Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/39418f00-67d4-3dbd-a2b0-f1dee32324b8.roa
File:                     39418f00-67d4-3dbd-a2b0-f1dee32324b8.roa (raw, json)
Hash identifier:          pA53QXVjtAuupTJUy79W5kWpWKPAKb1D6JhrgzchEQc=
Subject key identifier:   50:B2:89:97:F0:1A:29:78:04:9C:17:D0:31:4E:45:2A:F1:8C:DF:D0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A5CFB22710396A714C5B358C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/39418f00-67d4-3dbd-a2b0-f1dee32324b8.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     18779
IP address blocks:        23.230.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:22:71:03:96:a7:14:c5:b3:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=5421c080-df2c-43c2-9033-9b7a7b711b3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:51:1e:ff:68:86:8b:44:9d:f3:6f:22:20:e7:
                    59:dc:ab:fa:b2:65:c1:1b:1f:0a:71:84:1b:b0:04:
                    db:0a:5e:a4:1a:58:11:fb:a2:61:72:ac:32:3c:a7:
                    4c:4f:1e:f3:42:e0:f8:36:0b:ae:dd:a2:6e:1a:e6:
                    36:8b:6c:cb:4c:33:7f:5e:65:66:ee:46:8e:77:d0:
                    a8:8b:77:51:53:85:b9:6b:88:31:36:76:7c:42:e7:
                    24:8e:5c:12:6c:69:e5:3f:ed:cc:9c:31:8d:21:c4:
                    be:2d:46:fc:79:0e:fc:b7:72:f0:ec:f0:44:fe:53:
                    df:c3:41:35:50:6a:22:af:b9:9f:d9:fd:94:41:41:
                    96:30:2e:05:9d:70:21:d1:e6:15:1c:23:78:38:ff:
                    31:82:e4:2e:57:63:01:2c:b3:b9:d5:ef:c5:a0:8d:
                    11:f8:dc:a8:97:f4:87:b9:5f:93:35:f2:b3:73:14:
                    96:34:6b:96:a6:7f:ab:70:15:7e:9f:c7:f1:ac:0e:
                    4c:12:90:57:bd:17:9c:b0:c6:db:55:20:56:07:0e:
                    d7:26:f7:7b:43:6f:8a:e9:d9:be:2b:0d:da:12:f0:
                    13:3c:79:9b:f6:f0:dc:bb:52:68:91:98:7b:36:c5:
                    cd:7d:75:e0:a2:35:cc:47:2d:c2:11:f1:28:f6:ba:
                    f2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B2:89:97:F0:1A:29:78:04:9C:17:D0:31:4E:45:2A:F1:8C:DF:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/39418f00-67d4-3dbd-a2b0-f1dee32324b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:58:75:cd:01:b1:b9:f3:d4:6f:fd:43:24:de:d1:b5:25:fc:
         90:f2:62:2e:49:61:58:f7:d7:77:2b:dd:aa:18:e0:e0:75:42:
         b8:56:18:da:3c:0d:67:08:ef:75:fb:77:34:18:31:3f:a3:69:
         11:51:7e:8c:36:f3:c5:dc:f9:f5:55:6f:f4:13:61:c5:99:5d:
         f0:88:e5:8d:8a:04:64:4c:22:03:ba:4f:73:12:0a:ef:cf:ca:
         69:48:92:ab:d3:3c:8a:b1:4e:e4:92:98:f7:61:a2:57:39:b6:
         a9:6b:9c:b1:86:f1:7d:37:f2:01:52:8f:e9:4c:fb:6a:c3:0b:
         d9:47:a9:01:f7:53:4e:3a:58:8d:63:a2:22:70:f7:6c:a1:e3:
         68:5a:cf:81:95:97:14:44:cf:bb:55:cc:71:ce:02:fa:03:a7:
         aa:54:81:cd:77:35:1f:6e:2d:60:a2:5b:93:40:5a:08:1c:af:
         88:4d:9b:83:27:b0:31:ed:8f:9c:fc:79:16:72:eb:5e:5d:ec:
         ed:e3:c6:44:47:4f:bf:f8:e5:9c:22:f5:92:46:51:02:63:85:
         8e:6c:86:30:d2:b9:c0:09:1c:d0:d2:41:53:99:f0:47:f7:b2:
         90:9a:bf:b4:61:bf:f4:41:df:bc:f0:ac:7e:4c:c6:42:31:3d:
         f4:2a:fb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:59:59 2025 by rpki-client