Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23a0838f-fdf4-3061-9292-4bc03560679b.roa
File:                     23a0838f-fdf4-3061-9292-4bc03560679b.roa (raw, json)
Hash identifier:          tep+PLwMmbeXogbsXuBGZvICcivoZiYWAcrH+W/yYjQ=
Subject key identifier:   02:97:4E:5E:DE:5F:7B:F4:F6:EB:98:FC:72:DB:75:4B:C9:CC:C5:A8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858499DBF44FC96D7E3CB98992280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23a0838f-fdf4-3061-9292-4bc03560679b.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     16625
IP address blocks:        23.214.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:44:fc:96:d7:e3:cb:98:99:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=b315ee5d-3c3e-426b-a46e-a8f4c804e2c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:55:d5:02:c4:1d:fd:37:f3:89:db:99:51:62:
                    f7:ea:ba:f2:7b:f9:9a:51:7d:98:ff:7c:92:3c:62:
                    90:91:74:65:5b:4b:06:ac:e6:53:c6:c8:b0:34:e6:
                    87:9f:c2:35:a5:3c:f8:d0:27:51:42:4a:ca:07:6a:
                    2a:bc:fd:98:fd:6f:f7:a1:25:f7:c0:ef:c5:0d:6d:
                    79:80:93:dd:55:1c:51:e6:b8:d4:c9:1f:14:ea:1a:
                    0b:3b:73:91:fa:6c:a8:f2:68:70:15:4c:b1:20:f3:
                    11:26:54:4c:5c:17:66:86:e9:2f:ff:31:c5:6a:18:
                    3d:a4:a3:e2:c9:fa:82:6a:3c:70:46:fd:9b:83:8c:
                    f8:b7:f0:24:fe:ef:d4:89:35:14:e6:ad:66:79:1c:
                    77:88:6c:e6:bd:8d:9b:51:fb:60:d8:9a:e0:96:ed:
                    83:7f:7b:54:7d:3b:4d:e0:ba:79:ba:e4:97:99:73:
                    ec:37:c2:27:88:ed:b9:1c:7b:7f:35:e7:ad:fc:fc:
                    63:7c:f4:c0:24:1e:d8:5f:4e:50:4a:ee:0d:71:b9:
                    95:68:01:5f:9f:61:76:25:ab:f5:3a:f8:f9:a4:0b:
                    49:9b:17:35:14:22:15:0f:db:e2:3c:49:1f:45:67:
                    e6:67:f4:cb:07:12:c1:f0:63:59:c9:32:70:ba:45:
                    fb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:97:4E:5E:DE:5F:7B:F4:F6:EB:98:FC:72:DB:75:4B:C9:CC:C5:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23a0838f-fdf4-3061-9292-4bc03560679b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.214.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:53:f6:e4:18:92:71:aa:30:98:e4:ce:86:84:82:70:bc:00:
         eb:c9:45:2f:02:c9:51:18:a9:d6:12:ba:19:9f:23:34:6b:42:
         aa:50:7d:0e:4f:8c:30:93:e4:2e:85:bf:46:bf:5d:2f:32:6f:
         1c:37:cf:31:ff:e9:4f:82:e3:2c:3c:1d:b3:05:29:12:dc:39:
         90:08:1c:ea:cd:d4:11:4c:b6:c2:89:39:de:71:e5:70:5b:29:
         00:c4:24:d0:3b:af:b1:72:5d:97:0c:eb:f1:40:e1:18:73:dc:
         b0:66:b1:3e:e8:16:e6:63:73:cd:e9:34:61:13:8e:ae:99:8e:
         64:58:9a:ed:ec:9c:54:22:64:b1:2a:f4:30:8a:4f:16:10:3d:
         b8:4f:dc:97:d9:3c:e5:16:2d:99:52:90:b8:cb:8a:52:e3:9e:
         4a:e9:e7:6f:48:e3:72:6d:be:b2:d5:0d:52:dd:29:03:65:85:
         dc:3e:93:36:32:06:19:2d:b8:a2:f5:84:58:af:89:7b:80:75:
         12:33:55:9f:90:73:c3:17:97:fe:78:5b:29:8b:cf:e9:6e:fa:
         79:8a:9d:91:c3:4b:77:9f:af:f9:25:1e:2c:ab:61:e0:f7:95:
         a2:b7:3d:a6:64:f5:ba:90:48:ec:fa:09:4c:be:33:33:64:83:
         9e:0f:b2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:01:05 2025 by rpki-client