Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80b7268e-6386-3c68-8a9b-3039b5e91507.roa
File:                     80b7268e-6386-3c68-8a9b-3039b5e91507.roa (raw, json)
Hash identifier:          JmSbbFy78SoIEiJcXirr+lSNUYBSjrV0F0V6wiKZbmU=
Subject key identifier:   DB:2A:22:03:E3:06:3E:B7:5F:95:3B:AE:9A:D3:16:08:3B:8F:F3:8F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858499829E75D014F3B6F843CA280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80b7268e-6386-3c68-8a9b-3039b5e91507.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     20940
IP address blocks:        23.207.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:e7:5d:01:4f:3b:6f:84:3c:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=7e89e687-7dd2-4107-9f82-0ab28b65f77a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cb:1e:0f:7c:c0:b3:76:fc:6e:db:20:cd:4b:
                    95:f7:4b:b8:51:4d:4c:54:55:7c:5a:1d:26:c9:c8:
                    40:9e:20:bd:2c:2e:94:53:f8:9a:24:21:d5:3d:ef:
                    d6:5e:c4:29:74:03:78:f5:86:55:ee:14:6c:2e:c7:
                    d8:40:e9:14:9d:75:bb:6c:2b:1c:60:91:6b:c3:16:
                    c6:80:49:bd:89:43:ae:9c:78:3c:10:e8:26:e5:da:
                    38:a5:c7:97:b2:6c:0f:f6:43:55:bf:f4:e5:cd:1a:
                    92:17:01:17:03:09:3d:f2:23:5e:f7:03:24:e0:9b:
                    86:72:29:fc:ff:28:cc:1d:0d:f5:96:df:46:39:3b:
                    a2:81:9e:75:16:26:de:73:a9:76:7b:ee:4e:b7:f8:
                    09:74:c9:e9:83:53:35:bc:99:ad:02:d2:cd:9a:2f:
                    f5:51:a4:84:76:18:8d:fa:62:86:83:f5:02:14:a9:
                    80:b1:0e:68:38:86:30:b9:41:69:c0:4a:dd:d9:28:
                    e2:cb:ea:7d:ae:e2:c7:68:93:57:a6:7b:9f:4c:4a:
                    3d:e8:0f:ad:d4:dc:12:57:6b:39:3d:8b:98:70:1b:
                    c9:15:0a:85:01:61:a0:ab:ad:a4:a9:ba:bb:db:c8:
                    07:3d:29:99:c4:28:59:b6:47:ea:a1:45:48:91:7f:
                    fc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2A:22:03:E3:06:3E:B7:5F:95:3B:AE:9A:D3:16:08:3B:8F:F3:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80b7268e-6386-3c68-8a9b-3039b5e91507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.207.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:38:6c:50:01:af:2c:d1:6c:03:12:41:cf:5f:ec:09:91:b9:
         14:8f:22:3b:b4:52:97:64:b7:a8:40:fc:68:c1:68:a2:5f:79:
         59:0e:fb:d1:6a:7f:e6:a8:fe:e4:50:68:f3:4f:0b:b2:ef:c9:
         12:b9:46:7c:53:a7:21:3b:4c:aa:45:01:62:bb:91:24:f5:f0:
         09:fb:a4:9d:94:00:df:e2:67:85:1a:2d:dc:05:df:6a:6f:d5:
         a2:08:c0:7d:bd:c8:72:d3:b8:2e:a8:7f:9a:5a:07:7b:5f:36:
         ba:f7:ce:bf:93:a8:ac:03:c3:c8:41:d0:af:68:ab:8f:9e:e2:
         91:bb:62:8f:8e:92:95:96:e0:26:fd:a6:78:8f:c1:b4:f4:11:
         90:73:1e:32:2c:d5:f4:ed:21:c3:2a:f7:05:b1:2f:2c:9a:9f:
         8e:fe:c3:35:81:3f:76:19:6d:e5:9c:59:23:d6:a9:0c:d8:d8:
         81:f0:5b:55:a6:71:d8:b4:3d:b0:c6:d0:7b:0e:67:e9:81:40:
         3e:40:13:fd:26:77:09:ae:fb:25:23:a0:58:63:41:dc:65:14:
         d1:88:9a:54:b5:46:69:b3:dc:5f:a4:07:07:3c:53:ae:75:ac:
         80:ff:a6:db:8b:63:25:3f:b0:7c:d7:bc:4f:b6:f1:81:af:1a:
         11:6b:b5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:06:34 2025 by rpki-client