Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf674735-2dd3-3e5c-98fc-c339b3dcbf06.roa
File:                     cf674735-2dd3-3e5c-98fc-c339b3dcbf06.roa (raw, json)
Hash identifier:          rxN41t0ELg2K3GAP3av2WFbDkEZBWxBKShipU643/BE=
Subject key identifier:   46:1A:86:72:33:96:0C:88:B0:13:9C:5C:78:CE:E0:28:C2:BF:B7:88
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A3E45B9AB5905DCD1F9AE0378
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf674735-2dd3-3e5c-98fc-c339b3dcbf06.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     16625
IP address blocks:        23.48.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:b9:ab:59:05:dc:d1:f9:ae:03:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=19e0bfdd-7df6-4bca-bd90-6f97f8ab652f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:39:84:2f:d5:88:ea:86:21:9a:8e:b4:46:13:
                    22:aa:6c:c8:1c:bc:1e:c7:ce:4d:9d:32:3c:bc:e6:
                    88:e0:d4:b8:ae:49:c6:7e:0d:f2:62:1d:f5:7a:27:
                    22:2c:68:c7:af:60:9a:28:cf:7b:06:f9:4e:34:9a:
                    fa:97:c3:64:87:d6:b2:6e:fe:25:20:9e:d3:69:52:
                    c5:2b:3f:f8:cc:f1:9e:05:7e:81:c6:79:b0:c7:15:
                    9a:c1:cb:62:10:5b:45:c4:ae:30:19:df:6b:d9:44:
                    d7:d3:6b:4d:52:ad:02:bb:f7:82:0f:01:43:72:f4:
                    c9:95:ce:e8:ef:2f:8e:78:99:67:72:c6:97:96:65:
                    fd:8d:b1:a0:65:7c:4d:1f:ac:e1:db:90:2d:0d:6e:
                    8e:66:6f:45:fc:e0:83:b0:27:bf:c2:6b:22:94:52:
                    26:29:e5:96:c9:bc:7a:45:24:11:8d:5d:1c:6f:31:
                    1b:e4:72:d8:f1:8f:07:b0:9a:21:f5:93:f4:6d:f9:
                    0b:d4:fb:06:b0:16:b4:57:aa:81:17:ae:81:57:25:
                    9e:55:b2:8c:50:4d:ac:09:95:b4:48:d2:ca:8c:9a:
                    61:c4:b8:9a:6c:11:ef:26:ee:cd:6e:00:0a:e2:2b:
                    42:7f:23:3f:c8:ee:82:e6:ec:25:02:11:48:88:9f:
                    e2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1A:86:72:33:96:0C:88:B0:13:9C:5C:78:CE:E0:28:C2:BF:B7:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf674735-2dd3-3e5c-98fc-c339b3dcbf06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.48.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:a4:9d:b7:bb:3e:bf:bd:f2:89:aa:13:76:fb:d1:d9:eb:93:
         3e:76:37:33:60:0f:cf:8b:3a:2a:49:52:83:f8:c7:2d:c3:f3:
         b5:30:47:23:21:40:94:11:17:19:c6:8b:df:b5:9c:41:f4:d3:
         d5:c7:79:f5:c1:2f:88:b6:d9:99:56:92:ca:f9:ed:3b:fa:bf:
         18:85:ab:d1:7b:79:6c:58:0c:4e:62:2f:50:ed:1c:84:8e:35:
         85:9d:15:9f:a8:1d:a8:fd:4a:93:ee:30:c8:98:ac:1e:39:9e:
         a0:c5:56:37:5a:d5:a7:02:db:65:5b:15:35:77:f5:79:d0:b1:
         b4:ed:ee:c9:95:b6:ca:b9:9b:48:01:19:fe:1a:59:a2:ac:04:
         7e:90:e6:eb:2b:b3:a8:9a:f7:49:ba:40:df:04:e0:47:57:9c:
         70:87:38:41:e1:88:9a:5f:b8:9a:3d:84:4e:27:85:e0:16:da:
         f2:84:36:df:7e:15:e7:81:9f:a9:ae:f7:2f:5e:c4:2b:2f:8c:
         90:19:b2:17:5f:ea:e0:e9:76:f8:fc:55:3a:59:13:46:bf:2e:
         21:59:80:d4:fc:a7:a9:e6:b5:e2:b8:69:f5:0e:d1:1c:a7:5e:
         8b:de:b6:82:00:f6:72:68:58:1a:99:23:e2:21:17:f6:ff:c3:
         86:f8:20:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:28:41 2025 by rpki-client