Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/06410320-9ec0-3795-867d-e6a0e17e7576.roa
File:                     06410320-9ec0-3795-867d-e6a0e17e7576.roa (raw, json)
Hash identifier:          rxSa6WHuZKd3NcJXXRseAX07ZtjL2OMNc1bqjPNDS+g=
Subject key identifier:   5F:4A:DB:FB:17:F3:1E:1A:8B:E5:6F:07:A7:34:49:C4:D7:8D:F0:5B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AF0D9FF204B4958984A9CD3E0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/06410320-9ec0-3795-867d-e6a0e17e7576.roa
Signing time:             Fri 22 Aug 2025 12:14:00 +0000
ROA not before:           Fri 22 Aug 2025 12:14:00 +0000
ROA not after:            Thu 20 Nov 2025 13:14:00 +0000
asID:                     54500
IP address blocks:        23.230.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:d9:ff:20:4b:49:58:98:4a:9c:d3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 22 12:14:00 2025 GMT
            Not After : Nov 20 13:14:00 2025 GMT
        Subject: CN=25b1f089-1671-4a21-8c70-73962117bea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a7:69:fc:26:02:c1:7b:27:28:62:73:88:2d:
                    49:0b:cf:45:c0:4f:9d:74:1f:8a:91:2e:aa:66:3a:
                    d6:a5:50:6a:89:08:21:6e:82:c8:26:8a:ef:2b:cc:
                    75:d7:86:33:78:92:42:69:19:0c:7f:08:8a:2d:d7:
                    61:4b:b9:24:16:15:67:30:20:95:24:59:b3:64:6a:
                    da:4f:d8:3e:5d:97:cc:9f:7c:98:0b:3e:d4:86:3e:
                    03:76:5f:9f:84:d0:2e:0d:6f:30:24:ac:57:7b:d7:
                    45:eb:29:05:e7:36:1d:fb:e9:5e:c2:a0:8f:c8:3f:
                    b5:13:71:ac:83:8c:bd:69:77:9f:89:c8:f7:a1:47:
                    8f:0b:02:4f:ec:86:96:5e:d9:2d:26:1a:75:5c:bc:
                    6a:b1:17:96:ce:97:e5:3d:9a:3c:bd:39:cb:1a:1a:
                    bf:63:94:97:60:44:6e:72:8f:f8:ec:e8:82:b6:03:
                    9d:3d:15:d7:e2:f7:9b:29:ca:58:62:41:12:6f:65:
                    8f:24:53:16:64:a1:d1:13:19:96:db:00:09:df:31:
                    c4:18:0f:70:bf:65:a5:31:94:bb:9a:52:1a:82:8a:
                    33:bc:0b:64:b3:f0:6e:c1:57:80:be:7f:a3:68:d0:
                    79:36:a3:7f:fb:48:b0:07:e0:b9:6b:4a:85:6e:b9:
                    fe:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4A:DB:FB:17:F3:1E:1A:8B:E5:6F:07:A7:34:49:C4:D7:8D:F0:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/06410320-9ec0-3795-867d-e6a0e17e7576.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:9c:46:73:03:59:2f:13:e4:61:57:bd:a3:7a:a3:31:21:b6:
         8f:03:31:68:27:75:38:94:ce:78:6a:68:5b:a1:f2:c9:4e:a0:
         99:f4:7f:03:e3:4c:a0:26:7b:18:cf:2a:9e:02:d8:90:95:fd:
         91:2b:fe:9b:ed:b9:87:cc:79:8c:da:1b:d7:da:ab:05:b7:51:
         07:48:52:3e:3c:ef:91:8b:cc:e8:24:43:94:b6:8e:52:06:bc:
         4e:7e:3d:3c:83:3c:3c:9a:b2:de:3f:f8:00:c9:5e:57:43:3c:
         1e:65:15:bd:3d:60:4b:78:82:d7:81:9c:74:88:b9:07:a8:4c:
         c8:f1:88:c8:40:d4:b8:50:ca:c7:a0:e4:46:11:ea:32:b0:e7:
         90:17:2a:42:f7:f6:5e:d7:c6:23:4a:1d:fe:bb:d0:f3:df:8b:
         e3:1b:71:b4:f7:6a:4a:78:df:89:8d:df:5a:41:c1:83:90:b1:
         c0:62:fc:3e:ab:8c:90:83:f2:32:1d:be:f2:0e:70:1f:8f:8f:
         9c:b5:da:71:2f:f7:69:e3:cd:3e:12:a4:95:30:74:35:a6:ec:
         7e:7b:ba:e0:1b:7c:ab:48:c9:8d:84:8a:6b:c7:8d:d4:b7:56:
         c0:81:e2:6a:fa:af:d2:d5:8b:a2:5a:04:55:7b:18:9b:66:af:
         5a:7a:f3:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw2f8gS0lYmEqc0+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDgyMjEyMTQwMFoXDTI1MTEyMDEzMTQwMFowLzEtMCsGA1UEAxMk
MjViMWYwODktMTY3MS00YTIxLThjNzAtNzM5NjIxMTdiZWEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKdp/CYCwXsnKGJziC1JC89FwE+ddB+KkS6q
ZjrWpVBqiQghboLIJorvK8x114YzeJJCaRkMfwiKLddhS7kkFhVnMCCVJFmzZGra
T9g+XZfMn3yYCz7Uhj4Ddl+fhNAuDW8wJKxXe9dF6ykF5zYd++lewqCPyD+1E3Gs
g4y9aXeficj3oUePCwJP7IaWXtktJhp1XLxqsReWzpflPZo8vTnLGhq/Y5SXYERu
co/47OiCtgOdPRXX4vebKcpYYkESb2WPJFMWZKHRExmW2wAJ3zHEGA9wv2WlMZS7
mlIagoozvAtks/BuwVeAvn+jaNB5NqN/+0iwB+C5a0qFbrn+3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF9K2/sX8x4ai+VvB6c0ScTXjfBbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMDY0MTAzMjAtOWVjMC0z
Nzk1LTg2N2QtZTZhMGUxN2U3NTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+b4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAKcRnMDWS8T5GFXvaN6ozEhto8DMWgndTiUznhqaFuh8slOoJn0fwPj
TKAmexjPKp4C2JCV/ZEr/pvtuYfMeYzaG9faqwW3UQdIUj4875GLzOgkQ5S2jlIG
vE5+PTyDPDyast4/+ADJXldDPB5lFb09YEt4gteBnHSIuQeoTMjxiMhA1LhQyseg
5EYR6jKw55AXKkL39l7XxiNKHf670PPfi+MbcbT3akp434mN31pBwYOQscBi/D6r
jJCD8jIdvvIOcB+Pj5y12nEv92njzT4SpJUwdDWm7H57uuAbfKtIyY2EimvHjdS3
VsCB4mr6r9LVi6JaBFV7GJtmr1p682g=
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:58:58 2025 by rpki-client