:0a:4e:e6:8b:64:43:bb:
         27:53:cd:18:22:17:fc:f3:23:a1:df:ee:83:9a:72:a8:e3:a9:
         60:d4:57:85:7f:df:4b:46:dd:7d:ab:fc:60:58:e5:13:50:d7:
         9b:7b:fb:4e:ca:e6:bb:25:fe:a2:11:46:d5:4b:f9:d2:3e:af:
         a5:aa:f8:97:78:a3:3d:7d:1c:b4:a7:eb:f0:ac:04:c0:46:81:
         54:54:87:e0:62:ca:b1:5b:98:42:c8:4f:d9:12:3d:b3:9e:c2:
         54:0e:d5:c7:d8:0d:ed:d0:e5:d5:d2:51:22:da:59:74:19:bc:
         48:3d:42:81:5f:49:73:4d:9b:c8:29:77:2e:2f:8b:4b:e1:7b:
         bc:45:55:fe:7c:c9:81:01:7d:75:cb:42:4a:c7:d0:47:16:7e:
         15:e2:b6:69:0a:79:96:39:0b:2e:c6:4f:ab:d7:c3:88:4b:4b:
         43:d4:76:fa:a0:d7:27:82:3b:f5:6e:da:8a:f6:4c:a4:ca:c9:
         72:cb:e1:e5:89:9a:92:44:63:1d:81:5b:07:22:44:8b:3e:ee:
         07:52:7f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:12:54 2025 by rpki-client