Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd6b1bfa-5ac7-3045-8e1d-16de423af862.roa
File:                     dd6b1bfa-5ac7-3045-8e1d-16de423af862.roa (raw, json)
Hash identifier:          M9vg7HO9O5hMnnOZsws3C20TAAGEGJuTuKYhheiNXnw=
Subject key identifier:   1B:88:37:74:B9:B9:0F:1B:BE:C3:0B:12:57:0E:DA:74:C0:FA:F9:94
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849912F257FE2C2C0AD13D07C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd6b1bfa-5ac7-3045-8e1d-16de423af862.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     16625
IP address blocks:        23.55.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:25:7f:e2:c2:c0:ad:13:d0:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=a2990dc5-858b-4c7f-912d-53a673a78c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bb:8f:1b:d2:5c:fc:75:c1:34:cd:29:8f:bd:
                    80:88:7d:87:8e:33:cb:d5:92:83:4d:11:b9:f4:06:
                    d0:36:e0:e2:d7:4b:06:e2:8f:f9:17:96:fc:7d:1f:
                    ff:cf:d6:76:54:ba:f6:27:04:a2:0f:15:71:c0:56:
                    30:36:bd:40:0d:c1:d3:ad:f5:5b:e1:da:8b:5d:67:
                    76:74:d1:85:fe:90:1a:2d:8b:e9:2d:43:52:74:79:
                    04:a2:40:88:85:b2:bc:16:57:48:57:6c:32:de:76:
                    aa:a4:09:24:9b:77:bc:91:28:6e:aa:60:a2:77:54:
                    98:f7:06:98:f5:68:7e:24:01:ba:87:56:86:f8:18:
                    0b:c3:43:c6:c8:bf:18:fc:56:0f:83:ec:30:e4:87:
                    7d:6c:2d:98:10:4c:94:6c:0d:a9:03:01:90:4d:b1:
                    9f:c8:18:37:1b:b8:61:26:a1:5d:2e:77:e6:90:11:
                    f7:fe:cf:ba:3a:0a:e7:88:ee:61:a9:62:a9:df:18:
                    25:a6:0b:90:e7:55:5c:ac:7d:d1:1b:76:8e:b2:68:
                    92:1f:02:95:d0:79:f4:eb:f1:fa:7f:95:ef:b6:3c:
                    18:c5:57:58:58:8a:ac:7e:47:61:27:ac:d4:5f:31:
                    2a:8f:c5:d7:ae:37:c3:12:20:29:1c:30:05:1a:f8:
                    be:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:88:37:74:B9:B9:0F:1B:BE:C3:0B:12:57:0E:DA:74:C0:FA:F9:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd6b1bfa-5ac7-3045-8e1d-16de423af862.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.55.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:ef:43:45:fb:d1:63:c1:27:dd:04:df:c1:0f:58:e1:65:07:
         48:09:2f:65:ff:2a:68:76:c5:7b:d7:fa:c7:d6:c5:bf:eb:ed:
         95:f5:33:89:a9:01:38:1c:01:d9:c4:33:7e:a4:8b:35:95:e8:
         98:09:e9:c5:e7:b3:e2:1b:b0:99:bd:bf:b6:b2:8d:41:ff:2d:
         d5:62:f9:12:a5:2d:57:37:6a:38:ae:c7:20:60:1b:e0:e2:db:
         77:82:77:20:52:c5:27:06:72:4c:ed:60:5c:08:2f:88:02:a1:
         cb:10:05:ad:32:6e:45:45:83:b0:a2:18:40:bb:17:b1:f4:1b:
         97:6a:6f:b8:5e:d6:de:7f:bf:ac:da:9c:93:0c:06:0e:2c:b8:
         47:92:cf:d4:7f:10:7a:32:44:f2:10:d1:8f:79:61:3f:61:e3:
         f8:f0:44:16:70:72:11:44:a8:95:11:1a:3f:0f:28:4a:18:a6:
         0b:85:8d:04:4b:ce:9f:af:30:ed:1a:31:05:08:5b:1e:43:38:
         d8:af:4e:0c:43:61:5d:9b:b2:ee:7c:9f:24:6c:cc:e4:b3:ac:
         12:83:65:10:04:2c:a8:32:97:81:b8:c4:0f:c9:1d:0b:d7:9e:
         8a:7b:e1:74:05:aa:80:87:33:31:49:1d:a5:67:06:8b:66:36:
         d5:eb:38:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:11:10 2025 by rpki-client