Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d2c12c2-6f67-3ced-9a98-846f6558734a.roa
File:                     2d2c12c2-6f67-3ced-9a98-846f6558734a.roa (raw, json)
Hash identifier:          Z4JJbEHEd/kP+otwqcxAQrdiwOjK1TCSF2HjveR3sVY=
Subject key identifier:   1B:7F:15:C4:A8:13:1D:31:DD:60:C5:9C:7C:34:D9:14:76:36:B6:F1
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B57A370988E304DE692C1F00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d2c12c2-6f67-3ced-9a98-846f6558734a.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     400536
IP address blocks:        23.230.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:37:09:88:e3:04:de:69:2c:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=7c9c929a-c0f3-406e-bb43-d866225aadb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3f:b8:c9:70:6d:8d:49:99:13:81:89:a0:5c:
                    c7:4d:5d:37:f3:ee:02:65:55:48:d9:35:ea:78:9f:
                    cd:89:d2:58:e4:7d:aa:36:ea:6c:1f:4b:bd:15:bd:
                    60:01:7e:29:51:13:eb:87:20:4a:ca:bc:5b:42:90:
                    6b:af:8c:f6:f0:7f:8f:fd:04:1b:de:0b:fc:ad:50:
                    aa:af:2e:8e:2f:f8:31:21:fe:98:3a:45:ff:9e:f2:
                    d4:90:64:ab:a8:59:2d:c6:07:e1:8c:1c:2f:ba:9a:
                    89:14:51:37:5b:3d:2b:76:df:a5:b1:07:0f:d2:57:
                    76:53:0a:e6:25:59:8e:ed:f7:01:e9:57:48:cf:5b:
                    57:1f:61:da:7a:e2:cb:ac:a2:a0:91:2c:85:20:66:
                    08:92:95:32:d3:27:ff:b2:63:c7:b1:94:d2:37:7d:
                    39:a1:ea:9c:70:ea:10:2f:96:39:49:cf:e4:57:72:
                    63:cc:81:5d:d5:5b:d1:02:b0:85:d8:8d:0f:82:95:
                    90:4d:1b:b9:c6:40:81:5f:4a:0b:74:e3:a9:32:2c:
                    f8:dc:19:1c:d7:95:aa:87:22:e9:e2:51:ca:c3:0d:
                    b9:99:ac:8a:71:79:6e:bc:b2:9c:cf:bb:33:c2:65:
                    ef:31:33:1f:59:59:40:cd:2a:37:54:b6:a6:1f:d9:
                    07:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:7F:15:C4:A8:13:1D:31:DD:60:C5:9C:7C:34:D9:14:76:36:B6:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d2c12c2-6f67-3ced-9a98-846f6558734a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:52:82:35:ea:65:29:6e:61:34:66:83:b9:4f:47:71:24:14:
         a1:dc:b7:bb:59:aa:f5:36:26:bc:9f:78:90:92:6d:dc:27:14:
         25:04:0e:6c:05:cb:32:dc:e5:1e:e5:5b:54:cb:75:f2:06:ec:
         db:e6:08:b2:ec:fb:12:dd:4d:5a:70:d4:9b:a5:76:69:2d:cf:
         f4:c1:1e:49:26:90:f8:f0:50:eb:5f:e1:76:52:dd:d9:77:29:
         92:9e:1d:a8:1a:00:78:d7:37:aa:3d:8c:95:16:72:10:ce:f2:
         59:65:f6:f0:e0:1f:f3:df:a6:77:76:1a:36:65:02:aa:60:47:
         dc:61:54:3d:a7:f6:da:07:68:19:07:2d:04:a6:4b:b5:db:a0:
         7b:ac:2b:8b:1f:ef:0d:1d:94:d8:43:16:e1:29:f1:71:40:71:
         22:04:39:79:7f:78:ae:4e:53:6c:7d:f1:01:70:1a:2a:62:06:
         0b:25:42:91:94:92:65:8c:09:e4:d2:8a:f3:e7:67:6e:7b:be:
         7b:02:34:29:d0:05:d9:73:f0:3c:af:0f:f8:4d:d4:60:32:f9:
         64:d3:84:c4:90:74:fa:c8:ba:3c:d3:10:87:7a:38:51:cd:58:
         b5:63:11:b9:00:3b:e9:3c:99:a5:30:c3:22:43:a2:01:56:90:
         d7:6a:d6:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1ejcJiOME3mksHwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk
N2M5YzkyOWEtYzBmMy00MDZlLWJiNDMtZDg2NjIyNWFhZGI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT+4yXBtjUmZE4GJoFzHTV038+4CZVVI2TXq
eJ/NidJY5H2qNupsH0u9Fb1gAX4pURPrhyBKyrxbQpBrr4z28H+P/QQb3gv8rVCq
ry6OL/gxIf6YOkX/nvLUkGSrqFktxgfhjBwvupqJFFE3Wz0rdt+lsQcP0ld2Uwrm
JVmO7fcB6VdIz1tXH2HaeuLLrKKgkSyFIGYIkpUy0yf/smPHsZTSN305oeqccOoQ
L5Y5Sc/kV3JjzIFd1VvRArCF2I0PgpWQTRu5xkCBX0oLdOOpMiz43Bkc15WqhyLp
4lHKww25mayKcXluvLKcz7szwmXvMTMfWVlAzSo3VLamH9kHKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBt/FcSoEx0x3WDFnHw02RR2NrbxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMmQyYzEyYzItNmY2Ny0z
Y2VkLTlhOTgtODQ2ZjY1NTg3MzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+Y5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAElSgjXqZSluYTRmg7lPR3EkFKHct7tZqvU2JryfeJCSbdwnFCUEDmwF
yzLc5R7lW1TLdfIG7NvmCLLs+xLdTVpw1Juldmktz/TBHkkmkPjwUOtf4XZS3dl3
KZKeHagaAHjXN6o9jJUWchDO8lll9vDgH/Pfpnd2GjZlAqpgR9xhVD2n9toHaBkH
LQSmS7XboHusK4sf7w0dlNhDFuEp8XFAcSIEOXl/eK5OU2x98QFwGipiBgslQpGU
kmWMCeTSivPnZ257vnsCNCnQBdlz8DyvD/hN1GAy+WTThMSQdPrIujzTEId6OFHN
WLVjEbkAO+k8maUwwyJDogFWkNdq1oQ=
-----END CERTIFICATE-----
Generated at Sat May 10 10:51:27 2025 by rpki-client