Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1386a00d-927b-3ab9-b391-869605560c4f.roa
File:                     1386a00d-927b-3ab9-b391-869605560c4f.roa (raw, json)
Hash identifier:          z6K/JxatzR1LrUdRx2A5LRcSFoHbGNqzjCrtJP12bQE=
Subject key identifier:   BE:C5:4A:DC:4E:61:66:09:7E:F0:7C:76:32:C8:23:DF:21:0E:92:97
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A2D8593708ABB560CBDF40A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1386a00d-927b-3ab9-b391-869605560c4f.roa
Signing time:             Fri 13 Jun 2025 13:01:04 +0000
ROA not before:           Fri 13 Jun 2025 13:01:04 +0000
ROA not after:            Thu 11 Sep 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        23.33.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2d:85:93:70:8a:bb:56:0c:bd:f4:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 13 13:01:04 2025 GMT
            Not After : Sep 11 13:01:04 2025 GMT
        Subject: CN=5178f748-884c-41eb-85ac-3f772b001e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1f:18:e8:0d:14:57:c5:c9:0b:b1:e2:4e:63:
                    e1:54:41:38:6b:c8:31:cb:3e:f9:4b:a7:55:7c:d2:
                    f6:74:78:8c:fd:24:22:62:66:f5:ba:6a:75:f3:c3:
                    46:85:7a:10:8d:2c:ed:8f:55:39:ca:55:d1:63:4a:
                    9d:1a:ed:3e:39:18:1a:40:5c:9c:76:0b:47:40:c5:
                    98:6b:35:7e:28:90:3c:d3:fa:aa:d3:97:52:3c:df:
                    02:1d:59:ab:e4:c6:71:53:e8:a8:0c:69:c9:3c:1a:
                    93:c8:80:f4:87:a7:6d:93:23:38:30:6a:30:0e:b8:
                    f1:e9:be:48:22:ca:6f:5f:72:8d:f3:17:7b:9b:2b:
                    b4:8f:73:bd:56:f8:9c:9c:e8:4d:45:63:64:9d:d8:
                    f3:26:5e:de:2f:cc:bb:1c:4a:4c:3a:99:6d:88:c8:
                    9c:1f:20:f2:47:33:45:f0:a7:28:64:81:0d:ed:dc:
                    ef:ad:78:46:3a:1d:f9:b9:fb:7f:fc:16:cf:b6:0a:
                    c9:12:0f:cf:74:15:51:22:56:eb:57:e6:da:9c:25:
                    6d:26:83:66:96:e1:25:61:ba:0c:78:2f:0c:6e:01:
                    f2:5a:75:44:79:87:aa:85:d6:68:19:13:1c:a6:d3:
                    e0:2f:a2:27:85:d6:eb:61:ac:87:1c:7f:8e:d8:34:
                    c0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C5:4A:DC:4E:61:66:09:7E:F0:7C:76:32:C8:23:DF:21:0E:92:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1386a00d-927b-3ab9-b391-869605560c4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.33.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:22:10:b1:21:bd:8f:c4:dd:6d:2d:d6:f6:fc:3e:5a:58:76:
         33:24:b1:cf:ab:be:ae:7e:40:5a:2b:c7:ec:d9:b1:e5:b7:4f:
         33:33:d0:e4:3b:de:c9:fe:20:7d:b2:fc:06:5e:51:f1:e0:54:
         08:66:0a:4d:18:af:0b:16:a5:17:43:8d:e9:23:56:27:28:27:
         2b:3a:d2:0c:b6:01:05:d7:b3:9e:ea:c6:42:55:74:54:af:7a:
         ee:c3:60:f3:12:02:10:6d:55:4b:19:bc:c2:08:c9:d8:f8:81:
         8e:92:d9:02:4a:26:75:18:65:ea:60:89:36:68:b0:fc:1b:f1:
         69:54:2a:aa:80:36:2b:71:21:3d:c2:03:99:4b:32:e0:2e:06:
         7f:d8:74:0a:7d:2b:8f:38:ec:bb:f6:71:0d:68:b0:64:24:cb:
         fe:4d:eb:97:8c:76:33:cb:00:99:d8:7b:33:87:bc:5a:22:5a:
         7f:3a:8f:2e:43:5a:c6:b2:13:f2:06:8f:0f:f0:46:30:44:c2:
         41:5a:eb:a2:c2:c4:75:c3:a3:55:0f:e1:6e:61:0f:b0:da:7d:
         84:ef:0d:43:0a:29:69:11:fc:86:87:c7:a0:26:5c:2b:88:9d:
         aa:d9:38:8c:bf:61:4c:cb:fb:76:66:1e:46:06:c0:78:68:74:
         d7:b3:1d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:28:08 2025 by rpki-client