Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbf45684-50e8-3b57-b672-b446d9feb2d8.roa
File:                     dbf45684-50e8-3b57-b672-b446d9feb2d8.roa (raw, json)
Hash identifier:          svQg7LAvwvsMf2+uVQmq/FjiyfRXnLseT80qZW7AmjE=
Subject key identifier:   C1:D4:63:66:3D:64:07:08:D5:CE:96:F0:F6:22:7A:7C:5D:B9:CF:C2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AB65100D48731263D71BC52C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbf45684-50e8-3b57-b672-b446d9feb2d8.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     33905
IP address blocks:        23.206.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:51:00:d4:87:31:26:3d:71:bc:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=d3f3c797-d56d-4c9e-b1d4-0ff0ed5ac277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d4:78:36:d3:64:d7:95:ad:d8:10:8b:07:fa:
                    f1:31:8d:33:4a:83:2d:90:c3:93:53:cb:0d:70:db:
                    90:65:f4:b6:f9:bf:a5:79:16:35:c1:62:45:66:80:
                    9d:2a:db:5c:d4:49:1a:19:47:48:c6:a4:14:ff:49:
                    43:0d:ec:5b:a9:ef:d8:04:32:cf:79:5f:95:c2:59:
                    00:0b:5d:c0:14:a7:be:e7:80:95:a3:71:b5:40:12:
                    ae:24:0c:c8:47:37:31:35:f3:bc:b3:cc:97:6c:1e:
                    99:9d:a7:df:80:14:6b:50:3c:c6:9f:c0:da:3b:5e:
                    3f:18:55:8f:46:a3:e5:a3:f8:d5:99:96:65:e8:10:
                    9a:ed:f1:8a:0a:8d:9c:2a:e1:91:5c:7c:dd:65:04:
                    c2:09:6b:d3:db:fa:75:38:90:5c:e5:46:89:3a:36:
                    7e:3d:46:32:e7:d0:98:cc:a9:a4:4c:7d:b5:df:87:
                    8e:a7:1e:9a:19:9a:94:ad:e4:83:5f:54:4a:55:dc:
                    e6:36:62:97:ea:89:58:24:58:ae:30:a2:0d:11:d2:
                    6e:fe:b9:7a:94:3a:49:be:ea:cb:64:a5:ae:1e:cc:
                    99:59:1f:e6:c2:39:74:aa:0e:8d:88:6a:53:2f:84:
                    bc:b5:44:c3:fb:c1:1e:5c:6a:0f:83:10:83:bb:70:
                    c1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D4:63:66:3D:64:07:08:D5:CE:96:F0:F6:22:7A:7C:5D:B9:CF:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbf45684-50e8-3b57-b672-b446d9feb2d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.206.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:cc:d4:b2:d9:6f:1b:3e:cb:00:e4:22:b6:0f:c3:84:98:ab:
         95:56:42:0b:30:cf:87:4a:a9:42:19:ec:85:d3:e5:44:47:ee:
         2c:6b:7a:a6:63:48:5d:4e:c2:7d:e0:88:be:43:93:12:f6:91:
         d8:94:2d:fe:02:a1:62:3e:d9:0f:15:81:c1:5b:32:d6:d1:4b:
         d8:8f:d2:9a:08:c2:ed:67:f9:79:e1:79:ed:b7:0a:22:db:d8:
         ad:f3:01:4e:8c:e0:f5:71:63:60:d9:72:f6:dc:35:7e:44:97:
         3e:67:c8:9c:b1:94:9b:8d:5d:b6:dc:b7:ad:cb:e1:eb:ae:86:
         c5:9d:ea:26:22:d8:67:58:77:95:ed:1e:b0:8f:6e:5c:55:17:
         0c:b5:e0:f7:f7:8d:53:30:ac:fd:b8:02:b5:e2:ad:b6:2b:41:
         41:de:37:e8:ac:2f:03:97:1e:e8:15:68:c4:91:b2:71:59:5b:
         e1:fa:5f:fd:c4:57:89:b7:13:de:e6:d2:a0:0c:2f:0b:30:be:
         49:f6:ef:41:a5:f0:49:64:49:e7:d7:1e:41:84:96:45:62:e4:
         b7:09:2b:7a:34:51:6a:f9:45:88:10:ae:db:16:e4:4c:1c:76:
         c7:92:6d:92:d4:58:ca:70:21:89:09:af:5a:2f:8a:7b:59:27:
         34:b7:30:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:06:18 2025 by rpki-client