Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88da4a9b-a078-3908-bd52-ada1e01420fc.roa
File:                     88da4a9b-a078-3908-bd52-ada1e01420fc.roa (raw, json)
Hash identifier:          2LvSe0xDr4NFHGYUOS3+lnZYoMiXN6kX6clWmFl2meA=
Subject key identifier:   5F:A5:43:BF:D9:74:B6:90:0F:6D:66:97:5A:B7:55:0F:67:B5:1B:7F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A1E2AB6A2128193828AB6FC40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88da4a9b-a078-3908-bd52-ada1e01420fc.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     20940
IP address blocks:        23.50.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:b6:a2:12:81:93:82:8a:b6:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=801e8ab2-62ba-4940-8a4d-7a3da546043b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f5:f4:ea:00:49:64:e4:63:8a:03:8f:6b:f3:
                    62:53:27:a6:bd:cc:42:60:51:37:81:2b:7c:c3:a0:
                    d5:92:7f:8e:44:11:ac:d6:f2:fe:67:6f:58:c2:e4:
                    76:eb:ce:05:10:87:4a:31:b5:3d:ab:40:34:d8:d9:
                    55:48:05:17:20:1c:2b:68:8a:d4:96:26:7c:e1:db:
                    8e:fd:c4:d1:c1:bc:d4:fd:3c:46:f2:96:e2:7c:e4:
                    26:00:1b:de:fa:8b:ab:c6:ca:91:6c:67:0f:76:4a:
                    25:b3:e0:a2:91:39:e5:c2:cf:13:4a:43:5e:28:a2:
                    26:f0:d3:e4:b2:22:60:8c:83:3c:8e:98:b4:3a:a3:
                    4b:56:45:12:03:43:5c:63:c6:1a:37:02:59:dc:b6:
                    dd:ad:fb:59:e8:ef:de:d0:af:94:72:5e:cc:63:94:
                    8b:3d:56:bf:24:ab:d2:16:0c:b7:68:ff:93:7b:be:
                    aa:9c:5b:ae:da:ab:1d:93:0c:9a:42:03:c7:ec:d7:
                    f8:52:52:9e:27:37:0d:87:50:15:2b:2e:84:0c:42:
                    e2:61:2b:f0:25:d9:90:f8:34:b1:77:db:e4:8c:0a:
                    27:56:3f:b1:b5:a7:b3:46:46:31:d3:99:80:97:89:
                    3f:52:21:01:7d:99:db:fe:15:dc:44:53:74:96:27:
                    41:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A5:43:BF:D9:74:B6:90:0F:6D:66:97:5A:B7:55:0F:67:B5:1B:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88da4a9b-a078-3908-bd52-ada1e01420fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.50.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:1a:eb:9d:8d:f8:9f:73:5e:b6:a8:34:c6:6b:4c:0a:3d:fe:
         22:4b:fa:e0:04:82:36:57:4e:42:af:31:eb:5d:5d:16:b9:de:
         2c:ee:e2:ec:5c:72:11:3d:be:68:62:2d:85:78:44:1a:fb:91:
         f5:d1:f9:d4:04:b1:5f:5d:ee:04:54:a2:e0:76:3f:02:55:a7:
         18:f4:47:a2:cf:c4:e9:1a:e0:78:2e:67:43:8b:2c:2c:67:12:
         6f:f9:b5:15:98:c5:53:ea:48:dd:ca:5c:f5:7f:29:b9:a9:5c:
         ce:29:af:cc:63:b7:fd:98:f8:d7:1f:32:d4:d9:61:b4:52:21:
         21:3b:ed:8d:80:64:16:79:de:85:ad:24:1e:cf:d6:04:0b:a5:
         73:c3:b7:b2:34:ee:a3:9d:6c:44:dd:0b:dd:b2:72:35:46:f0:
         bf:66:ab:27:c2:fe:15:1f:51:11:01:2a:d3:44:57:ea:82:4b:
         e9:19:b0:5d:2c:82:7d:79:30:a2:4d:62:49:43:25:ca:07:6d:
         dc:be:8e:2e:f9:ac:5d:ef:a1:f5:9f:2a:e3:3e:5c:6a:db:e5:
         c7:44:96:3c:a6:69:f8:c8:4a:82:cf:3f:53:80:d7:5a:ce:e5:
         04:d5:62:44:3d:6a:43:35:9f:f7:06:55:03:93:45:8d:2c:dd:
         bb:b8:a6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:31:44 2025 by rpki-client