Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e09609aa-f597-3196-9834-0b22369f26de.roa
File:                     e09609aa-f597-3196-9834-0b22369f26de.roa (raw, json)
Hash identifier:          cGG6T1dmYZhPPL0yzpRo06vhELgDNGu1PU+DaTGtJHs=
Subject key identifier:   35:54:5E:90:F7:8F:C9:23:4B:5C:C9:66:14:03:C5:1D:39:83:A0:6B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A1E2AC0253743D6A1E0013C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e09609aa-f597-3196-9834-0b22369f26de.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     20940
IP address blocks:        23.56.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:c0:25:37:43:d6:a1:e0:01:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=8d727b06-d91c-4dae-85a0-a7616e416f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fb:ee:c7:81:8e:ba:32:df:6e:df:b5:28:5d:
                    0c:bc:b3:c4:8f:dd:aa:e4:ed:22:d0:31:34:70:8c:
                    54:27:19:26:52:5e:fe:45:1b:c5:24:ac:46:b8:72:
                    08:32:dc:75:cc:4d:42:56:7b:5d:4b:07:f4:17:50:
                    5f:34:ea:53:6c:93:f8:88:36:0d:52:a3:9c:83:02:
                    8f:53:40:1c:66:f9:3b:df:23:a7:82:9b:b6:1c:83:
                    f2:f5:de:8e:f0:cc:f0:de:23:88:73:63:d1:5f:fa:
                    e3:17:f7:5e:67:0a:61:b7:d1:52:a9:04:f3:a1:06:
                    23:20:97:a9:56:9a:da:d0:be:ef:4b:14:c0:18:01:
                    98:cc:e9:5c:ca:a6:03:ef:8c:58:58:7b:6e:f3:62:
                    fc:cc:c7:97:7e:c6:59:f1:54:62:4f:b6:53:5a:4d:
                    64:0d:30:ad:10:c5:20:4f:40:54:77:78:5d:ee:7e:
                    2d:4f:1e:bc:63:5b:39:f6:08:92:3c:e4:ac:fe:ba:
                    e3:fb:b3:b4:73:49:99:94:c0:b4:f6:b5:2b:93:db:
                    b5:c1:a3:4a:5c:c4:a3:8b:9c:3f:e8:0c:63:ae:35:
                    1b:57:65:74:94:05:ea:23:17:ce:41:c4:06:99:80:
                    f6:2b:4b:e4:19:b3:c5:45:33:d0:a6:0a:42:fe:65:
                    14:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:54:5E:90:F7:8F:C9:23:4B:5C:C9:66:14:03:C5:1D:39:83:A0:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e09609aa-f597-3196-9834-0b22369f26de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.56.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:59:d2:2b:be:6f:80:cd:57:c4:cd:af:c7:00:a1:62:61:f6:
         8d:71:2c:ae:5c:89:dd:84:e6:76:59:c3:a3:cb:82:52:d5:a6:
         cd:58:6a:db:5e:31:de:8a:47:b4:9e:88:f9:98:07:3f:53:97:
         44:9c:ca:61:ec:00:2d:b3:8b:ab:83:77:16:1c:ca:3f:32:e4:
         91:eb:f0:43:db:ec:a5:12:c8:4f:87:4e:cb:20:1f:2c:ae:39:
         0a:89:df:6e:0f:e6:e9:77:4c:7c:7e:55:4f:93:85:ff:16:fd:
         b7:9b:65:1f:ab:30:61:67:5b:4b:d6:ba:ba:12:2d:d9:6e:6a:
         bc:63:5d:b3:c3:d7:e0:27:57:12:a3:fb:7b:7e:d9:65:c5:9d:
         d4:7a:e5:8d:9e:78:e4:7a:0f:38:c5:5c:95:ad:35:71:89:75:
         cd:0f:21:a9:c0:ed:2a:2a:84:71:25:6b:db:0b:74:8f:f3:2a:
         bc:c5:33:0f:4d:a9:3b:eb:d9:98:a9:9c:5a:7c:12:90:fe:54:
         c9:ce:2f:bb:68:1d:7b:7c:d6:20:a2:87:60:da:ca:a0:c1:fc:
         1a:bb:1e:1d:6d:bd:9d:14:3a:f2:0a:fc:15:1e:b6:c0:35:e8:
         9f:60:ea:0c:ad:53:2d:7a:90:21:49:56:c8:e0:14:20:fd:1a:
         8f:2a:05:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:54:56 2025 by rpki-client