Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/117d3d14-a5da-36a6-915f-5f302086a383.roa
File:                     117d3d14-a5da-36a6-915f-5f302086a383.roa (raw, json)
Hash identifier:          UM2jLeUNt3LrOHk26kUe+cPmnp5YcHeY3AhEG8iEz0o=
Subject key identifier:   14:AE:BB:8C:F6:F4:45:E0:2E:46:53:D8:7F:5B:21:9F:EF:43:0E:B6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858499DBF3D1F39EDC6411E1E0580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/117d3d14-a5da-36a6-915f-5f302086a383.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     16625
IP address blocks:        23.214.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:3d:1f:39:ed:c6:41:1e:1e:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=fffa978a-d4f8-4fa2-a2ca-18dfb5c01d58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1e:6a:a2:d9:fc:7a:6e:e3:e6:3e:33:1f:d8:
                    27:a3:06:07:91:ba:59:9f:16:ef:1f:b9:c6:c6:1b:
                    49:b8:8e:17:eb:5c:c2:8b:ff:b8:b9:47:bb:81:24:
                    8d:14:61:2d:38:73:83:b9:2d:95:ec:49:3a:39:0f:
                    d9:b5:73:33:6b:1c:e4:4f:bf:36:5b:7d:51:aa:eb:
                    d9:2d:77:7d:70:d8:cb:3e:79:8d:b3:dc:00:e2:f6:
                    3f:53:0b:05:31:5e:9e:bc:1e:06:aa:f7:bd:68:ce:
                    80:43:91:29:d1:fd:33:94:a2:53:6e:68:83:96:bf:
                    68:81:63:a5:9d:13:df:bc:a8:d8:eb:18:24:09:4d:
                    eb:e0:26:21:7a:2a:de:2d:3d:f4:45:55:aa:72:ac:
                    f7:a9:49:2f:4f:f0:6c:64:78:7f:cf:28:fd:f0:72:
                    41:85:41:90:9b:2f:0b:88:ed:86:bd:67:27:e2:09:
                    29:93:ec:83:37:ab:65:8e:c1:6c:69:a8:56:c8:56:
                    f7:e3:8f:38:69:e9:6e:68:3a:3f:26:7e:24:31:4c:
                    1b:e1:02:3b:87:a2:ba:2a:0d:4a:d5:18:67:f4:3c:
                    78:64:6a:db:6a:c0:ad:51:45:27:71:c7:99:0a:2e:
                    bf:cd:3f:35:e9:55:6b:9f:a2:06:9c:be:35:5e:98:
                    70:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AE:BB:8C:F6:F4:45:E0:2E:46:53:D8:7F:5B:21:9F:EF:43:0E:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/117d3d14-a5da-36a6-915f-5f302086a383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.214.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:15:4f:fc:5e:12:88:a4:4c:0a:43:87:68:fd:9f:d1:48:56:
         e4:ba:1b:e3:6b:24:ac:90:22:9e:be:a1:ac:f9:cd:42:45:ed:
         a1:58:6b:04:73:5c:1c:6f:1f:8e:51:c7:85:6a:e0:63:1b:5c:
         85:7b:fc:d6:26:8b:ed:30:34:22:ae:0a:d4:a2:12:24:5d:66:
         87:18:96:d1:85:34:8a:59:3e:ba:e9:c5:15:f4:a7:c2:68:c9:
         55:06:8f:40:9f:da:22:29:83:80:a7:4d:31:5f:55:f5:b8:d5:
         a0:99:29:4e:c7:ab:ca:7f:6c:94:58:3c:2f:b5:18:1d:33:1f:
         53:c1:68:ea:eb:00:81:0b:b2:c1:17:2d:a9:4b:7a:56:eb:3b:
         23:5a:bc:3e:a7:b7:c7:54:ac:df:b1:4d:8f:3e:65:9a:f4:70:
         f9:ce:e0:19:98:31:a5:ba:08:54:dc:f2:ef:99:00:d7:4b:57:
         89:89:72:df:a6:e5:12:92:76:91:32:0d:e2:3c:fa:49:fb:5e:
         88:3d:09:43:68:25:ec:7c:b7:43:f6:85:7b:6c:ae:f6:c4:cf:
         1c:32:ef:dc:53:b0:8e:61:0d:f0:4c:6a:09:bf:25:ed:b2:22:
         e0:dc:0e:c4:ae:04:4c:59:eb:a0:69:6c:b6:b8:56:55:1f:d5:
         39:40:a5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:39:49 2025 by rpki-client