Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c44601f2-05d2-374b-9533-52b328c9c474.roa
File:                     c44601f2-05d2-374b-9533-52b328c9c474.roa (raw, json)
Hash identifier:          +8VNIIrCqd5Jk5KnuYeJfKTmP4rd46XJr+LQM1TZntk=
Subject key identifier:   BE:0B:24:9D:74:B3:67:B3:56:1D:27:95:09:B2:0F:8D:8D:CE:40:92
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A6290A4D3736ABE4E29401C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c44601f2-05d2-374b-9533-52b328c9c474.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16625
IP address blocks:        23.194.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:a4:d3:73:6a:be:4e:29:40:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=e4efc026-a439-4219-bcbc-add9bcd419be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0f:31:3c:60:2f:75:b9:47:e7:05:4e:4b:fe:
                    76:1a:25:47:9e:30:56:b2:ce:38:1c:8e:0e:9a:68:
                    6f:fe:8b:a5:64:5b:14:ef:a4:8a:ad:ff:43:1b:18:
                    05:25:b8:f3:7c:66:8c:9d:75:ee:bc:13:5c:77:3e:
                    e1:b8:9c:85:4c:1f:35:12:52:0b:95:28:68:c6:5f:
                    b4:39:23:8e:3a:a0:0b:24:42:1c:cf:9e:32:e7:11:
                    56:a6:ee:74:03:74:92:8c:9a:b8:c7:b6:33:a2:9d:
                    f4:b8:f9:92:9f:71:ba:a5:a5:c8:9c:06:21:d9:80:
                    f1:7b:c5:b1:02:01:35:b3:b9:03:b9:a8:52:b8:26:
                    98:c5:4f:e1:39:de:85:fb:f3:87:65:fd:42:ee:3c:
                    dd:dc:cb:7e:11:4c:e2:03:0f:ce:0d:a0:21:11:d9:
                    78:57:87:e6:e3:b2:74:91:6d:c4:2a:2e:83:10:c1:
                    3a:bf:0b:02:85:dd:f6:6b:96:87:9c:e0:96:73:33:
                    d9:4b:d2:09:be:9f:ad:55:28:0c:9d:71:b1:8c:ef:
                    96:d3:87:95:43:74:9d:58:e9:6a:56:d9:d3:bf:33:
                    dc:22:50:b8:20:10:84:ee:e2:cc:56:b4:c9:09:f0:
                    9f:cc:f2:47:b1:b0:91:da:74:d7:26:ca:54:45:c6:
                    05:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0B:24:9D:74:B3:67:B3:56:1D:27:95:09:B2:0F:8D:8D:CE:40:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c44601f2-05d2-374b-9533-52b328c9c474.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.194.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:43:1a:fb:93:2f:db:8e:b6:45:19:8d:3e:23:93:28:a0:8d:
         99:1e:13:14:2c:d4:f7:41:d3:50:46:25:c5:60:e0:01:34:97:
         5f:7b:88:81:a0:99:51:74:f7:9d:f9:b7:f6:9f:e2:0f:9a:a9:
         0c:63:30:30:d3:d6:f2:60:dc:56:a5:b4:7e:98:82:c6:f6:5e:
         3b:d5:9b:05:dd:28:bf:02:9d:b6:92:3a:d9:20:5d:4a:1f:eb:
         71:52:07:67:9c:9a:7e:2d:cd:9e:59:de:f2:03:ff:54:35:81:
         28:27:d1:15:66:90:4a:51:ea:6d:9c:c6:0d:b0:05:14:2b:72:
         f3:af:d4:a4:64:5a:7c:ff:13:95:0f:a6:9c:28:4d:ea:bc:c0:
         9a:d6:f5:a9:80:a3:6e:46:a4:3e:24:be:12:73:e8:f3:89:cd:
         31:7c:dc:e6:ba:96:24:e1:fb:b6:0b:05:e0:5d:d4:26:3a:ff:
         c9:a9:a7:4a:be:ea:27:8a:4f:5f:c7:72:89:b5:59:09:77:45:
         ee:a4:58:92:5a:3c:20:67:c5:51:e6:4f:69:a3:d5:e9:a4:c5:
         cd:7e:02:ae:c0:2b:13:53:d5:b6:9f:18:22:37:33:77:7f:58:
         29:c7:44:a8:4f:ff:94:04:74:8b:8d:68:d2:bd:b5:ae:3a:a4:
         57:04:e0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:22:32 2025 by rpki-client