Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/129bf1fe-71bd-3cae-abbf-264e9447e959.roa
File:                     129bf1fe-71bd-3cae-abbf-264e9447e959.roa (raw, json)
Hash identifier:          a3HyPj5NUVfu6xIxs2liNDyumoPzLFRkeC0CH7iSOl8=
Subject key identifier:   02:71:4A:91:FD:2E:17:7B:58:98:0D:76:78:8F:9B:03:1F:36:6F:B3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A54DB209293EA83072C0E1368
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/129bf1fe-71bd-3cae-abbf-264e9447e959.roa
Signing time:             Fri 27 Jun 2025 15:10:11 +0000
ROA not before:           Fri 27 Jun 2025 15:10:11 +0000
ROA not after:            Thu 25 Sep 2025 15:10:11 +0000
asID:                     32043
IP address blocks:        23.230.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:db:20:92:93:ea:83:07:2c:0e:13:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 27 15:10:11 2025 GMT
            Not After : Sep 25 15:10:11 2025 GMT
        Subject: CN=14eaa950-c181-4a33-9c9e-ed61810d2039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8e:ad:c4:14:4b:3c:c5:d5:9f:91:2c:de:09:
                    6e:eb:e9:63:ad:6f:0d:6c:c9:2c:d8:48:fc:36:64:
                    7c:f9:8e:f7:bd:e9:58:ad:c0:4e:5e:18:8a:56:b1:
                    7d:18:63:c5:5e:6d:f7:c8:de:57:10:82:1a:8f:79:
                    4e:db:0d:cc:b8:68:73:74:71:fc:7c:08:4e:35:5d:
                    b2:b4:6b:51:d2:06:bb:50:28:b3:be:5e:62:74:91:
                    18:b1:89:a9:b6:83:71:f6:ef:79:b0:dd:e1:76:dc:
                    d2:af:39:db:97:d2:4c:45:1c:1a:f4:5d:1f:1e:d4:
                    98:23:5e:5d:cc:31:b5:4b:e1:d1:03:1f:db:dc:f0:
                    1d:0d:92:78:6c:09:6f:cf:a0:b4:32:9f:ab:32:73:
                    b9:7a:85:de:fd:31:92:c4:00:36:ce:8c:70:1d:f7:
                    c3:ea:1c:5a:10:3d:9b:e3:8c:e9:90:8f:cd:6c:f0:
                    58:2c:36:2a:da:ea:5e:de:95:17:00:cb:f4:0e:76:
                    fa:d9:e7:3c:a2:25:bf:c7:ca:5f:73:3c:e0:03:7d:
                    9b:d9:d5:cb:8c:31:fa:98:e6:4f:3d:63:98:1f:c5:
                    34:fb:d7:e4:e7:d0:9f:38:a9:43:ba:bd:04:03:7e:
                    f3:cf:ae:40:67:b7:71:a5:69:da:61:86:77:e8:e3:
                    ab:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:71:4A:91:FD:2E:17:7B:58:98:0D:76:78:8F:9B:03:1F:36:6F:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/129bf1fe-71bd-3cae-abbf-264e9447e959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:cd:74:00:98:f9:8a:6a:e6:ea:51:fd:a3:91:3b:45:13:10:
         2e:05:65:da:b9:59:4c:fb:59:ed:91:38:13:e5:26:f8:6c:0b:
         92:67:30:3e:2f:76:c7:41:8b:e6:6a:13:1f:82:91:78:ae:13:
         75:f2:8a:66:f0:71:9d:32:1a:4f:62:35:cd:ce:97:b7:b7:dd:
         ec:1e:4c:72:4b:d8:3a:9f:26:05:a4:0c:92:6a:d3:89:92:c2:
         af:6d:a0:af:68:57:8c:85:45:10:bc:b3:04:1c:d1:02:7c:7d:
         6e:95:41:c2:4f:33:24:75:e7:64:7a:20:54:b5:15:35:47:98:
         9a:41:b1:88:7e:43:06:36:16:4a:95:50:dc:ed:f3:76:46:ee:
         62:75:d5:8a:0e:64:84:45:54:fc:47:0e:b3:e9:9b:d3:57:bc:
         52:e1:f1:29:96:18:de:39:32:db:6e:b0:e2:fa:dd:38:5b:91:
         a9:54:4d:b4:19:d4:e1:90:1c:8d:b1:f1:cb:3b:fc:71:24:c0:
         e0:a8:a5:70:fa:2d:dd:13:71:5b:cd:f2:0c:44:05:90:73:c3:
         0f:e4:1b:8c:b5:ea:ca:83:cf:2f:52:1f:02:d1:74:10:a7:a9:
         72:68:64:59:dc:a5:24:f6:79:a8:13:6a:16:b3:14:38:b3:87:
         cf:99:1d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 12:32:07 2025 by rpki-client