Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/14f97249-dbee-39d0-87f3-75c592cf36fa.roa
File:                     14f97249-dbee-39d0-87f3-75c592cf36fa.roa (raw, json)
Hash identifier:          iBhzKYpWk6mTGmf7Pj3XiKIVgYTvhoHHhWDqm+phccQ=
Subject key identifier:   A5:C7:52:36:2D:C3:64:E7:03:D7:C8:2B:29:38:9E:96:D4:5B:31:57
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AC0163ECDF603166EA2024580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/14f97249-dbee-39d0-87f3-75c592cf36fa.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     9299
IP address blocks:        23.40.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:3e:cd:f6:03:16:6e:a2:02:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=800e9b64-cc17-4124-bc8c-e6786d185aac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b1:aa:de:1d:4b:aa:57:f1:ef:72:42:68:0a:
                    b3:8e:68:42:4f:e7:4c:bc:ee:8f:ab:62:dc:ac:5b:
                    f0:00:00:3e:f8:88:3c:53:cf:15:72:68:4a:04:fe:
                    db:16:60:96:29:1c:65:a0:32:61:ea:e9:85:b9:d5:
                    81:3a:1e:f8:43:fa:c7:ca:c6:2b:8d:bf:59:61:89:
                    fb:bf:7e:ac:35:53:cc:81:df:e3:ee:35:32:e5:83:
                    00:65:15:90:fe:e3:f2:73:2d:13:1a:3b:dd:fa:52:
                    16:5e:fa:20:11:57:22:32:72:2a:df:ba:80:71:25:
                    ad:03:7a:1e:3b:76:3d:5d:4c:57:b7:e1:de:f8:3b:
                    3a:a8:68:2e:2c:d1:74:7d:12:60:11:e7:af:83:34:
                    10:64:e5:73:c7:2b:fe:7e:38:8c:5c:3e:80:f6:38:
                    8a:37:eb:b3:74:89:ab:81:16:1d:e0:a5:a5:a5:ca:
                    b6:6b:53:72:9c:a2:38:7a:9c:f9:78:f9:6d:13:06:
                    85:21:9c:d7:57:bb:89:87:df:6f:3b:7d:3d:6b:e5:
                    49:04:0a:f3:2d:5b:3f:ff:d9:56:64:4f:5c:b2:2d:
                    c3:0c:0a:19:53:d0:b1:05:46:fb:49:db:d8:81:5a:
                    3d:04:3f:0e:df:43:87:66:77:c7:9e:ca:cf:70:36:
                    d7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C7:52:36:2D:C3:64:E7:03:D7:C8:2B:29:38:9E:96:D4:5B:31:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/14f97249-dbee-39d0-87f3-75c592cf36fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.40.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:01:e7:bb:dc:61:53:13:e2:07:af:58:7e:a0:98:36:63:15:
         b7:20:b1:d8:bf:53:04:c9:7d:2e:a0:92:fc:e3:81:11:a3:ec:
         4a:54:08:5c:86:4e:10:66:45:19:cf:a9:38:d7:df:fe:55:6c:
         5b:b3:ae:ee:d8:d7:c3:b0:f9:97:a9:26:da:d0:6c:65:43:10:
         65:0c:a7:55:e6:bd:37:1b:e8:8d:f7:35:4a:d7:43:50:7c:73:
         b5:b0:6c:fd:3f:66:56:88:f9:ee:23:0f:05:90:32:80:95:bc:
         70:a0:84:4f:8f:1e:7c:1e:b0:d4:2c:f1:28:39:a5:5a:8e:b2:
         7b:60:73:ff:a9:95:1c:49:13:fb:7d:c2:3c:9c:81:5f:b6:0f:
         0b:b7:60:49:28:87:a8:1f:5b:a0:36:14:cc:80:48:16:91:13:
         f1:4d:e7:ce:79:57:a4:93:8c:83:95:46:1b:1b:85:e9:68:66:
         1a:b2:b6:6e:10:18:34:16:b2:2a:f0:18:71:81:8c:6e:b6:89:
         09:f6:1d:6e:0b:89:15:2c:0f:c5:a8:a7:db:56:b4:b9:16:a0:
         46:de:59:d7:a7:bf:2a:07:f4:ad:ed:3a:18:85:c4:3d:04:0a:
         60:da:9c:3f:ae:a3:65:89:08:9b:05:b3:e2:59:84:7a:9c:f9:
         de:b7:c9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:13:52 2025 by rpki-client