Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/158a231b-7ba2-3a6f-bcc0-8b6727cca866.roa
File:                     158a231b-7ba2-3a6f-bcc0-8b6727cca866.roa (raw, json)
Hash identifier:          Ls6cskAXecnZQblPCS67fjZG2qenxu1RSmD5fvonzak=
Subject key identifier:   7A:E5:52:FA:07:DC:2C:E7:6F:F5:46:4E:FB:F3:8A:5E:8A:07:2B:17
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A5CFB23AB76095301BEA5FC00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/158a231b-7ba2-3a6f-bcc0-8b6727cca866.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     18779
IP address blocks:        23.230.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:23:ab:76:09:53:01:be:a5:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=d11388ef-c707-4613-bba7-9af6671cef6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bf:8c:9d:a2:eb:f9:24:7c:bc:0c:f2:68:46:
                    45:5b:5c:54:f8:af:b0:e8:f1:2f:4f:41:88:ae:13:
                    c5:3d:a6:60:cd:71:b1:9f:e6:28:b1:a3:57:aa:8f:
                    f1:47:bb:1b:cd:44:60:b3:40:21:9e:ae:f3:bb:96:
                    0f:87:8f:03:b7:5b:88:19:9a:05:58:e3:bf:be:3d:
                    41:ca:ec:e9:f9:2f:62:70:19:aa:d7:18:b4:60:d7:
                    21:81:ce:70:5f:f6:33:ab:fd:7b:31:1e:b1:74:c4:
                    d9:d8:98:da:9b:00:0d:dd:9e:8c:ac:54:ba:ac:3a:
                    79:01:81:f0:c7:fc:95:ae:cc:17:70:42:68:b2:30:
                    ad:57:f7:45:89:5d:dd:76:f4:1d:b2:5a:65:cf:ef:
                    dd:de:a0:0e:bf:8e:e7:b9:83:b5:6c:45:59:ce:c3:
                    8c:5e:3d:b6:93:ff:22:cf:f4:33:fa:dd:de:52:c2:
                    b0:25:26:cc:85:76:3e:23:80:94:ae:86:ac:ef:51:
                    6f:a5:af:4c:de:5a:44:15:cd:a1:08:69:27:48:12:
                    fd:02:2e:77:90:18:f5:cf:0d:81:11:99:a6:8b:8a:
                    92:02:e4:f2:1d:40:33:94:75:a8:aa:73:67:22:7d:
                    a5:98:cb:e4:ba:85:4b:71:eb:4d:53:cc:9c:b8:e5:
                    59:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E5:52:FA:07:DC:2C:E7:6F:F5:46:4E:FB:F3:8A:5E:8A:07:2B:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/158a231b-7ba2-3a6f-bcc0-8b6727cca866.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:0e:2a:72:2c:31:75:72:93:0c:5e:65:06:2f:c5:ca:bb:8d:
         b1:c4:e4:75:bb:7b:de:b7:6a:37:af:3b:10:c5:37:e8:40:f0:
         a8:31:08:54:2a:bd:d9:de:08:93:a1:df:28:9f:c8:6d:68:9a:
         4e:d8:de:20:bd:a6:12:54:7f:d5:4b:f5:8f:25:e6:6f:9c:44:
         8e:63:f9:45:1f:50:c7:93:30:92:7e:79:be:8c:a5:1c:e4:fb:
         d4:7c:73:16:3a:9f:62:d5:6f:e9:71:df:8b:39:29:a0:17:3a:
         30:fa:8e:1c:f1:b7:58:58:88:4d:2d:95:44:fb:75:8d:3e:7d:
         34:26:21:a0:50:29:40:c0:77:34:4b:a1:2e:49:23:da:46:0e:
         5c:8d:f5:25:38:6e:77:a4:2e:1c:ba:e0:32:d7:5d:a1:c9:41:
         39:64:e3:eb:e5:bb:94:a4:7b:00:29:7f:72:70:49:64:04:2a:
         1a:6a:bc:8f:2c:12:d3:da:44:9f:af:13:37:26:16:37:51:1d:
         fa:82:f5:06:9e:16:c2:87:d2:6b:69:14:f6:a6:b9:8b:75:53:
         13:f5:4a:79:fd:25:c1:54:1a:ac:e4:89:1e:ec:0b:a6:b3:42:
         dd:60:c6:cc:14:0d:86:1e:3a:d0:bc:94:52:2b:9e:76:d3:40:
         1f:1c:31:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:31:09 2025 by rpki-client