Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3d0e2bff-51e1-3c6e-93da-17db8903257b.roa
File:                     3d0e2bff-51e1-3c6e-93da-17db8903257b.roa (raw, json)
Hash identifier:          5hnzACqUatgxVqivxSEKIB/mTMQVOpo6aAS77TanWOY=
Subject key identifier:   DD:F0:AE:38:BA:73:7B:75:20:D8:26:DA:1F:72:47:A1:DC:4E:F6:40
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A5CFB20F590D218CB6BB4B980
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3d0e2bff-51e1-3c6e-93da-17db8903257b.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     18779
IP address blocks:        23.230.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:20:f5:90:d2:18:cb:6b:b4:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=c5522efd-cf2f-4a64-9f7a-cf31e1b230f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:29:1f:a8:f5:2e:ad:de:77:c0:4f:cc:8f:82:
                    dd:40:2c:bf:07:52:42:31:dc:70:3b:ce:f5:de:2c:
                    f9:f1:d9:77:a3:dd:9d:4f:63:3e:8a:f2:67:88:83:
                    86:67:dd:ec:3a:ed:f3:e1:65:85:fa:4c:80:7b:e2:
                    90:23:8e:7d:61:ee:60:c2:a3:93:bc:2b:4b:d0:a6:
                    5c:38:56:33:9f:a3:1f:0b:29:56:14:92:e1:4d:c5:
                    6d:38:c9:e7:82:e7:17:05:2e:83:07:83:02:01:c2:
                    1c:74:48:b0:37:7e:f4:ad:02:c6:cf:66:b0:30:ab:
                    fa:ba:92:49:3d:2a:4a:4f:5d:69:80:9c:c5:09:62:
                    96:ab:7f:3a:22:d8:b3:49:56:af:89:7c:1f:9f:50:
                    cb:05:eb:7d:44:d8:5f:a4:cc:55:17:86:39:5f:1e:
                    56:76:e9:c8:c4:01:f6:73:af:d3:a6:bb:34:c3:ca:
                    7f:33:f3:58:71:ae:26:5c:eb:25:46:c1:8e:e0:02:
                    54:5f:32:ef:21:75:3d:8a:5d:86:94:de:54:47:7c:
                    5a:0c:88:a5:4a:8f:da:fb:18:cc:77:02:ca:6e:16:
                    43:dc:f3:71:0b:ee:dc:70:3d:8f:b1:6f:d5:ca:a6:
                    54:7a:7f:9f:d0:3d:c9:a0:12:a5:e0:73:4b:f4:3e:
                    9b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F0:AE:38:BA:73:7B:75:20:D8:26:DA:1F:72:47:A1:DC:4E:F6:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3d0e2bff-51e1-3c6e-93da-17db8903257b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:6f:25:46:60:d8:d4:93:0a:d8:68:d7:60:c6:16:33:1a:f0:
         8e:b3:4a:06:39:75:dd:a2:61:5e:94:8f:88:40:1b:c6:71:5e:
         ca:0a:da:55:12:5f:e1:c2:b0:71:b3:6d:db:82:4e:bd:17:5e:
         2e:ca:79:69:d1:69:fa:e3:38:12:da:7a:1f:a1:be:91:12:b1:
         2a:26:a7:58:c7:9b:e9:91:89:d0:05:20:eb:8a:78:43:9f:4b:
         a6:47:0b:61:d5:fc:07:38:ca:dd:a4:7c:00:57:be:3d:de:61:
         b5:47:dc:3c:f9:db:61:f3:8b:2a:2e:7b:f8:c2:0e:31:80:a0:
         72:05:cd:8d:54:09:c8:d2:3d:74:78:81:00:ec:04:47:55:41:
         0e:23:ae:47:0c:02:d0:37:19:5f:aa:9f:3b:b1:46:ae:b1:66:
         ad:cb:6a:d5:28:aa:4b:71:b5:ad:75:61:8f:15:4b:14:a7:f9:
         ee:a3:35:b7:0c:a9:8c:5f:e8:ea:7e:50:a4:1e:2f:42:12:86:
         7f:09:77:59:dd:25:90:a9:45:2f:a5:c9:15:54:bd:46:d8:85:
         ab:51:eb:93:99:09:e0:e7:cf:67:19:35:64:0a:3e:e0:bd:05:
         7a:96:cf:3f:f3:29:e3:df:b0:11:8e:7c:90:d9:98:c9:02:7c:
         e3:2b:12:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+yD1kNIYy2u0uYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
YzU1MjJlZmQtY2YyZi00YTY0LTlmN2EtY2YzMWUxYjIzMGY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCkfqPUurd53wE/Mj4LdQCy/B1JCMdxwO871
3iz58dl3o92dT2M+ivJniIOGZ93sOu3z4WWF+kyAe+KQI459Ye5gwqOTvCtL0KZc
OFYzn6MfCylWFJLhTcVtOMnngucXBS6DB4MCAcIcdEiwN370rQLGz2awMKv6upJJ
PSpKT11pgJzFCWKWq386ItizSVaviXwfn1DLBet9RNhfpMxVF4Y5Xx5WdunIxAH2
c6/Tprs0w8p/M/NYca4mXOslRsGO4AJUXzLvIXU9il2GlN5UR3xaDIilSo/a+xjM
dwLKbhZD3PNxC+7ccD2PsW/VyqZUen+f0D3JoBKl4HNL9D6bkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN3wrji6c3t1INgm2h9yR6HcTvZAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2QwZTJiZmYtNTFlMS0z
YzZlLTkzZGEtMTdkYjg5MDMyNTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+YEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJJvJUZg2NSTCtho12DGFjMa8I6zSgY5dd2iYV6Uj4hAG8ZxXsoK2lUS
X+HCsHGzbduCTr0XXi7KeWnRafrjOBLaeh+hvpESsSomp1jHm+mRidAFIOuKeEOf
S6ZHC2HV/Ac4yt2kfABXvj3eYbVH3Dz522Hziyoue/jCDjGAoHIFzY1UCcjSPXR4
gQDsBEdVQQ4jrkcMAtA3GV+qnzuxRq6xZq3LatUoqktxta11YY8VSxSn+e6jNbcM
qYxf6Op+UKQeL0IShn8Jd1ndJZCpRS+lyRVUvUbYhatR65OZCeDnz2cZNWQKPuC9
BXqWzz/zKePfsBGOfJDZmMkCfOMrEvI=
-----END CERTIFICATE-----
Generated at Tue Jul 1 18:29:58 2025 by rpki-client