Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c305fad-a9e3-3993-9ff2-b4d6f46a78f2.roa
File:                     8c305fad-a9e3-3993-9ff2-b4d6f46a78f2.roa (raw, json)
Hash identifier:          Ws2LVAqA62ny5cSdDsv3wpZPceS0rtede/fM1WDkxuQ=
Subject key identifier:   CB:4C:3B:E9:9B:A6:33:6F:EB:82:72:0E:CA:02:8D:E2:1A:D7:1C:F7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A8840A63DBD1E4F8F103FD880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c305fad-a9e3-3993-9ff2-b4d6f46a78f2.roa
Signing time:             Wed 16 Jul 2025 01:00:49 +0000
ROA not before:           Wed 16 Jul 2025 01:00:49 +0000
ROA not after:            Tue 14 Oct 2025 01:00:49 +0000
asID:                     16625
IP address blocks:        23.218.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:88:40:a6:3d:bd:1e:4f:8f:10:3f:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 16 01:00:49 2025 GMT
            Not After : Oct 14 01:00:49 2025 GMT
        Subject: CN=600e19b5-6e76-4ad1-a33d-9a491d42c249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9e:b4:9f:0f:ed:72:3d:5e:fa:02:5a:9f:c5:
                    df:b7:d5:ea:27:f1:45:c1:7c:f9:dc:83:ff:1b:37:
                    cf:04:6b:52:14:22:77:51:a9:5e:23:9f:c3:8e:f7:
                    50:b5:cc:07:69:bc:0b:74:c6:68:a8:55:5d:38:b2:
                    0a:90:0a:d2:20:12:74:12:fa:ae:ef:79:e5:44:b3:
                    49:b9:f8:23:4e:ab:c6:62:c0:5b:f4:73:e5:05:a4:
                    18:ab:3b:0e:ab:1e:f2:d6:22:34:56:d6:2b:af:ef:
                    36:3e:2e:7e:51:ea:e7:6b:a9:03:55:cc:b8:90:44:
                    77:ae:77:00:61:68:f7:4f:56:4a:e4:96:7f:eb:fd:
                    e2:ce:99:86:e8:07:1d:7b:ef:0f:31:a9:25:c9:0b:
                    c7:5d:91:89:28:4c:a9:51:4a:da:dd:fa:98:99:be:
                    c3:05:7f:36:ff:11:b0:47:3a:e7:8e:14:bc:d0:ee:
                    a4:88:e8:07:0d:2b:7f:50:80:e3:02:fa:39:c8:a2:
                    e1:c3:49:a8:86:3b:44:0e:be:14:f9:b3:fe:b6:79:
                    61:3d:8e:df:a9:22:51:99:35:8e:9c:57:77:c3:70:
                    9c:e4:f1:16:dc:df:d4:5b:83:fc:b8:1c:8f:c1:38:
                    06:24:a3:9a:14:cc:c9:a2:d3:43:2c:03:d1:de:f5:
                    a9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4C:3B:E9:9B:A6:33:6F:EB:82:72:0E:CA:02:8D:E2:1A:D7:1C:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c305fad-a9e3-3993-9ff2-b4d6f46a78f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.218.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:2d:b8:25:e8:a8:91:f9:98:2d:7d:cd:12:ca:b6:b2:f2:da:
         09:40:cb:e1:df:2d:23:de:b4:a0:4d:cd:ea:84:ed:a9:e1:73:
         bf:3a:6e:6a:59:fd:4b:8c:5d:dc:ae:46:88:25:05:99:98:ea:
         82:da:45:0a:1c:f8:94:32:0e:be:18:fe:73:5a:c2:15:9d:43:
         a2:c3:e9:c6:f9:13:dd:02:70:df:c0:13:97:2c:99:b1:26:28:
         bd:e4:1d:97:36:85:58:30:57:37:04:64:b0:39:08:45:bc:6f:
         89:65:4a:0d:a0:a4:c9:45:1a:c4:40:5b:b1:1f:09:17:e1:7b:
         2c:e9:58:5b:5b:e6:76:f3:9a:d0:5d:b8:de:62:0f:e6:cc:50:
         51:0d:30:0d:b7:4f:f2:1b:72:c1:23:b8:f9:73:cf:ce:02:f2:
         7f:34:b2:8a:e5:8e:7e:94:b9:f7:2f:3c:49:41:aa:80:2f:29:
         e7:96:09:e6:f7:d1:16:43:41:ae:87:b8:cd:f3:ff:4f:0c:c9:
         61:20:cd:60:7f:84:43:d0:aa:02:a6:7e:5a:8d:42:d6:66:43:
         ae:79:5b:2a:b3:f7:3d:ff:2e:28:af:6b:5d:7f:74:1e:a2:a7:
         c0:72:aa:05:db:82:8f:93:cb:c0:5a:e4:32:82:14:0a:50:a4:
         96:e8:26:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:07:41 2025 by rpki-client