Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a7e56e4-034f-3cd9-bfb0-8bd79315e4c7.roa
File:                     8a7e56e4-034f-3cd9-bfb0-8bd79315e4c7.roa (raw, json)
Hash identifier:          f9tt0S7xAZEyf8Y3zQLY//Zbo2RYpWKROp3/7xLf15c=
Subject key identifier:   13:07:B0:74:9F:ED:D3:44:C7:4B:2D:4C:92:59:D2:2B:14:02:FB:2B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858499829E77B60C55D7700C53A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a7e56e4-034f-3cd9-bfb0-8bd79315e4c7.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     16625
IP address blocks:        23.207.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:e7:7b:60:c5:5d:77:00:c5:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=eb89f9ef-ed75-437c-91d4-6658324ea0e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2d:bf:6b:17:a8:5e:48:2f:31:f7:9a:5c:e4:
                    5a:27:88:53:d6:e3:f7:8a:70:1d:45:1b:00:d1:db:
                    9e:af:2d:1f:89:c3:31:38:30:b6:aa:31:34:75:94:
                    88:23:3d:1c:51:30:a7:f4:c1:ea:6c:42:eb:1d:cd:
                    f9:70:7d:1f:b4:78:48:55:83:3b:5a:d0:c9:60:9b:
                    1c:ed:fd:d2:30:c2:23:92:34:d7:4d:dd:79:f3:f0:
                    2c:18:c5:50:e6:f8:8b:e7:dc:bf:74:4a:f8:1e:bd:
                    a4:6d:a0:e8:06:f4:ef:5f:94:31:d9:3b:24:bc:35:
                    b9:a3:13:c8:f7:f8:7d:5f:38:69:f2:68:b9:54:de:
                    31:47:6f:35:c8:c7:97:b0:f4:dd:bd:4e:c5:48:63:
                    61:bc:a0:05:2a:21:d9:c1:00:6e:a7:78:a6:c4:f8:
                    2b:ee:27:f3:75:0d:10:21:ba:3e:e1:1f:05:c9:24:
                    28:7c:b7:25:8b:25:13:70:93:c6:8c:3b:d0:62:c2:
                    d9:70:24:6c:b2:7a:95:f5:d4:88:fb:3e:32:1d:d6:
                    25:55:71:43:33:36:26:a2:65:0a:93:55:35:cf:32:
                    38:c3:36:02:51:8a:c7:d1:4a:e1:f9:b8:fc:82:90:
                    a9:0a:2a:7e:98:fb:42:a1:a8:2d:e9:3e:93:a3:92:
                    f1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:07:B0:74:9F:ED:D3:44:C7:4B:2D:4C:92:59:D2:2B:14:02:FB:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a7e56e4-034f-3cd9-bfb0-8bd79315e4c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.207.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:51:04:f9:0e:98:2e:fe:44:02:25:d7:43:ae:93:c3:fc:dd:
         47:fe:ac:c0:30:17:8c:f3:68:aa:7c:9e:1c:4c:91:94:b0:9a:
         cb:1c:68:5f:d0:43:e2:74:51:29:c0:e8:de:87:2a:75:d2:7d:
         0f:9c:79:39:ba:a4:90:3c:91:60:8f:a6:b6:0b:29:a0:e7:8e:
         1d:f7:90:e3:12:27:44:47:82:6f:f8:f8:40:c1:84:a1:08:c4:
         ea:84:3c:37:11:f4:ee:27:99:96:67:46:28:b7:b0:a3:14:eb:
         a4:1e:c5:df:87:87:5e:1a:a0:71:ca:b1:db:6f:a4:0c:0f:10:
         36:d4:64:75:1c:a7:c6:f7:92:16:0f:21:6f:3f:4c:fd:72:9d:
         3c:5f:95:2e:1a:71:f4:23:45:1d:fd:5f:e4:46:fd:9c:72:e4:
         be:2d:a7:5b:ed:74:5d:60:a1:a3:f2:75:62:94:f2:74:0e:48:
         f1:ec:37:7e:f9:fa:ff:6a:a6:ba:28:59:4b:37:40:84:89:fa:
         b1:1b:91:4b:29:15:db:a0:64:f8:35:b7:3f:0a:a7:d2:e7:6c:
         57:8e:91:c1:3c:40:66:ed:4e:c3:36:5e:41:13:65:25:b1:9d:
         41:2f:4e:89:90:11:78:6d:f5:1f:a6:1e:84:24:38:1e:86:48:
         d1:8b:aa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:15:17 2025 by rpki-client