Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93b033c7-d14b-3a95-8681-6b3f3dc03304.roa
File:                     93b033c7-d14b-3a95-8681-6b3f3dc03304.roa (raw, json)
Hash identifier:          /L0QTV2Eeyofzcx/z/NLu+62Ha1nzlfUD6hZ2djtsk8=
Subject key identifier:   E9:75:36:1B:4D:46:72:78:BE:79:82:80:18:8D:03:A9:2A:3C:86:4C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AA1617DAEFD5AC0765A280940
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93b033c7-d14b-3a95-8681-6b3f3dc03304.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20940
IP address blocks:        23.211.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:7d:ae:fd:5a:c0:76:5a:28:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=05dba80c-f127-4f28-9048-a812b01b4bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:01:c1:d4:f0:0b:a0:aa:92:50:4c:34:c2:5c:
                    68:9c:48:78:06:24:b0:cf:05:b6:eb:dd:50:bf:97:
                    3f:fa:17:91:14:3c:b1:c4:65:ee:63:f4:11:6c:2d:
                    2e:c9:37:b9:c9:61:bf:72:5f:2a:27:82:64:77:b7:
                    ce:f8:42:7c:34:44:a1:06:96:2f:c2:9a:9b:57:21:
                    4d:56:78:48:d8:8c:89:d1:71:b6:e9:dd:46:99:25:
                    79:66:3d:b7:2b:7a:96:db:20:1e:79:51:94:a2:c7:
                    b1:85:34:ee:56:58:da:8f:b7:80:e2:47:8d:c1:13:
                    75:ed:c6:d8:50:ba:6f:d3:9b:b6:25:da:d9:b1:09:
                    69:3e:1c:c6:5c:fe:31:9e:b4:87:62:29:f0:a0:5d:
                    29:01:62:91:10:41:58:2c:89:29:97:f2:05:8e:48:
                    eb:1e:73:96:33:29:61:e3:78:7d:69:39:f4:e1:46:
                    31:69:f6:37:ba:9e:ce:c1:d2:62:5b:c2:14:ea:03:
                    a9:d1:8f:e0:c4:c2:a9:0b:52:7f:ac:ab:e1:3e:1a:
                    cb:79:45:71:2a:6e:a0:69:1b:4d:2e:f8:3d:36:b1:
                    45:e9:46:a7:67:ac:aa:94:31:39:7d:64:dc:d5:7b:
                    3a:0b:29:a6:c1:30:57:10:d3:88:7b:48:db:9c:5c:
                    e3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:75:36:1B:4D:46:72:78:BE:79:82:80:18:8D:03:A9:2A:3C:86:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93b033c7-d14b-3a95-8681-6b3f3dc03304.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.211.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:16:20:97:23:6b:ab:32:79:96:2f:a5:dc:1e:00:6f:91:8e:
         39:0e:3e:6a:6e:61:49:ff:50:a5:ed:57:cb:b9:ab:b4:92:e9:
         63:a2:d5:58:a4:f8:85:46:2a:39:d7:8a:ed:b8:05:b4:a3:66:
         94:21:67:e1:b5:70:c6:29:9b:9e:4d:a3:f5:40:92:5f:5d:03:
         b2:22:52:a5:22:fb:89:11:82:be:c8:50:56:fd:f2:86:79:27:
         33:df:3c:36:bf:e1:3a:f6:4c:3a:e5:67:9f:2c:7a:be:2a:19:
         02:33:8e:d9:a1:4a:20:4f:54:6e:15:41:ca:e2:fe:46:5b:40:
         ad:79:1c:61:6e:18:a5:78:0d:06:e4:78:de:cb:2c:19:bd:33:
         4c:36:27:08:46:d9:3f:1c:cd:05:41:d4:a6:e6:f0:04:a4:5a:
         39:03:a1:6d:40:f9:57:45:42:60:40:eb:7d:c2:0c:73:f4:ca:
         d9:cc:34:18:b7:7c:6c:b6:8c:7d:49:50:2d:5f:30:e3:0d:4c:
         8f:3d:3b:79:f7:2b:e0:d3:2f:dd:e2:ee:5b:73:ba:a8:19:1f:
         93:4b:94:d8:77:2b:f2:a0:14:04:5f:b1:21:0c:55:da:cc:d7:
         4c:88:ba:30:7a:62:c3:39:9b:9b:1e:b4:68:81:92:51:30:bb:
         37:10:84:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:31:20 2025 by rpki-client