Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1da261b-f84c-3a41-bf04-a052ba881789.roa
File:                     e1da261b-f84c-3a41-bf04-a052ba881789.roa (raw, json)
Hash identifier:          GQon0e1hSvkGVbYTJfQWHGfHNLhborAwzNCLOwgSgL8=
Subject key identifier:   E3:42:B4:A6:6F:5E:9C:23:B1:36:4F:0A:A1:B9:E5:50:83:77:1E:05
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A3E45B5EE96F6E938C46DD800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1da261b-f84c-3a41-bf04-a052ba881789.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     20940
IP address blocks:        23.47.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:b5:ee:96:f6:e9:38:c4:6d:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=7ae859ce-7fa0-4bb2-9a76-e6accb2d117f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4b:c8:45:d7:0d:e1:9b:97:e1:77:a5:b5:1c:
                    db:a1:6d:0c:11:4d:98:d0:1e:52:1a:3d:82:8f:df:
                    8d:3c:d3:a3:39:c0:11:bc:47:e5:25:16:10:18:de:
                    52:a0:e0:21:84:3d:6e:d6:2b:97:43:0e:43:6a:cb:
                    d7:be:39:bb:fd:97:46:b5:6c:0b:9d:46:41:f8:cf:
                    c2:d7:8e:0b:fa:9c:c1:83:bf:6a:94:f9:d9:54:ac:
                    35:8c:41:f0:71:b0:0e:20:a3:57:0a:3d:d7:94:c7:
                    de:3e:c5:61:b0:4e:ac:c3:b0:29:0d:08:d8:88:27:
                    5d:46:3a:54:9b:56:16:c7:58:de:5c:73:f1:9c:b1:
                    ae:83:12:34:78:8b:a9:7d:bc:3a:c2:ec:33:60:5f:
                    ee:fb:73:13:78:52:f7:3e:09:3d:c9:38:39:e0:3f:
                    f0:32:31:ec:e3:64:6a:8f:52:b3:21:57:a6:3e:50:
                    57:e3:e1:97:89:d9:f7:ff:f8:2b:69:53:d1:4f:f4:
                    92:6e:4b:c2:f1:36:17:63:ef:8e:4d:57:13:86:fa:
                    13:29:9e:63:f1:1a:0e:ce:f5:dc:fa:43:05:ff:5f:
                    ba:f6:7e:b6:d0:f2:61:f4:be:df:9b:12:6a:d2:8b:
                    47:1b:58:ba:4e:ae:ee:63:c5:4c:f6:22:09:c6:56:
                    9d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:42:B4:A6:6F:5E:9C:23:B1:36:4F:0A:A1:B9:E5:50:83:77:1E:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1da261b-f84c-3a41-bf04-a052ba881789.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.47.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:b8:7b:3e:c6:27:33:fa:e1:14:84:f8:d3:71:f0:da:4e:97:
         4e:e4:4b:57:72:84:7a:b4:41:55:3e:23:30:df:18:fb:fe:81:
         47:25:d8:7f:6c:c4:43:31:1f:32:a3:3c:bc:b3:4d:b2:c3:83:
         78:ee:c9:c1:78:75:f8:9a:7f:ea:64:7c:6a:19:39:ae:47:aa:
         68:6c:45:b2:14:76:47:0d:96:e5:94:84:8d:05:53:c9:f9:9e:
         37:00:47:16:69:d3:c2:fb:fc:5f:d5:9c:4f:5d:81:fc:b1:40:
         1a:21:da:f3:f9:a7:30:e9:2e:41:a0:7a:c6:d3:61:25:23:5c:
         79:2d:cd:71:64:a6:9c:87:67:b2:1f:0a:23:05:b0:ee:02:db:
         00:14:0d:a7:5f:9f:b0:53:cd:a8:22:39:4b:b9:c9:77:f0:77:
         02:37:5d:48:5b:7b:2a:e9:1d:47:af:a4:9e:8e:8b:ef:e6:3e:
         a5:2b:d8:98:df:6f:00:7e:67:7a:ab:68:f5:4f:5d:34:e7:9c:
         fc:d3:79:01:75:eb:17:32:6e:fb:cc:b2:96:3e:72:45:b1:a7:
         ab:4c:21:18:14:6a:d4:37:87:ae:97:fa:7a:7d:0b:cc:bd:7c:
         86:1e:e7:fd:4e:b8:58:08:41:39:37:32:3e:c4:4b:fe:f1:68:
         ae:2b:e5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 13:41:56 2025 by rpki-client