Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42defbd1-65fe-3ed8-8dd9-48bbae9a0311.roa
File:                     42defbd1-65fe-3ed8-8dd9-48bbae9a0311.roa (raw, json)
Hash identifier:          TLpLd6LFnv8JLSsIzoZs9bNn9NWdxTrOyJgfwO+kqMQ=
Subject key identifier:   46:50:FC:2A:D5:45:3F:B8:08:C8:6A:06:54:44:7D:24:8F:42:97:77
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B64CE6FCD918D2D032F07B700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42defbd1-65fe-3ed8-8dd9-48bbae9a0311.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     44559
IP address blocks:        23.230.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:6f:cd:91:8d:2d:03:2f:07:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=bbeba4e9-4ea3-4fb3-be9c-95339fd6f454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e5:cb:c2:44:40:77:8b:ea:3a:54:69:c4:9a:
                    05:0b:7a:0f:90:c2:ed:5e:bf:15:8a:80:d1:66:95:
                    95:3f:78:59:87:b6:f6:bd:2d:8a:25:f8:9f:80:bf:
                    80:59:84:ec:5c:2d:57:16:72:2e:49:1a:dd:97:2a:
                    ee:00:30:bb:ec:dd:fd:73:90:4f:b6:78:fd:92:aa:
                    25:db:4d:0e:7e:c8:c7:d3:bb:97:c1:7a:b2:d6:28:
                    b9:0f:78:2c:d9:01:35:5e:46:1d:32:8d:19:1b:f7:
                    3c:e5:64:f5:ea:2c:8b:69:0f:b2:f4:87:3f:03:24:
                    0a:17:d5:21:2c:ac:a1:dc:c4:35:bd:ab:b9:12:30:
                    98:b6:04:c1:8d:c4:36:3c:d1:b2:f7:2c:79:e9:fa:
                    e9:46:05:6b:22:f3:b7:90:4f:44:57:21:57:cc:ca:
                    eb:7a:ab:da:5e:b3:e0:bc:f2:4f:a4:e4:c5:4b:2c:
                    10:3d:70:51:4e:47:80:65:4a:b9:62:02:bb:c9:b1:
                    1a:18:58:a8:9f:9e:1b:76:33:27:97:fd:33:a0:26:
                    0d:1d:36:13:ac:c4:c4:21:a4:8b:b4:68:5a:78:e4:
                    e9:3e:32:e9:63:ad:9f:9f:3f:45:3b:11:ee:40:78:
                    ff:a2:25:91:9d:8b:fd:82:60:d8:19:36:a2:7e:6c:
                    43:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:50:FC:2A:D5:45:3F:B8:08:C8:6A:06:54:44:7D:24:8F:42:97:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42defbd1-65fe-3ed8-8dd9-48bbae9a0311.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:35:17:41:fb:23:7d:3e:8a:4d:ce:5b:34:8a:b5:82:49:62:
         ae:50:80:ae:e8:24:0c:4f:e4:a2:0c:19:72:c0:14:b6:43:7c:
         15:2c:ad:2f:0f:be:28:13:ed:e1:05:e6:b9:ea:0b:e2:74:df:
         1a:92:14:b3:0d:7f:0a:fd:e0:1e:40:09:2c:3f:e8:21:76:4a:
         45:2a:18:e2:38:5a:c8:74:84:c3:28:7e:fa:0b:01:01:30:91:
         2e:9d:6a:1a:0a:d1:f5:ef:85:bd:0f:f8:0c:b9:31:cd:d7:2a:
         75:bd:2d:eb:a3:e7:9b:5b:8e:b8:6b:9a:aa:4d:62:9a:7d:19:
         65:6f:f5:17:c6:de:ac:3b:23:b9:0a:92:db:4c:62:6e:ab:c6:
         e4:58:4e:a8:39:c1:2e:f9:db:98:6f:1c:35:11:dd:9b:61:b4:
         db:c4:80:04:2e:0f:59:00:f7:c0:92:c3:b0:3b:b5:11:6c:a8:
         bf:cb:95:bc:5e:70:d5:96:5c:b0:16:c1:88:55:62:e4:45:13:
         51:8f:81:d1:1e:44:9d:b1:cd:dd:6c:5a:62:13:6b:73:f6:5a:
         f6:8f:2b:e7:1e:8a:27:70:bc:87:61:f4:05:4d:b3:4f:28:a1:
         99:bb:93:79:4a:c8:27:9a:df:10:63:12:d7:67:e1:d2:b1:eb:
         f3:b4:69:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:27:04 2025 by rpki-client