Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3c02353-127a-3a70-ab24-e78c38a69826.roa
File:                     c3c02353-127a-3a70-ab24-e78c38a69826.roa (raw, json)
Hash identifier:          jwXTSildONYzE8lKllQfTO1hWhEbpkgaYRyevsfLpbU=
Subject key identifier:   33:F4:16:7B:31:B1:24:DB:5C:E9:C5:0C:11:79:9B:19:18:FA:19:A9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858499829E4F869107EEDC9D237D0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3c02353-127a-3a70-ab24-e78c38a69826.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     16625
IP address blocks:        23.205.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:e4:f8:69:10:7e:ed:c9:d2:37:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=3d8d3990-b3f8-48e5-b783-afc453bdd243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:be:75:a5:4d:4d:c5:5a:a9:d0:4b:2c:25:27:
                    f4:3f:60:67:39:9f:9a:a4:87:24:eb:0a:63:e1:13:
                    b3:86:13:c3:94:ed:cf:4e:8a:43:6e:a9:57:d1:c4:
                    ea:c5:69:5d:7b:52:df:b0:c4:c7:74:ee:da:ed:7f:
                    2c:31:ba:ea:6c:c2:57:10:24:0e:37:76:78:80:82:
                    5d:79:31:bd:87:66:9a:45:22:28:b3:4e:6b:79:5a:
                    35:d0:6d:70:36:2a:da:b8:28:c8:84:69:af:71:e0:
                    50:38:dc:5a:88:ab:47:3f:f4:bb:ad:3c:72:39:65:
                    a1:75:8d:a1:bf:fb:98:0e:40:36:24:6c:85:1f:7a:
                    16:c4:00:66:2a:67:e2:03:f6:57:3d:09:ff:4e:09:
                    08:56:73:eb:d8:2c:70:d5:13:d7:fb:39:37:d4:c8:
                    f6:93:68:b6:69:ab:b1:f8:13:f0:27:fe:f3:61:dd:
                    7a:f5:04:1f:19:ef:92:7d:6b:f9:ba:08:20:df:65:
                    cd:b8:93:02:51:10:24:1a:6c:77:84:9e:55:dc:f4:
                    fd:39:96:c0:52:c1:70:77:3a:38:ed:23:b7:1b:4d:
                    57:b0:a0:90:57:c8:e3:5b:00:7e:4e:7a:ae:0d:03:
                    a8:ee:d5:ab:01:6f:c6:ad:7b:31:35:3f:ab:c6:f1:
                    49:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F4:16:7B:31:B1:24:DB:5C:E9:C5:0C:11:79:9B:19:18:FA:19:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3c02353-127a-3a70-ab24-e78c38a69826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.205.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:dd:d5:22:8c:d5:14:cc:01:1e:6a:bf:a8:06:c0:2e:88:00:
         3e:b7:08:9b:75:20:ce:4e:f2:12:ee:ff:9b:62:c7:72:14:c8:
         39:d9:08:3f:6b:33:a5:e0:38:e1:67:dd:e7:f3:8b:fd:da:84:
         cf:14:2a:4a:7b:de:72:07:da:99:a9:1e:02:63:ba:51:93:e2:
         be:d4:3c:b8:39:e3:fc:31:f3:5f:7e:e0:c5:a5:a2:5f:0f:75:
         fa:a9:c2:f4:0f:dd:83:51:85:87:c7:ea:75:94:67:1d:7e:d9:
         4e:cd:1b:b6:b2:d0:cf:ad:a6:31:ff:fb:ea:98:8a:fd:5e:7a:
         d6:5a:5c:1a:49:57:8c:94:6a:5a:89:cc:0a:63:bd:0c:8e:74:
         4d:47:32:78:e5:55:d4:14:4b:6f:57:71:85:64:4e:f5:9a:cf:
         86:a9:ab:ef:19:0a:19:92:4d:03:d7:be:8c:74:5c:56:5e:70:
         80:e9:79:66:af:e3:20:b6:33:37:77:6b:f7:0d:45:bc:56:33:
         3c:d6:d8:53:99:4a:30:d8:55:a3:49:cc:9e:ac:ae:f4:b5:c2:
         1e:98:3f:6b:4f:6f:30:8b:bf:21:89:bf:79:af:4f:ad:9e:fa:
         a2:df:94:35:c2:7c:cb:9d:ca:f6:82:65:3a:0d:3d:aa:23:d9:
         41:1e:a5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:15:49 2025 by rpki-client