Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dd75524-b4e1-371c-acca-f7b110225262.roa
File:                     1dd75524-b4e1-371c-acca-f7b110225262.roa (raw, json)
Hash identifier:          fe/M3EF2GeRlRuoEAGruM3xbr5DEJEpzL3VhuaAsX5Q=
Subject key identifier:   66:0D:4A:41:68:F0:AD:2F:5D:B6:3E:CB:4C:99:03:B6:47:76:DA:38
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A7D1609AEAD9DE1C431473360
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dd75524-b4e1-371c-acca-f7b110225262.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     20940
IP address blocks:        23.217.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:16:09:ae:ad:9d:e1:c4:31:47:33:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=29561653-f2ae-4b52-8bea-e10a29235033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:36:bd:9e:7d:3b:bb:92:be:d8:cc:2f:6c:50:
                    65:69:78:be:c9:b6:2b:12:58:16:af:da:4b:b0:3f:
                    d1:67:e4:81:1b:8b:71:98:8a:45:9b:89:3b:1d:34:
                    6d:a0:94:84:79:66:ec:0e:c5:61:9a:72:95:a5:bb:
                    c3:13:05:3e:78:04:25:f9:e0:39:ea:4d:1c:e3:00:
                    b6:f7:ee:04:b8:93:f0:7c:04:27:22:47:10:b1:c7:
                    62:f9:2d:e4:9a:c9:15:1a:b9:da:68:af:4d:82:db:
                    46:16:72:15:03:b7:00:78:87:31:66:22:d1:aa:5e:
                    58:2d:be:2a:11:53:6f:79:d9:23:6a:01:5e:75:7c:
                    35:cd:46:2b:32:ca:87:28:78:17:f9:29:2c:a6:fa:
                    0a:7a:a5:fe:68:b9:64:5a:ae:04:98:1d:61:c6:c2:
                    b9:e7:5f:ea:a8:a9:c3:e6:4e:12:a8:94:bd:e1:0c:
                    30:04:89:9e:fe:aa:49:bc:f3:ff:9f:a8:c3:a8:ef:
                    aa:38:fc:6a:09:f3:92:e1:a8:1e:b1:e0:e6:81:cf:
                    53:c3:c4:1b:41:bd:96:e5:7f:d2:c2:85:c6:d8:41:
                    92:0b:0e:88:9b:7c:da:18:0d:92:0c:f7:0c:65:4b:
                    39:6b:5c:95:b2:6f:2f:69:2c:f7:30:53:0c:10:aa:
                    f6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0D:4A:41:68:F0:AD:2F:5D:B6:3E:CB:4C:99:03:B6:47:76:DA:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dd75524-b4e1-371c-acca-f7b110225262.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.217.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:2f:5b:ef:be:06:59:c5:6c:19:a3:a7:e4:dc:b0:86:7d:97:
         74:87:0b:1a:53:c3:f3:f8:cd:31:c8:81:2d:79:58:4e:28:e1:
         48:58:e6:1c:3e:ac:35:40:b5:ff:47:01:22:89:1a:f2:04:74:
         0e:bc:3c:bb:a8:50:c8:d6:ff:fb:db:03:b7:0b:3f:f8:4f:f7:
         85:65:f5:cd:6f:2a:89:4c:59:83:95:ad:48:1b:31:d4:b5:43:
         f0:ed:61:28:13:24:3a:96:0f:85:51:f8:08:f3:ae:73:ac:af:
         9d:99:87:ac:0f:fe:92:aa:b9:09:c0:6f:6a:b7:18:c4:20:82:
         dc:67:a4:5a:35:ec:a7:43:e4:24:75:89:1e:1d:4a:0d:2c:0e:
         b6:b4:1a:48:23:21:90:c6:e8:b2:c4:3b:34:37:f9:1f:2d:5e:
         1f:18:e3:b4:6a:29:ad:27:60:28:0e:14:b0:ef:ee:25:19:aa:
         86:c6:25:d0:45:45:29:20:57:75:95:51:27:0f:c6:43:21:57:
         de:29:3f:f1:f7:a1:44:d9:91:4a:cc:ee:05:ca:97:6b:72:d6:
         be:f2:91:ad:df:e6:aa:72:23:d7:82:61:8b:2c:ff:3f:6a:db:
         ef:26:ac:42:3c:b3:62:be:bf:9c:3e:0d:0d:a4:21:d9:30:65:
         92:2a:9a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:52:55 2025 by rpki-client