Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0bd7687-7f97-3186-a25d-4f03ba873fdf.roa
File:                     d0bd7687-7f97-3186-a25d-4f03ba873fdf.roa (raw, json)
Hash identifier:          jtOY3PmORT12ONEWB65TG3xieo9VVGeJM3IfaGSJTj4=
Subject key identifier:   64:36:91:7A:7A:59:0C:F9:92:03:2E:22:3D:60:8C:60:27:AA:7A:59
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A43DB2DFB044D6ADEE5E052C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0bd7687-7f97-3186-a25d-4f03ba873fdf.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     20940
IP address blocks:        23.52.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:2d:fb:04:4d:6a:de:e5:e0:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=defe54f5-adb8-451f-a4f8-7ad94bcb3bfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:cf:e4:36:04:eb:fb:b3:c3:65:f5:f5:8f:35:
                    47:8f:27:de:e7:08:46:4f:49:be:dc:90:01:f5:b5:
                    f4:d4:c7:e1:dc:2f:bf:46:32:5f:cc:5f:b6:69:84:
                    1b:78:d3:79:23:74:e2:31:66:0d:61:81:cf:cb:3d:
                    5d:f0:19:c4:a3:ed:1c:16:dc:69:9c:46:20:0e:93:
                    81:68:7a:0e:45:55:c5:2d:87:70:fb:37:4a:92:f7:
                    05:5d:ec:f6:f4:47:34:02:69:df:c6:0d:91:3b:e4:
                    82:25:a7:dd:ba:3c:04:fd:ab:5b:ed:fa:79:9b:3a:
                    9e:25:c6:a0:b0:f3:fb:2d:5a:f9:df:a5:2f:db:2a:
                    0b:f0:e4:d5:0f:d1:7f:01:bb:c6:cb:bb:bf:fa:b3:
                    38:dc:21:95:bc:5c:1a:53:8a:ee:5e:b1:c9:06:3b:
                    ed:53:ef:b5:54:0a:d2:43:e1:4f:5f:7d:ae:0e:98:
                    c2:e1:c3:54:9b:13:e5:d5:e6:14:4d:eb:2d:3b:af:
                    55:d5:91:3b:d1:86:c4:7d:f0:0c:8e:38:7d:7c:32:
                    bb:54:5b:0b:8b:79:13:a5:1c:19:0a:c7:e2:da:09:
                    c5:cd:7e:f2:b5:02:b4:01:2b:ab:ea:91:08:24:75:
                    00:13:84:a8:b4:b2:60:d1:e1:2a:7c:7b:00:2c:dc:
                    1c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:36:91:7A:7A:59:0C:F9:92:03:2E:22:3D:60:8C:60:27:AA:7A:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0bd7687-7f97-3186-a25d-4f03ba873fdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.52.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:d1:31:f9:f2:78:c2:33:e2:c1:d5:df:e2:81:2d:bf:1a:65:
         67:2f:2a:33:0c:b9:13:eb:ab:c7:74:b4:55:5a:bb:b7:f7:96:
         58:0c:0a:0d:1b:24:72:87:99:23:e3:8e:82:a7:05:6f:fa:7f:
         5b:65:d5:4b:bf:69:45:33:74:08:47:72:af:22:02:6a:c9:5a:
         b2:4e:d0:46:f2:78:dd:57:b9:da:d6:a3:15:cc:74:ab:38:20:
         b1:ab:03:f5:04:75:b5:62:ea:22:b4:6d:e0:e1:18:ab:4a:fa:
         63:fe:22:6b:a9:75:8e:5a:11:e4:3e:f4:e5:39:e9:5d:87:ea:
         90:25:de:74:d5:84:3d:26:8d:67:28:b8:5c:4e:d4:4d:5e:71:
         70:cf:64:76:a9:24:6c:22:10:56:62:cf:87:2e:75:66:4e:b4:
         99:0d:8b:fe:43:b8:87:d4:0d:12:e1:ef:84:d2:d5:39:77:59:
         c7:37:ba:83:c7:8a:48:72:4d:55:8c:39:3a:54:8e:97:e1:51:
         6d:bf:f7:06:88:d4:8a:16:b8:d8:20:0d:c9:95:91:53:d7:bb:
         97:1f:a4:31:40:57:94:35:c8:f6:39:2d:75:f3:6e:e0:2d:59:
         0b:20:c7:7d:0b:91:d5:7f:6c:38:4a:05:93:17:a5:cf:c2:e9:
         da:69:75:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:27:07 2025 by rpki-client