Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18b6f0d0-95ce-3b8e-a1db-275de9770075.roa
File:                     18b6f0d0-95ce-3b8e-a1db-275de9770075.roa (raw, json)
Hash identifier:          q0BFciuYXVi6NK4M2fDpsWfdnmKiacD2ApX6jUjfE+g=
Subject key identifier:   EA:D4:78:A3:B4:13:7C:46:A2:41:43:1C:39:C2:26:AC:79:64:9F:6F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B64CE7053FDA854B175287A80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18b6f0d0-95ce-3b8e-a1db-275de9770075.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     44559
IP address blocks:        23.230.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:70:53:fd:a8:54:b1:75:28:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=0a244c79-2d17-46bc-be00-15f4c6f1d358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:28:b5:cb:7e:e9:f1:e3:0e:92:49:4a:21:0b:
                    64:11:de:e3:ec:74:af:98:6d:a0:4b:d8:8f:5c:02:
                    20:fc:95:87:ad:29:41:2c:10:87:a5:47:bb:05:57:
                    28:eb:a2:ee:dd:71:44:10:7f:a1:5b:ac:2b:18:1c:
                    9a:ba:ce:ae:87:ac:89:24:bb:09:32:57:b2:7f:38:
                    74:7f:8b:59:61:fb:1b:0e:8b:11:15:3f:66:ce:a3:
                    69:42:24:ef:53:11:5f:8e:ce:6e:7b:69:64:fc:4f:
                    82:28:53:61:55:2c:c3:1e:38:4f:36:43:09:3f:3c:
                    07:f5:33:ac:fc:68:0b:8f:9c:62:67:7d:3f:5b:e2:
                    16:de:df:38:91:e1:21:76:d7:d3:c9:28:6d:bc:de:
                    3c:93:34:75:10:7f:1c:45:d9:98:5e:fd:04:8c:8c:
                    c2:ff:db:5e:13:75:77:47:f6:c9:cc:2b:ca:37:03:
                    b3:17:89:8d:7d:d4:0e:e8:22:2f:22:7c:d1:4c:13:
                    4a:7f:aa:38:cf:0d:c7:27:69:c7:14:5d:c5:ac:e5:
                    9c:3e:65:c5:3f:44:a2:c2:6f:d6:c6:80:c0:d4:78:
                    14:fc:fd:53:34:00:8d:39:eb:81:a2:20:48:9f:02:
                    39:5b:6e:ef:cc:21:fb:65:04:f1:3d:53:dd:17:60:
                    b0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D4:78:A3:B4:13:7C:46:A2:41:43:1C:39:C2:26:AC:79:64:9F:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18b6f0d0-95ce-3b8e-a1db-275de9770075.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:d7:72:38:ce:08:03:8d:e8:d1:c1:d9:94:49:0a:eb:93:5d:
         8c:51:6d:df:f7:dc:81:06:9c:61:07:17:41:21:22:53:bc:c9:
         1c:7f:3d:c3:9f:77:11:1b:1c:7d:79:00:a9:2f:54:04:99:a1:
         78:d2:0a:8b:ac:8c:e9:d0:34:fa:5e:c8:f3:3a:ab:87:8c:42:
         69:b2:49:67:e0:c1:75:e8:3a:67:8f:40:63:3b:d4:03:fd:ce:
         b3:d4:95:4f:25:3e:33:aa:71:ca:18:22:38:6a:9e:90:e1:fb:
         a7:db:c4:70:9b:c0:e7:31:23:be:fb:bc:d9:55:74:36:02:1f:
         3e:95:63:2f:30:e8:dc:3e:ff:57:55:ab:30:ce:d8:27:ef:24:
         74:04:61:61:3b:da:50:f3:53:92:6c:97:81:82:e8:d3:04:2b:
         35:a2:d0:90:e8:8a:0a:4d:f6:9b:0d:af:b5:a6:87:cb:03:0e:
         d6:1e:1f:de:24:3e:19:68:d0:d9:5a:0b:f1:53:6d:13:44:c3:
         0a:97:a3:16:69:c5:20:e7:bf:7c:d1:7f:55:df:75:7d:21:c9:
         65:a4:1e:67:e3:b4:32:05:cf:b9:e1:d8:14:90:56:aa:33:0f:
         a2:27:d9:af:1d:f7:e5:9f:4b:63:78:3e:27:91:f8:a6:f7:cd:
         50:22:d4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:30:50 2025 by rpki-client