Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bbfbf758-32cc-3df7-9006-a5e1cc323083.roa
File:                     bbfbf758-32cc-3df7-9006-a5e1cc323083.roa (raw, json)
Hash identifier:          eEyVRT+9Ii0ysUS3CJwh5btDk5wGpJtMOVhDXJ2EyNI=
Subject key identifier:   21:1C:C5:34:78:56:8F:EA:D0:74:75:EE:38:FF:45:4B:EE:CC:05:82
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A92063737DE26A7A89EA76600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bbfbf758-32cc-3df7-9006-a5e1cc323083.roa
Signing time:             Sat 19 Jul 2025 13:01:04 +0000
ROA not before:           Sat 19 Jul 2025 13:01:04 +0000
ROA not after:            Fri 17 Oct 2025 13:01:04 +0000
asID:                     16625
IP address blocks:        23.39.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:92:06:37:37:de:26:a7:a8:9e:a7:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 19 13:01:04 2025 GMT
            Not After : Oct 17 13:01:04 2025 GMT
        Subject: CN=e49123ea-89f5-4ff5-bda9-844ee7f20194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:01:70:37:76:69:21:b3:ad:01:17:d8:74:5a:
                    76:30:74:da:ff:ca:bf:6a:89:5c:4a:ea:d0:e4:3b:
                    ab:5e:d4:cf:21:db:c8:4a:92:ed:d2:1f:2a:5a:04:
                    f7:b6:3c:6f:ab:c3:10:22:02:9b:20:56:0b:3f:1b:
                    8a:81:cf:00:b5:bc:e7:96:ed:d6:86:1d:b5:bf:a2:
                    70:d9:17:06:15:c9:cf:ab:e0:a6:95:5f:87:35:2f:
                    80:82:61:4b:77:a2:85:cc:dd:f4:49:35:2c:6b:24:
                    ef:78:06:1f:f3:cb:4d:77:55:5d:ee:72:b4:81:64:
                    f7:9e:1c:ff:f2:f6:50:d4:3b:2f:65:4d:22:99:30:
                    8a:f5:dc:be:d5:39:ab:fb:e7:1a:db:ff:5f:f4:12:
                    42:b4:bf:c6:f0:82:32:b5:4a:2d:cb:0d:b9:d2:6d:
                    c6:2a:a2:97:cb:f4:a2:4f:53:e2:d1:c6:84:c7:63:
                    a6:be:bb:95:fe:c8:f8:d2:6d:81:da:8c:fb:51:16:
                    b6:ce:4a:52:08:d6:2f:d1:c2:8a:49:04:3c:f4:7a:
                    2b:25:9d:2f:dc:f4:1e:6b:6b:ea:fa:33:e6:e6:bc:
                    30:d4:fb:55:39:62:ab:ad:6b:d2:2b:e5:84:c7:d1:
                    7f:0f:ee:53:06:e3:6f:34:b9:0c:11:e3:88:c5:df:
                    ab:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1C:C5:34:78:56:8F:EA:D0:74:75:EE:38:FF:45:4B:EE:CC:05:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bbfbf758-32cc-3df7-9006-a5e1cc323083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.39.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:84:c6:46:0a:4d:9e:03:22:0d:80:56:9f:c1:ae:53:02:1f:
         f5:41:87:a8:83:60:64:be:b6:46:d4:df:fe:25:5c:00:52:3c:
         1c:31:5a:c6:b2:c6:ed:b5:ba:2e:98:a5:b7:0f:7a:d3:86:66:
         b7:b4:5b:34:d0:13:3c:57:0c:f1:e9:1e:99:eb:7c:98:f1:02:
         16:3c:29:05:e1:ba:48:a8:a7:06:2d:f3:bf:de:77:ae:57:18:
         17:5e:1e:39:d0:13:1f:3e:a3:45:30:9f:3b:3c:6c:93:1b:a2:
         4d:7d:a6:23:25:3f:24:3e:c9:07:24:65:59:2e:0e:f4:31:0e:
         34:82:0a:a4:74:05:39:4f:77:54:8d:15:24:8f:85:89:09:df:
         ce:5e:ca:8f:52:84:20:e8:9f:cd:e6:86:86:d0:a5:fa:31:a8:
         6e:0e:32:2d:4f:30:ce:67:ea:0f:6c:7b:72:4c:8a:7e:0c:b8:
         7e:cc:3b:d7:04:13:bd:2a:ab:14:d7:d7:c6:ae:34:dd:47:2d:
         68:9f:8d:60:cb:4d:ab:e6:0a:09:d5:f1:53:57:a2:fe:19:2c:
         d5:19:82:a7:e9:f4:8e:b6:e4:21:06:70:ae:0b:01:1a:42:6f:
         66:50:6f:45:e0:18:fc:c9:10:ce:03:8d:18:33:ce:bb:39:51:
         6a:ae:fd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:04:22 2025 by rpki-client