Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3cea6b2a-c1b4-3f58-ae25-9eed7c3b6d21.roa
File:                     3cea6b2a-c1b4-3f58-ae25-9eed7c3b6d21.roa (raw, json)
Hash identifier:          eer4sayVdQvNs7hTYQT4B8j90Ihz1lMwrEjK80PnSzw=
Subject key identifier:   40:9D:6A:EE:95:9F:56:85:79:30:31:04:8A:8F:02:9D:6D:97:31:3E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A2C2029B801C0937FA81E0800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3cea6b2a-c1b4-3f58-ae25-9eed7c3b6d21.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     20940
IP address blocks:        23.32.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:29:b8:01:c0:93:7f:a8:1e:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=55f2cb82-3593-4582-a261-30bcfc9f4a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:dc:83:d1:46:c8:bf:ec:f8:91:57:7a:b6:3f:
                    b2:48:03:51:99:41:92:c8:5d:35:a8:49:ac:1d:fc:
                    e6:7e:d7:6f:1c:53:07:f2:95:91:c7:32:ab:82:dc:
                    28:f6:df:a0:fb:ae:72:2e:11:9c:3c:96:35:c6:9e:
                    70:3c:35:20:9c:5b:01:30:8d:b5:5b:10:28:d2:a2:
                    b3:c9:aa:4f:96:e6:88:9e:fe:ae:2a:6f:ca:84:21:
                    60:16:c6:81:99:38:8d:d3:c2:05:b2:8b:3b:85:dd:
                    e9:8a:22:53:6b:fe:df:50:bf:60:65:38:46:44:02:
                    73:3a:1a:8c:ae:d2:f8:eb:1b:4f:9c:5e:34:d2:fa:
                    1f:0d:19:b3:80:8c:45:88:a9:f4:48:47:fa:2d:e7:
                    08:81:88:db:01:c2:d2:3c:a7:40:f3:62:4f:64:f2:
                    ce:8a:82:12:a6:56:26:6a:a3:60:89:c4:9e:c6:cd:
                    8d:30:f5:de:c1:0b:e6:57:be:83:5b:c3:1b:41:8d:
                    be:ec:af:1f:e9:f9:40:b6:55:0e:c5:ec:13:03:ef:
                    34:4b:f4:90:f0:5f:e4:32:e7:be:09:38:36:a4:cc:
                    c0:28:bb:43:75:4c:49:0c:54:03:6f:18:11:01:d3:
                    a2:e2:59:6b:3b:a7:37:69:f1:1a:1e:32:f3:cf:f6:
                    fd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:9D:6A:EE:95:9F:56:85:79:30:31:04:8A:8F:02:9D:6D:97:31:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3cea6b2a-c1b4-3f58-ae25-9eed7c3b6d21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.32.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:81:5f:b8:fa:94:63:e4:f7:6c:1b:71:8a:d3:d7:35:bc:ce:
         65:80:0b:91:8a:8e:41:c9:d7:9f:28:86:df:5f:0c:0e:d7:27:
         dd:46:f5:f0:47:a4:bb:51:26:d8:bf:b4:21:3a:41:38:df:60:
         e8:69:65:91:0b:e9:31:6c:f1:30:00:84:0a:da:5a:6d:83:4f:
         b3:e8:45:41:9a:27:ef:97:72:22:3d:93:b0:01:4d:02:96:3b:
         1c:7b:54:b0:0d:c9:4c:7c:98:9b:2e:d8:99:a8:5d:33:d6:f7:
         70:64:35:14:68:e1:ce:4a:f0:f1:c8:2b:e9:28:11:46:01:2b:
         ab:cd:78:fa:c3:a5:b9:11:2a:bf:b4:53:b1:38:0d:f7:24:49:
         ef:05:1b:17:a9:97:a0:de:2d:b8:ef:5d:e8:29:f9:60:a7:49:
         d3:a1:d7:dc:7b:55:14:4b:be:8c:06:14:ef:8e:88:41:28:34:
         34:11:10:ee:24:2a:fd:57:f6:5b:0c:33:2e:9d:1c:91:98:b7:
         18:1b:88:04:89:ca:d7:03:0a:88:67:f2:0e:83:70:63:1b:68:
         d8:ae:ee:8a:12:87:8d:35:20:55:d7:90:c1:a2:5f:23:18:fb:
         0c:3c:c8:8e:17:ce:22:b0:d4:f8:a3:cf:5a:00:f7:f5:b7:04:
         2c:d2:62:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:37:57 2025 by rpki-client