Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c72c3a64-bb4d-3590-93ed-6bad91c86151.roa
File:                     c72c3a64-bb4d-3590-93ed-6bad91c86151.roa (raw, json)
Hash identifier:          MhKT7465f1MsufznvF7yTprgRgs0l7/pwsSHw0NpJhI=
Subject key identifier:   0B:DE:E6:F0:3E:7D:3F:A9:10:65:25:B6:38:30:93:B9:82:D3:E3:E6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858495ABEB47D23B954A69E324100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c72c3a64-bb4d-3590-93ed-6bad91c86151.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     20940
IP address blocks:        23.214.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:b4:7d:23:b9:54:a6:9e:32:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=7aefe398-bb9c-46ce-862b-0c9bd6035cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6f:03:cb:ec:43:1a:94:5c:b0:28:ad:ba:4a:
                    5e:b7:e1:d1:08:81:d1:f7:cf:e0:21:a5:3f:5d:28:
                    ae:90:b5:26:a8:6a:09:2f:57:47:8a:20:c0:47:3e:
                    32:84:0a:07:d6:81:49:4c:e8:01:ba:8a:3c:2a:0b:
                    4d:b3:2a:89:7d:ee:3d:4f:c8:91:62:3f:31:f1:d7:
                    d9:25:bf:98:98:df:14:fb:5e:08:3f:8b:7d:25:6c:
                    17:7e:8e:97:7d:22:98:b7:6b:66:3d:c6:eb:ac:81:
                    4a:a9:94:30:47:08:07:a4:04:c5:88:f2:e0:55:a6:
                    fa:f5:7e:a4:1c:06:06:76:ad:19:3b:f2:4a:45:9e:
                    6a:fe:ad:2d:3a:8f:3c:34:28:73:cd:73:a5:8c:e3:
                    7b:51:31:aa:5d:8b:3b:3b:dd:80:a3:c1:42:d9:79:
                    44:26:77:a2:70:be:b0:5d:7d:11:58:de:24:cd:98:
                    b2:42:d6:5a:6f:e2:d4:00:d4:ba:eb:fa:81:48:89:
                    75:19:f3:2b:5a:97:3a:7e:ec:ac:7d:8a:99:b8:6b:
                    56:e0:2a:00:e9:71:d1:5c:92:77:a7:ec:7e:fb:7f:
                    f1:1a:5a:05:78:ed:db:e0:64:17:55:1c:92:3d:a9:
                    4c:79:84:16:1e:87:40:0e:38:4e:16:8e:4e:b5:bd:
                    4d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DE:E6:F0:3E:7D:3F:A9:10:65:25:B6:38:30:93:B9:82:D3:E3:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c72c3a64-bb4d-3590-93ed-6bad91c86151.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.214.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:68:47:f3:6e:81:5f:b9:f6:de:b3:c7:9e:68:4b:e8:d6:b9:
         08:a4:5f:14:9c:61:e4:c0:d1:a5:1e:4f:8b:b3:cb:c5:b6:de:
         ef:d7:84:a3:4c:64:18:8c:40:59:e2:01:88:c0:b2:b2:60:55:
         74:41:2f:2c:29:8f:29:f6:c5:f8:87:4f:7c:76:cd:9b:00:5e:
         df:29:ba:fd:f6:25:f0:74:76:70:4d:c7:a2:1d:0c:c2:f6:9d:
         9c:4f:94:87:d1:2a:84:a6:79:1c:c3:bd:93:e2:20:76:1e:b2:
         11:43:ab:38:f8:0e:97:b7:bf:87:9c:38:5d:3d:6d:e6:e9:a9:
         e6:0d:44:bc:c3:b6:05:a0:a8:ef:84:19:f0:2e:ac:eb:db:64:
         a4:83:f4:ac:21:92:6d:66:47:c2:78:c4:b9:83:1f:93:8f:b3:
         9e:f5:65:e7:8d:c8:9a:51:de:98:7d:74:43:ea:c4:b4:50:4a:
         db:6f:f6:ea:26:bb:13:ba:58:ee:ae:cb:0c:8f:26:b4:b4:c3:
         13:5a:8a:09:03:11:0b:77:08:3d:81:80:a6:90:26:63:bf:ce:
         7d:9c:30:ed:44:1a:37:02:59:dc:19:75:2b:b3:c0:a1:80:28:
         dd:a1:19:6e:05:13:9a:50:35:10:0f:be:15:de:da:74:9a:d3:
         92:bb:39:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:23:32 2025 by rpki-client