Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39c2db01-9487-34b3-8e85-aac8a23434f3.roa
File:                     39c2db01-9487-34b3-8e85-aac8a23434f3.roa (raw, json)
Hash identifier:          /ugs3df8ibK83yMNJqLBQX2WrjcnpQB1yLdXZmLymOY=
Subject key identifier:   48:F8:68:0B:45:0E:88:16:0E:0C:08:4E:17:CC:50:6B:EB:D4:2A:B9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A2EEAC207FBB50D9D45107B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39c2db01-9487-34b3-8e85-aac8a23434f3.roa
Signing time:             Sat 14 Jun 2025 01:00:49 +0000
ROA not before:           Sat 14 Jun 2025 01:00:49 +0000
ROA not after:            Fri 12 Sep 2025 01:00:49 +0000
asID:                     20940
IP address blocks:        23.58.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2e:ea:c2:07:fb:b5:0d:9d:45:10:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 14 01:00:49 2025 GMT
            Not After : Sep 12 01:00:49 2025 GMT
        Subject: CN=3b44b0f3-b461-4094-8fdd-44b0aefe8a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7d:31:cc:75:b7:2f:40:9d:ed:f0:65:0e:b0:
                    e5:3e:01:d2:59:a9:89:c9:61:9b:f6:41:65:15:c0:
                    3f:c7:f0:a7:ea:4b:1e:07:e2:d2:92:d8:94:b0:a3:
                    5c:e9:d7:4b:c7:7c:4b:1d:46:e2:db:c5:f1:2f:0f:
                    0a:65:63:df:fe:39:6d:6e:e6:61:c1:99:a8:57:0d:
                    ea:72:bf:b7:6e:00:cf:60:41:05:50:fa:d2:7c:2c:
                    db:68:f0:9f:e9:85:59:54:c6:29:ef:b4:d0:c5:bc:
                    28:1f:e6:ef:b0:73:29:2e:66:d4:1f:b5:9e:a0:35:
                    46:c2:81:b6:80:db:28:ed:af:51:e1:9c:c2:69:29:
                    df:d0:df:63:07:07:75:3b:9d:4e:ad:c6:50:21:ec:
                    24:85:2d:a3:ce:1e:8a:12:d2:48:5c:45:56:f8:44:
                    ab:32:fd:81:9d:99:7d:2b:b7:0e:d5:80:63:84:b3:
                    0d:cc:79:4d:e4:f8:5e:a7:62:d8:ea:c8:9f:a7:b0:
                    e0:26:d4:3b:6e:6e:ec:b7:4d:c4:3a:8b:5e:e4:d8:
                    da:40:0c:a7:0f:e3:46:51:84:50:4d:6d:1d:0d:54:
                    ac:93:3f:5e:1f:a2:b9:67:ad:c6:d4:d5:ba:f6:fd:
                    42:bb:e9:6d:73:4f:d7:4f:6c:b0:4a:25:e9:f4:cc:
                    56:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F8:68:0B:45:0E:88:16:0E:0C:08:4E:17:CC:50:6B:EB:D4:2A:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39c2db01-9487-34b3-8e85-aac8a23434f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.58.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:54:ef:b6:ce:45:ac:14:c8:50:51:ef:62:bd:2b:f6:8d:f0:
         d3:08:01:5d:ff:da:fd:54:2b:a5:16:e2:53:80:1d:51:57:b5:
         0a:78:2f:be:b0:8d:5e:67:6f:9e:c0:c0:d7:18:2c:b2:b2:1d:
         dc:d1:29:51:64:42:0e:57:1a:21:24:b8:91:ee:39:4c:42:3f:
         e0:e9:9a:4c:60:b8:21:4a:9f:62:69:31:99:6d:36:52:12:2e:
         9b:65:24:48:b2:1c:f5:bd:fb:ad:ad:23:09:59:05:64:59:89:
         fd:91:27:bd:21:12:c5:55:25:3f:1a:a7:86:df:aa:34:de:3c:
         9c:dd:17:38:47:17:74:f8:73:18:92:15:fa:59:18:70:78:fc:
         e8:f4:32:19:ac:6f:11:bf:26:13:22:07:a6:41:ef:3b:26:70:
         d0:f8:8b:6a:8e:a0:d2:e5:76:6e:ea:2a:7d:bf:7a:df:36:d5:
         2f:ba:7e:85:11:ec:52:e2:83:33:69:95:e5:15:29:60:43:bb:
         5d:e4:a4:0a:1c:d4:fd:e3:fe:8a:be:a5:95:57:55:02:69:88:
         7d:f4:7a:1c:62:e4:30:68:f1:01:32:70:0c:8e:56:f6:51:2e:
         ad:f9:38:7b:12:03:8e:aa:91:74:27:f2:73:35:08:c9:31:ee:
         3c:e9:a4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:46:39 2025 by rpki-client