Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fcee4cd6-fcd4-3697-b87b-ae18f0995e50.roa
File:                     fcee4cd6-fcd4-3697-b87b-ae18f0995e50.roa (raw, json)
Hash identifier:          sMUWoxTb5baSWVYcPWyDxxOf/br2oEXaHQPS3pi4FdE=
Subject key identifier:   FF:60:D7:9A:58:F3:5D:3D:56:43:85:4E:E4:F2:B0:19:9D:78:E0:88
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858499AF4912E88C3534BB441C200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fcee4cd6-fcd4-3697-b87b-ae18f0995e50.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     20940
IP address blocks:        23.210.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:91:2e:88:c3:53:4b:b4:41:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=7a11c306-73ad-408d-9613-ee40a473f762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:23:e8:1d:cb:e0:e0:8c:7e:8c:7e:00:24:f1:
                    07:16:3e:13:de:9d:40:ca:8b:fa:75:81:e4:11:2d:
                    bd:4f:65:c1:97:7e:7b:b1:03:f7:f5:21:1b:91:5e:
                    26:d0:ef:b4:29:74:b7:09:26:84:94:24:d3:82:8a:
                    15:12:95:98:ae:28:35:40:84:e8:da:12:75:d6:43:
                    d3:71:a5:71:5c:5c:33:38:e1:3b:c7:7d:f7:0e:0b:
                    ce:f8:5c:96:9c:93:34:db:73:36:fd:68:be:c5:42:
                    71:8a:d2:59:06:f8:0d:67:c8:4a:ce:16:87:1a:2d:
                    40:57:47:d2:53:2b:9d:f1:e1:6a:c6:d9:03:ab:68:
                    78:79:d9:7a:0a:8f:0e:8b:9e:99:8b:a2:b4:27:e8:
                    6d:07:fe:d2:74:f6:9d:f0:52:98:ff:c0:46:b2:20:
                    18:f2:a0:c3:66:94:6c:ea:48:9f:63:f5:87:8e:15:
                    c5:79:4a:b6:8b:73:0d:a6:a2:45:ea:a3:64:89:8c:
                    24:e5:2c:9a:0e:9e:47:be:1d:a3:ec:1f:f4:35:87:
                    cf:8e:1c:97:0e:18:a0:d7:87:bf:82:47:4c:bb:9e:
                    bf:08:e2:e1:f4:57:41:71:0a:68:ed:c9:ab:7f:15:
                    8c:ea:70:e8:65:46:ae:63:10:bd:a5:d4:cc:0e:84:
                    a1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:60:D7:9A:58:F3:5D:3D:56:43:85:4E:E4:F2:B0:19:9D:78:E0:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fcee4cd6-fcd4-3697-b87b-ae18f0995e50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.210.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:4d:72:55:c0:46:49:09:a4:7c:51:59:be:41:02:fb:30:21:
         17:be:85:c7:ff:fa:55:dc:8e:06:66:4d:b1:2a:4e:2e:b2:12:
         e0:8b:7a:b9:6b:16:c5:87:3e:81:de:f5:1e:ee:61:fe:05:c9:
         8b:62:d0:69:fc:03:cd:8c:6f:6c:af:de:b4:8b:d4:53:5f:24:
         b1:76:17:4e:d6:eb:ca:b3:51:1c:4d:bb:d7:88:95:ba:60:35:
         9c:d9:a3:eb:ed:3c:83:27:87:38:86:38:fd:97:33:6c:7c:ab:
         9e:3c:4e:0a:ac:f2:a0:07:46:20:e7:19:6d:fc:72:b2:a0:34:
         c8:88:3f:fb:8f:e8:bf:d3:b2:3e:c1:5b:d1:b7:b3:03:e5:c7:
         d8:17:54:dc:82:32:a0:ca:97:73:7f:16:4d:e4:48:ab:65:dd:
         f9:2d:53:ad:2e:73:08:34:27:a2:bc:1b:95:af:80:96:8d:77:
         d7:2b:0e:d9:ff:7f:04:c2:f5:cd:5b:c1:59:78:57:c1:b6:65:
         f1:99:f4:69:b4:3a:e7:73:b5:ad:19:66:90:9b:1f:36:84:e7:
         67:cf:3c:c2:b1:4d:f5:d9:02:74:77:eb:15:83:37:d3:98:30:
         f9:11:fd:76:7f:d0:b7:95:a5:a4:20:6d:9e:af:d3:fb:a0:06:
         02:8f:aa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:00:49 2025 by rpki-client