Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ace69b3-1690-3aa3-9ca2-6389e160d86e.roa
File:                     8ace69b3-1690-3aa3-9ca2-6389e160d86e.roa (raw, json)
Hash identifier:          +mf1jSwa0IEpSF86SAQIprB6+UjvLyYQeuLa4zEQ3do=
Subject key identifier:   DC:E9:31:3E:A3:93:4D:63:E0:FF:EF:49:E6:42:99:DC:A0:A4:C5:67
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584988CF692DCAD8B35CFC5F79C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ace69b3-1690-3aa3-9ca2-6389e160d86e.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     16625
IP address blocks:        23.203.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:69:2d:ca:d8:b3:5c:fc:5f:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=15eed1a5-88b3-4e6b-85a0-83d0f1958bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1b:1e:24:69:a3:d9:cd:be:b2:77:50:6c:5f:
                    3f:2b:72:fc:ae:09:3b:b2:ef:05:2a:a7:2a:08:f8:
                    fb:75:04:ea:ae:a3:a5:5e:24:4c:e3:76:c7:46:75:
                    7e:a9:e8:d4:3a:14:54:4d:9f:46:57:2f:89:c9:2e:
                    ba:83:55:9b:b6:d7:1f:fe:15:f0:b1:fc:8f:2f:aa:
                    dc:59:4f:a8:ec:73:73:72:01:ef:18:1a:fa:6e:c0:
                    ea:43:67:0b:98:cd:60:7c:5d:b1:5a:f5:37:1d:18:
                    4e:f7:e7:6d:b9:46:ac:d1:f9:5f:e4:c6:a9:14:76:
                    ac:e9:4a:1a:51:24:0e:3d:0b:b6:b5:2b:42:01:d7:
                    93:e9:59:a3:82:8b:69:74:d6:1e:81:54:7a:4e:83:
                    bd:f7:ec:da:7c:7a:1f:f2:39:de:34:5f:90:dd:b5:
                    c3:48:e2:8d:6f:13:34:51:e5:26:3b:d6:46:6e:0d:
                    a4:b0:be:8d:06:67:11:2b:bf:6e:95:53:be:5a:93:
                    0c:2b:84:af:cf:c9:5e:30:28:e7:4e:e5:fa:ea:1f:
                    1b:30:81:eb:ab:ca:85:6f:03:e0:16:46:8a:d8:56:
                    38:c6:7f:58:4f:b3:fa:dc:25:da:65:aa:9f:e4:03:
                    95:c6:e8:b2:45:38:0a:35:d0:63:38:e5:73:1d:a1:
                    93:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E9:31:3E:A3:93:4D:63:E0:FF:EF:49:E6:42:99:DC:A0:A4:C5:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ace69b3-1690-3aa3-9ca2-6389e160d86e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.203.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:96:29:9c:1c:97:18:75:46:0c:ba:88:55:62:f9:70:b2:0c:
         08:37:1a:42:05:da:6a:e3:7d:ab:e2:83:6f:f3:9c:77:2a:be:
         f2:cd:34:70:72:ed:3f:5d:3a:30:ad:ac:33:81:36:fa:7d:47:
         aa:32:4b:f7:99:d8:75:54:db:d2:45:b8:2e:90:f0:9b:c2:a9:
         1c:8f:ce:48:cc:e8:28:1a:45:b4:f4:c5:41:ec:9b:2b:e8:21:
         5c:c0:06:b8:ab:e3:e1:92:42:f4:3c:33:f3:54:3e:d7:24:15:
         31:ad:89:66:b2:1a:b8:4c:29:95:29:4c:73:84:f8:10:16:4d:
         f4:e9:f5:de:4b:ca:c1:dc:f1:dd:9f:41:90:1b:3d:44:a4:92:
         15:41:81:64:51:31:a4:5e:ce:df:9a:d7:88:aa:a9:60:43:bf:
         9a:24:dc:d2:62:a0:32:0d:ce:18:1c:72:a3:d9:c0:ef:30:d5:
         dc:67:33:df:06:9e:63:57:8f:c2:34:aa:de:ec:88:21:49:ac:
         dc:4a:92:ea:9c:54:1a:37:2c:5d:7d:a5:e8:7e:35:3b:66:17:
         32:1f:7b:b2:87:09:b8:4e:e7:c9:f8:df:60:fd:eb:79:8f:44:
         a2:5e:64:dd:40:44:15:dd:fa:29:94:a5:9c:7c:d0:83:40:3c:
         6e:fe:11:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:16:16 2025 by rpki-client