Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/37f3a211-3b31-38ed-9c9c-bc9d42da26a7.roa
File:                     37f3a211-3b31-38ed-9c9c-bc9d42da26a7.roa (raw, json)
Hash identifier:          13kOGXZU7UJsoQ83zWDqIiYStcMwXYemtiD4KkR1B/8=
Subject key identifier:   D1:81:73:C5:DA:15:F1:9C:EC:5B:FC:9A:C0:37:C7:DF:4E:9B:02:48
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AF0D81281BD25DD7C2B46AA80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/37f3a211-3b31-38ed-9c9c-bc9d42da26a7.roa
Signing time:             Fri 22 Aug 2025 12:10:08 +0000
ROA not before:           Fri 22 Aug 2025 12:10:08 +0000
ROA not after:            Thu 20 Nov 2025 13:10:08 +0000
asID:                     5400
IP address blocks:        23.230.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:d8:12:81:bd:25:dd:7c:2b:46:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 22 12:10:08 2025 GMT
            Not After : Nov 20 13:10:08 2025 GMT
        Subject: CN=c17054b9-a73b-498f-8af1-18451c61bdf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:74:05:f8:6f:34:ea:42:e2:78:fd:97:2b:cf:
                    5c:1c:7a:d8:91:dc:cb:c5:56:33:21:f0:45:f4:f5:
                    be:67:cc:cf:98:91:10:3e:2a:ce:99:cf:4d:31:6f:
                    c4:0d:31:dd:27:d2:3d:e4:15:7b:d1:77:87:c1:5a:
                    e0:6d:70:e1:87:c9:17:8b:7a:f6:6c:ac:e1:b9:7f:
                    39:31:fa:32:ce:1b:57:67:46:67:13:4d:87:17:d5:
                    dd:4b:12:79:50:e3:86:8b:9c:10:45:20:07:68:62:
                    79:7f:30:fa:e0:05:a2:52:8f:3c:1e:89:24:bb:e0:
                    d3:90:ed:03:e8:5d:0f:c0:b0:a8:14:56:d9:78:45:
                    36:c1:a6:7e:03:5f:4d:ad:5b:b7:a8:1e:10:e4:69:
                    cd:51:87:f8:f7:4a:15:f8:7d:d8:53:cc:9e:a2:1f:
                    a1:a2:14:26:14:08:cb:26:96:a5:0a:05:f8:3a:8a:
                    24:70:0f:d8:1d:83:23:ce:25:92:13:d5:f6:f2:d6:
                    b5:1a:35:19:d0:17:be:22:f8:9b:e1:ca:6e:f3:4c:
                    e8:a5:22:a2:40:fa:03:a6:34:46:0d:c9:23:6c:04:
                    9a:88:e8:cf:18:d2:ad:91:41:08:74:c6:3a:9f:ae:
                    a0:f5:ac:c7:a1:93:72:17:d2:bf:32:da:71:ba:d5:
                    e9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:81:73:C5:DA:15:F1:9C:EC:5B:FC:9A:C0:37:C7:DF:4E:9B:02:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/37f3a211-3b31-38ed-9c9c-bc9d42da26a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:41:43:91:8c:92:62:cc:29:c1:5f:6a:b0:75:fa:20:c2:b1:
         90:66:75:75:3a:d7:01:9c:fa:0c:20:db:bb:5f:2c:f5:52:f3:
         7b:5c:a0:78:2a:84:44:f2:f3:fd:6a:e3:75:5e:63:be:52:b0:
         58:a7:b6:06:17:1a:20:2c:c8:8f:3e:0c:36:00:47:fc:f2:49:
         39:f1:bb:0d:81:d7:3a:fd:0f:28:37:41:76:c4:40:b6:10:50:
         b8:3e:71:86:7c:fa:70:d4:9a:49:b4:4d:b3:59:05:83:2e:d8:
         0d:c6:96:63:73:e1:a8:35:53:fa:00:54:70:9c:b5:a9:8f:71:
         50:5b:13:58:4a:31:cf:4f:5a:a1:0a:3c:99:5e:fd:93:d0:fa:
         bc:91:b8:b6:e1:80:41:21:42:09:0d:be:75:c2:d9:3d:30:63:
         44:0e:64:5c:3e:99:0e:81:26:13:36:8e:66:e9:e2:cd:66:3c:
         83:5d:b2:a5:e7:94:e0:88:02:9b:17:9c:9b:22:1f:1c:27:3e:
         01:2f:d5:af:5d:5e:6d:e5:58:cc:47:ff:76:2f:ed:7a:44:d6:
         92:21:81:cf:84:4b:ea:c9:c2:f2:c5:b9:a6:21:6f:a0:72:63:
         af:07:15:07:1e:62:06:91:f4:e9:b3:29:77:b3:e6:b0:87:e9:
         b6:31:bc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:47:31 2025 by rpki-client