Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f47c4505-8c43-385b-943b-712b48bd1cc9.roa
File:                     f47c4505-8c43-385b-943b-712b48bd1cc9.roa (raw, json)
Hash identifier:          j6qSoz1hI3BcE7hXrmrAA3Yy3XzuPQcsq52z8/egShM=
Subject key identifier:   FE:DB:8B:55:86:28:16:BA:20:2C:B0:26:1F:19:61:9C:F5:2B:E3:82
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F43285849F7150D929C33FA5F4D58C8CA
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f47c4505-8c43-385b-943b-712b48bd1cc9.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     6643
IP address blocks:        23.239.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:0d:92:9c:33:fa:5f:4d:58:c8:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=c80a64e5-b8c5-4689-af40-f95e25a66784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:50:f6:a3:0d:ab:3d:d8:c8:8d:dc:b1:0e:af:
                    7e:ee:c7:cf:08:d3:cd:75:58:f0:49:d8:2d:a8:cb:
                    8b:b6:e7:dc:b3:6c:23:a9:f6:07:10:74:73:3a:fa:
                    6b:7b:bd:5d:1b:f4:49:b8:2f:c8:4c:3a:05:1e:ea:
                    f2:69:37:2a:61:dd:6d:01:c7:72:01:dc:ae:e7:07:
                    3f:69:5a:4c:fd:1b:14:74:dd:ac:95:60:54:b3:79:
                    5f:75:e1:3a:84:d8:82:52:1c:24:a1:62:a3:47:6c:
                    2e:a8:93:ec:ac:72:d8:fc:83:3b:90:a2:79:a7:6c:
                    9c:0d:47:a5:7b:4d:40:f5:60:5b:92:66:56:75:17:
                    c3:c1:1d:ce:3b:d9:a4:43:4f:5d:fb:01:2a:6e:38:
                    de:76:de:c4:6d:fb:68:01:50:45:85:4a:cf:61:93:
                    b9:24:2e:95:01:e6:a8:4d:21:f9:65:ad:fd:32:32:
                    78:6d:32:55:d5:55:79:6f:67:4f:1e:d9:c5:f0:cb:
                    47:11:bc:d8:1f:66:2e:d1:d1:72:0a:a8:71:a4:ac:
                    df:8b:52:ff:b8:aa:54:db:e0:53:1c:f2:9a:4a:02:
                    d5:80:af:e0:b2:93:b4:d8:3e:34:87:c3:45:51:85:
                    b9:6d:e5:ca:2d:e2:22:41:b9:e7:1b:6a:40:7e:72:
                    b5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DB:8B:55:86:28:16:BA:20:2C:B0:26:1F:19:61:9C:F5:2B:E3:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f47c4505-8c43-385b-943b-712b48bd1cc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.239.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:12:eb:af:f0:ac:f1:26:34:ae:3b:d5:b6:48:b9:fe:46:31:
         55:b5:01:52:b9:83:81:a3:e4:ff:75:35:4e:ea:b9:c2:db:7e:
         b1:58:3a:a1:d0:f4:c9:8b:30:90:8e:5c:f4:39:71:e7:69:86:
         9c:e8:8c:b5:a2:30:f2:92:11:97:15:9f:ba:4c:95:30:3d:d3:
         c3:a7:ce:d8:b7:5d:3a:40:04:be:b8:e4:fb:06:35:37:da:3e:
         bd:03:ff:50:2a:cd:7b:0a:14:9a:50:4f:53:15:10:6b:80:64:
         56:b9:b6:37:15:76:a1:80:3c:f1:1a:05:91:81:ed:a7:f4:86:
         5d:dd:6c:44:8b:2e:8e:dc:bb:31:5d:22:c1:61:c5:b7:e3:9e:
         d7:78:c3:49:17:44:7c:72:cc:4d:f4:2c:6c:02:88:7b:83:e9:
         6d:8b:63:8d:dd:0d:6c:25:6c:bb:35:d4:3c:77:33:8b:49:4f:
         1d:3a:72:34:e3:16:39:df:7b:07:39:b8:c0:ba:64:f7:b8:2f:
         f1:cf:6e:63:5d:4a:e6:30:83:9f:b5:fb:94:a6:56:9c:1d:c9:
         aa:40:07:18:13:9b:f1:55:16:6c:89:d8:0b:d3:26:f0:bc:1a:
         cf:c4:ab:42:cf:cc:5d:18:34:b3:b0:c8:da:82:48:ac:86:86:
         1e:ed:18:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:53:06 2025 by rpki-client