Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e6399ee3-0e5c-383a-8029-1ac27cc21c9e.roa
File:                     e6399ee3-0e5c-383a-8029-1ac27cc21c9e.roa (raw, json)
Hash identifier:          s3OgARf8CoQ2ZnLXXXXacdnytVOQ2VTYqmO41CRaJ5w=
Subject key identifier:   61:0A:38:61:AB:44:14:6B:09:C2:56:BD:5D:BE:74:9C:61:64:D0:60
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A2D859239E8B6079CF5C09280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e6399ee3-0e5c-383a-8029-1ac27cc21c9e.roa
Signing time:             Fri 13 Jun 2025 13:01:04 +0000
ROA not before:           Fri 13 Jun 2025 13:01:04 +0000
ROA not after:            Thu 11 Sep 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        23.33.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2d:85:92:39:e8:b6:07:9c:f5:c0:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 13 13:01:04 2025 GMT
            Not After : Sep 11 13:01:04 2025 GMT
        Subject: CN=f2b999c4-cdc3-4ac9-994a-a23c39f999ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:49:f8:97:e9:a7:36:eb:5f:ab:4e:d3:0f:91:
                    a6:d5:07:7b:44:0c:51:00:a4:e3:11:5d:34:ea:77:
                    ac:5e:4a:fa:5c:96:78:91:e1:04:2f:b9:c2:80:da:
                    1e:c6:0c:03:87:45:e9:bb:8e:86:56:a8:e9:7b:e0:
                    c1:4f:03:5f:88:d0:26:2c:9f:88:2d:fb:31:65:51:
                    ef:bf:2f:fb:a3:8c:ed:b0:d9:a4:3a:c3:b1:f5:78:
                    79:b0:f0:57:75:37:21:38:6d:80:22:5d:b2:2d:49:
                    61:70:ec:1f:c1:d0:21:04:b3:2c:09:84:ad:dc:a4:
                    9e:a5:ac:38:37:1c:11:11:15:fe:a1:f2:83:b7:f1:
                    3f:b0:f4:96:a0:61:22:80:97:d3:40:60:f1:d7:75:
                    d6:ff:32:cc:10:ce:8a:57:36:16:85:f7:a4:8d:89:
                    5e:95:00:06:91:22:93:17:c7:2a:20:b6:38:31:67:
                    da:27:4e:09:61:6c:cc:88:8b:5a:f2:b1:c8:0f:1a:
                    3b:36:e3:7e:13:f9:f7:36:be:5b:78:44:bd:3b:67:
                    df:16:b3:1b:a1:b4:0c:e9:e8:c6:94:3a:24:4b:19:
                    0e:83:e0:ce:db:c2:33:ab:8b:f5:b0:8e:85:b1:5e:
                    ea:2c:83:08:2f:7a:83:8e:b6:00:0b:f3:d3:9c:47:
                    c3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0A:38:61:AB:44:14:6B:09:C2:56:BD:5D:BE:74:9C:61:64:D0:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e6399ee3-0e5c-383a-8029-1ac27cc21c9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.33.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:a9:93:0d:d4:30:8b:23:c8:ad:50:bf:2c:06:91:42:99:7e:
         ff:86:fd:f2:60:8b:8e:f4:3f:16:28:2d:83:11:52:1e:7e:8c:
         8f:54:60:2e:a7:8b:7f:71:88:6a:d3:21:a9:1c:0a:f8:dc:07:
         57:42:eb:a8:c4:77:d3:74:f2:ed:07:c0:8f:c9:10:ad:68:d8:
         71:88:1d:52:ac:90:6f:25:15:d1:31:b0:fb:14:28:e6:a0:d8:
         9b:92:01:48:40:e1:c5:eb:b9:95:4a:4e:83:37:30:93:5e:28:
         81:56:5b:27:95:f8:8b:9a:3f:6b:88:01:25:89:e6:7e:5f:d3:
         49:30:20:5b:b6:96:93:d8:87:32:ac:fc:5c:7e:64:36:f3:f0:
         cb:27:e7:da:ca:1d:86:2f:a2:1f:0c:b1:48:71:b7:52:e0:be:
         d7:51:76:19:30:66:8a:70:ae:47:f8:c5:b5:5f:d7:47:c1:da:
         6c:68:2c:2d:2c:91:86:bf:c4:ac:95:49:4b:59:45:1b:d1:5d:
         d7:59:fc:14:c6:d6:fc:66:4e:f8:c1:bd:cb:fa:ee:69:c6:01:
         d4:7a:40:06:a2:89:88:2e:7a:c4:bb:03:4a:9c:d0:af:b0:f9:
         49:95:46:b8:db:fd:b3:83:f7:fd:24:01:c0:62:ad:22:fc:9d:
         4a:fb:96:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:51:30 2025 by rpki-client