Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da80a706-5715-397f-ab76-6aed100bd212.roa
File:                     da80a706-5715-397f-ab76-6aed100bd212.roa (raw, json)
Hash identifier:          WlJbPxGGCa9LdqMrjbOSLTrW4aD8BZb7F0M65SHfe7s=
Subject key identifier:   2B:FB:D3:E8:4D:C4:5E:B2:C2:2E:96:C3:45:47:90:5C:A2:02:6F:BE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A3A15A16D5244FA6049700740
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da80a706-5715-397f-ab76-6aed100bd212.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     20940
IP address blocks:        23.38.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:a1:6d:52:44:fa:60:49:70:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=383856fc-e438-4fd8-b8e5-920f1573d8ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:34:9e:77:18:e0:2a:f5:44:1a:b3:e8:56:af:
                    66:f6:fc:da:38:69:67:31:90:9a:99:07:ca:91:8a:
                    6a:da:89:3c:76:b8:cf:3a:7a:e4:2d:48:9c:9f:a0:
                    bd:19:33:6f:b5:f2:5e:7b:6d:64:73:df:4e:5d:bd:
                    6a:68:b4:dd:4b:65:ea:ac:8f:c2:d6:10:c1:24:55:
                    87:fa:be:a9:12:b1:bb:3a:d6:8f:71:04:9b:f8:e8:
                    ee:18:01:c8:49:f6:f9:63:4b:3a:33:aa:f5:65:df:
                    27:6f:53:22:4a:2f:c2:a1:d7:b5:a8:ce:a4:ae:71:
                    49:0e:2a:37:bc:34:69:23:6c:d4:b4:8a:bb:08:49:
                    a5:4a:e8:1c:b9:e4:58:a2:0d:16:07:01:24:f8:30:
                    78:1b:ea:67:33:95:c5:74:f0:b1:33:75:32:b0:a1:
                    e6:d7:b6:58:38:73:8c:5a:4a:94:dd:de:14:38:00:
                    35:82:a9:67:17:da:f9:1e:7c:19:90:48:27:b1:67:
                    2d:9c:a1:cc:df:4d:04:72:2c:ed:e6:54:e0:b2:7e:
                    07:47:6f:d5:5d:09:ac:8e:90:b6:ee:94:b4:a3:e1:
                    f1:e7:de:12:3f:f5:44:2a:03:0b:28:b3:7b:e4:d9:
                    6d:58:1c:6d:98:a4:0e:34:70:2a:f9:3a:8c:b3:d6:
                    0d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FB:D3:E8:4D:C4:5E:B2:C2:2E:96:C3:45:47:90:5C:A2:02:6F:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da80a706-5715-397f-ab76-6aed100bd212.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.38.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:38:ce:17:50:86:a7:87:eb:85:23:fd:7a:35:a1:c5:c2:b5:
         68:6e:7d:94:53:23:d3:9d:f9:48:ee:bf:63:cf:05:7a:e8:f1:
         e2:55:e0:4f:c1:63:c4:42:46:c0:8c:9e:a3:42:df:80:2c:0d:
         32:80:e5:39:2f:9b:c3:e5:64:56:e0:29:9b:35:17:ac:8b:33:
         36:73:75:17:b8:0e:2c:ec:32:8b:db:1c:11:f3:6c:27:05:69:
         cd:66:74:31:25:d8:84:b7:25:65:96:aa:91:50:ec:44:24:e8:
         8e:37:0d:6c:a5:d9:ed:3c:1d:43:97:c2:a4:55:a9:da:41:c7:
         a2:e1:0f:cf:fc:e7:73:ce:ba:57:92:b7:14:f7:e0:37:56:88:
         7d:be:35:1d:ab:7e:e0:b8:fc:92:00:74:9f:41:5e:63:81:5f:
         c8:13:10:01:9a:39:8f:3a:fe:20:d8:a8:e8:20:74:d4:90:c3:
         fc:e9:54:51:80:16:ae:40:5c:7f:ef:e1:50:3b:14:29:5e:93:
         7e:1a:ea:65:63:77:96:b1:82:e4:51:59:4e:bc:49:c9:c9:67:
         46:17:8a:7a:22:c9:1c:7d:cf:0d:67:ef:a2:d0:98:53:43:27:
         ea:8b:95:41:ec:f9:de:67:e9:e5:f2:ee:e6:c2:c2:6a:8e:58:
         6d:90:da:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:43:00 2025 by rpki-client