Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7ca0ce2-09da-349b-83da-4702a6373054.roa
File:                     e7ca0ce2-09da-349b-83da-4702a6373054.roa (raw, json)
Hash identifier:          04AZSXaZruU85wZTeHhzZ2/qyQtjCXHzfB7ek3C7MdI=
Subject key identifier:   F0:0D:EE:B4:6C:65:C3:6A:48:8C:7F:5E:3E:64:D8:DF:97:43:54:34
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849860474EAB6D6C888DC714440
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7ca0ce2-09da-349b-83da-4702a6373054.roa
Signing time:             Mon 14 Apr 2025 13:00:59 +0000
ROA not before:           Mon 14 Apr 2025 13:00:59 +0000
ROA not after:            Sun 13 Jul 2025 13:00:59 +0000
asID:                     20940
IP address blocks:        23.199.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:86:04:74:ea:b6:d6:c8:88:dc:71:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 14 13:00:59 2025 GMT
            Not After : Jul 13 13:00:59 2025 GMT
        Subject: CN=2f8735ff-8616-4472-955e-1e65a573f8b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4a:84:5f:10:90:55:b5:43:39:df:f5:0f:35:
                    e1:74:6e:6f:7a:d1:f4:43:11:0b:a7:6e:c7:2f:a4:
                    49:9c:3b:37:ec:26:bb:94:18:f9:1a:38:df:60:84:
                    bc:34:72:73:7b:98:9d:2c:aa:82:dd:24:ce:01:72:
                    21:6e:b2:f6:fc:63:65:e5:38:47:8f:42:17:b2:25:
                    6e:7e:8f:f5:1e:ec:6e:34:db:bc:de:82:c0:b7:11:
                    0d:9c:30:9a:58:70:a1:62:06:ea:79:90:c6:31:ed:
                    8b:29:f0:36:42:2c:da:7f:26:38:61:07:c4:ac:35:
                    5d:7f:96:08:77:3c:2b:32:b0:31:0c:b6:d9:e6:48:
                    0a:5c:40:c0:b1:19:ee:20:78:b9:25:6d:8b:21:a9:
                    56:a7:55:05:b0:bc:55:8e:3a:fd:6d:e5:28:a1:be:
                    6f:85:e2:5f:de:6d:82:8e:37:18:0a:80:88:18:1e:
                    92:e0:fe:5b:4c:71:86:74:72:37:de:ab:8e:ff:a3:
                    fa:7b:14:38:2d:0b:17:a7:21:22:05:7f:20:f6:87:
                    89:f2:bb:f8:ca:e3:68:00:ef:eb:b9:e4:78:b1:d1:
                    f2:d9:5a:c6:61:8d:54:74:b1:38:07:5a:42:64:d7:
                    a0:5e:87:23:25:39:b0:a4:6e:10:ad:ea:c7:b8:de:
                    e6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:0D:EE:B4:6C:65:C3:6A:48:8C:7F:5E:3E:64:D8:DF:97:43:54:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7ca0ce2-09da-349b-83da-4702a6373054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.199.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:0b:be:47:75:1c:d3:70:02:7e:3b:8e:12:0e:f7:b2:d9:c4:
         4c:41:f2:2a:63:62:c7:9d:69:b0:3a:9d:cf:3d:c4:ba:4d:b6:
         48:7f:5a:40:00:d6:4a:6e:46:ee:17:6b:17:bd:20:6c:e0:9f:
         8f:0b:ff:ec:db:fb:6e:6e:b0:fd:d7:90:df:9f:cf:fd:6b:47:
         25:b4:a4:0a:48:bd:7a:c1:04:d7:6a:6c:0c:99:f6:14:bf:f2:
         d7:ab:dc:4a:5c:e3:26:e6:47:52:3d:83:ce:e6:3d:c3:8c:72:
         2d:3b:2d:ea:46:52:ae:b6:6f:b3:16:b8:42:91:09:ed:f1:34:
         8f:d6:a0:e8:f3:f2:99:3c:dd:74:b2:16:f0:67:dc:b4:e6:09:
         aa:4b:9b:4e:31:91:39:fb:a6:83:98:06:c8:9d:bc:dd:2c:76:
         f6:bb:0d:ec:3b:7c:8e:ec:56:af:f5:75:39:93:53:b4:f3:f7:
         90:6e:76:d2:b7:fd:e0:5d:72:af:ba:34:d9:60:ee:e5:0b:95:
         21:a9:6d:7d:b1:f9:d0:f3:87:92:37:a5:af:45:16:33:8b:5b:
         31:53:68:47:f6:26:81:43:4a:cb:7d:28:56:1b:d9:46:0f:1c:
         8d:60:d3:c6:11:d6:fb:4a:a4:0c:68:4a:da:a5:fe:59:81:56:
         4f:86:12:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:02:02 2025 by rpki-client