Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/449fb2b2-ce9c-377b-97ff-9e2f95021dd3.roa
File:                     449fb2b2-ce9c-377b-97ff-9e2f95021dd3.roa (raw, json)
Hash identifier:          WTTJ3p/4yf/VEgdyTq+J7ADPovcBMVvAEwWURxDqgbo=
Subject key identifier:   DC:87:FD:27:F9:25:13:C9:EC:11:48:85:B2:42:A0:D0:35:77:3E:06
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AF0D9EC17E8C7A285B2110980
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/449fb2b2-ce9c-377b-97ff-9e2f95021dd3.roa
Signing time:             Fri 22 Aug 2025 12:13:51 +0000
ROA not before:           Fri 22 Aug 2025 12:13:51 +0000
ROA not after:            Thu 20 Nov 2025 13:13:51 +0000
asID:                     54500
IP address blocks:        23.230.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:d9:ec:17:e8:c7:a2:85:b2:11:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 22 12:13:51 2025 GMT
            Not After : Nov 20 13:13:51 2025 GMT
        Subject: CN=ca0c242b-04a1-442f-88a6-f82ae2b77479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a3:35:01:54:32:db:35:24:26:71:e1:30:4e:
                    9e:60:45:ea:29:58:80:da:6e:a4:30:5b:41:db:be:
                    17:a9:1d:47:8d:3a:86:85:ed:72:9d:5f:85:f5:f9:
                    51:ed:28:14:4b:87:d8:47:0f:30:a1:0c:46:79:09:
                    5b:b3:70:3e:fd:d7:f4:f4:53:0f:7b:8e:00:73:8a:
                    70:ae:a8:a3:b6:4f:61:20:11:2d:1a:47:16:77:cf:
                    c1:73:5e:d8:90:7f:42:ea:a0:82:0a:38:ff:b6:ed:
                    c4:3f:e9:1b:23:15:09:bb:9d:bb:1e:46:b7:1d:98:
                    8d:58:3e:df:fa:ed:2e:ee:30:d6:d6:65:f3:88:99:
                    81:ef:2c:ed:8b:83:3a:82:3c:c1:b9:76:e3:bb:3c:
                    bf:66:80:0e:74:31:70:de:8d:4a:cd:24:f0:95:41:
                    a4:83:0d:cb:f7:7d:df:0a:9b:29:5a:f0:84:5f:5b:
                    51:3e:56:0b:21:3d:f2:73:85:82:29:a7:76:f3:5e:
                    ac:f2:36:13:7e:35:c5:a0:e9:8f:41:ba:01:0a:20:
                    fa:de:b1:ed:69:18:7d:7d:88:73:46:e9:70:d5:68:
                    9c:98:dd:ff:9f:58:bf:d9:ed:16:d7:7d:ac:7e:fa:
                    99:10:cf:27:5f:f9:b6:f9:e4:ca:0a:00:a4:9f:bf:
                    1f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:87:FD:27:F9:25:13:C9:EC:11:48:85:B2:42:A0:D0:35:77:3E:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/449fb2b2-ce9c-377b-97ff-9e2f95021dd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:2e:53:76:a6:9d:bc:86:a8:4a:d0:b0:de:1a:e8:5c:d7:41:
         13:3f:49:85:df:c6:b5:6b:08:97:07:af:5d:ab:61:97:44:86:
         75:d7:b5:6f:45:12:1b:0d:80:13:a3:72:a5:8c:40:23:a9:9d:
         9f:ad:69:93:2a:c8:b4:10:e1:4a:d2:13:0a:bb:6c:2a:f2:d3:
         36:3c:97:6c:bd:11:1d:c2:e2:6d:82:e8:d9:ec:2d:06:cb:dd:
         e5:53:45:09:61:3e:2d:c8:6f:f9:1c:05:07:58:e7:86:eb:e0:
         2f:1a:f1:2d:42:ee:77:2d:36:54:b3:6a:a3:64:d4:9a:69:b9:
         ca:4f:87:d6:c1:0b:b1:00:72:8a:54:cf:76:a9:b2:cd:03:7e:
         86:dd:80:c9:79:eb:4a:db:59:65:c2:9f:f9:5b:72:36:1a:58:
         7f:5b:c3:f9:fd:63:79:07:81:ae:0e:3b:2b:36:f4:2f:f4:0d:
         6e:9d:d7:e8:2c:ce:31:7d:10:1a:48:18:25:58:5c:ba:f4:6a:
         1c:b4:45:c5:33:27:9c:60:86:9b:11:3f:d3:e9:9f:6c:fc:81:
         bd:99:d3:d7:6c:5e:90:5e:f1:9f:fb:b4:cc:62:26:e1:0f:62:
         22:50:0b:aa:2f:5b:38:fd:6c:47:fe:10:82:a3:c9:bf:66:89:
         f7:7d:a6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:33:57 2025 by rpki-client