Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fdb0f5f2-bfcf-3262-ac52-00e1834872af.roa
File:                     fdb0f5f2-bfcf-3262-ac52-00e1834872af.roa (raw, json)
Hash identifier:          s/BLHAuIsJxMygbx2jXSWePuySTpPDKEzIG4T0QIlHQ=
Subject key identifier:   4A:DE:68:57:31:0D:E6:58:58:17:68:CF:F8:94:EC:50:B9:F4:8D:C2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858496CE460606AC99BDF0F1BEF28
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fdb0f5f2-bfcf-3262-ac52-00e1834872af.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        23.54.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:60:60:6a:c9:9b:df:0f:1b:ef:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=2e2b5425-6a3e-4fa5-af87-4a0667ba7834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9a:89:ba:59:59:8a:21:c5:e8:a7:32:6d:59:
                    54:4b:5b:5c:cc:95:9f:aa:cf:b1:b1:d1:43:e0:6f:
                    f3:1e:2a:1f:7f:54:97:15:b7:a8:c0:b9:30:3c:0f:
                    08:f0:af:9f:60:2c:d8:d8:81:90:6b:b9:ae:70:65:
                    27:22:d0:e5:f1:0a:76:7e:d7:dc:27:f7:50:96:c1:
                    22:e8:66:7b:e9:66:ee:5a:f0:d1:e7:e3:be:74:8f:
                    06:d5:b6:df:8a:f6:f8:c5:af:03:38:b0:4f:0d:cd:
                    0a:6a:ad:de:0e:87:6e:83:7f:29:39:65:61:9b:ea:
                    5d:b7:a6:b7:8f:e6:63:1b:f8:7f:7f:42:50:c7:fd:
                    b4:15:4b:89:5c:39:2c:c2:26:7f:e4:50:dc:66:c0:
                    7b:48:35:68:3f:20:94:4d:30:be:a1:e2:d6:4b:7e:
                    ed:3f:39:83:0c:95:8a:41:d8:30:e6:53:95:90:45:
                    a0:ca:70:4b:cf:b1:70:78:7e:89:25:72:1a:91:f9:
                    a8:75:5e:28:fc:b6:68:42:a1:16:d7:4d:4e:4d:b3:
                    fc:97:fa:11:36:cf:12:69:bc:74:15:15:5d:cb:15:
                    fd:d0:1e:c4:9b:8a:c1:a9:6e:41:8d:d6:b9:8d:c6:
                    21:a7:a4:df:03:e4:12:51:2f:e5:8d:e3:5b:f1:da:
                    02:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DE:68:57:31:0D:E6:58:58:17:68:CF:F8:94:EC:50:B9:F4:8D:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fdb0f5f2-bfcf-3262-ac52-00e1834872af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.54.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:7a:8e:be:cc:87:91:31:cb:f3:0c:83:6d:40:1f:5f:95:61:
         fc:fb:94:32:31:82:97:4a:13:20:69:4c:d9:6b:b6:53:b7:ef:
         b2:11:b1:d8:5a:e1:7b:b6:4d:6b:7e:fc:a2:6c:70:4a:d2:8e:
         3a:d6:2d:71:90:e4:88:1a:02:dd:67:6e:dc:a2:17:7b:48:8c:
         60:0c:ee:58:70:be:86:94:09:de:8a:74:f3:3a:c4:22:3a:78:
         da:fa:c5:b9:1e:0b:d4:57:dc:cb:9e:c7:96:51:1e:3e:39:0d:
         81:f6:68:2e:ff:89:42:4d:6d:e5:e9:02:83:15:69:9a:ee:8f:
         94:88:30:95:44:dc:54:fb:71:ad:66:46:3c:47:49:6d:00:b7:
         bd:a9:4b:92:51:43:d0:67:dc:ec:23:c3:43:ca:7b:1b:e7:2c:
         9f:09:1d:c9:96:4b:c7:e5:8d:cf:04:7d:10:b9:28:de:49:d5:
         59:52:23:d5:2e:58:64:aa:51:f5:86:ec:cb:b0:aa:69:d3:0e:
         eb:31:cb:86:1c:80:cf:4b:02:0f:18:05:8f:03:ae:b5:cc:a5:
         b4:fa:53:a3:d0:58:06:bf:82:cb:98:ec:54:34:3f:2f:55:dd:
         b9:75:84:35:48:ed:23:f7:5c:cb:68:f3:70:0b:fb:a2:67:aa:
         e3:c3:3a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:09:28 2025 by rpki-client