Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/547f5941-fae4-3c47-b806-5b58445f8fb4.roa
File:                     547f5941-fae4-3c47-b806-5b58445f8fb4.roa (raw, json)
Hash identifier:          PXR7MkRXezDFUMovpftATahiYHRG+sK0zQenCmk5IPY=
Subject key identifier:   DE:23:D2:EB:3D:25:15:3F:75:D1:AA:50:5F:10:8B:71:97:8D:1D:76
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AE032137BC563FAC23AA7E500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/547f5941-fae4-3c47-b806-5b58445f8fb4.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     9304
IP address blocks:        23.230.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:32:13:7b:c5:63:fa:c2:3a:a7:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=5289c7f1-af4f-4c05-8818-d39a759d0b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:69:03:e5:5e:33:dc:16:ab:1d:26:10:b5:a8:
                    59:9c:92:66:20:31:0c:00:96:e7:a3:cf:36:9f:76:
                    bd:89:c7:9c:8d:85:b3:ce:51:cd:1b:84:16:78:e9:
                    3e:42:ac:18:9e:af:5d:f9:05:06:77:1e:2b:a5:38:
                    26:20:65:b0:0c:df:27:55:61:d5:0a:4d:99:6d:d0:
                    c2:f6:aa:95:ba:3b:6b:c3:73:6f:1b:ca:48:9f:84:
                    c0:ac:62:e0:8d:34:dd:df:bf:97:4d:d4:84:35:8e:
                    9e:73:23:28:b3:8d:6a:c3:2c:52:8f:85:0b:6d:e2:
                    6d:7c:43:8c:a8:09:34:06:0c:d3:99:ef:a2:82:6d:
                    52:5b:c1:24:b7:3e:7f:1f:1f:8b:8f:ce:d7:9e:b0:
                    f5:e8:43:33:4a:16:4e:5f:9e:39:67:a4:64:b8:7e:
                    cd:c8:90:b9:64:be:64:a0:77:06:2e:90:36:ed:e7:
                    30:55:59:3a:0d:41:d2:b8:e1:c0:af:d0:94:3f:66:
                    a9:5b:1a:95:54:44:d1:fc:39:3f:64:44:e8:59:8a:
                    82:0a:c9:93:9a:3e:6e:14:e4:32:d8:0b:e5:61:cc:
                    42:b3:57:5d:6c:0e:9c:87:90:f8:51:9f:51:70:72:
                    79:f0:7f:4f:96:e2:6b:4a:7b:45:44:9b:63:3c:60:
                    92:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:23:D2:EB:3D:25:15:3F:75:D1:AA:50:5F:10:8B:71:97:8D:1D:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/547f5941-fae4-3c47-b806-5b58445f8fb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:03:b8:89:de:a7:01:23:9c:44:47:68:66:95:67:77:48:65:
         3f:46:70:d4:8e:2d:0a:ce:00:e9:4a:5d:e7:2a:74:56:73:96:
         17:17:5f:fc:dc:2e:81:50:78:3f:fd:a6:68:a1:4a:bf:90:69:
         04:02:41:01:21:6d:25:b2:44:5c:5a:50:05:11:d6:23:8f:00:
         76:db:de:c3:03:00:a1:0b:07:69:0d:e7:bd:54:b5:9a:bd:25:
         de:58:d6:e8:d5:4d:cb:51:f7:1d:1b:e9:e0:c1:92:18:f5:06:
         df:45:b6:01:c2:3b:4e:6b:15:56:ac:13:1b:3f:16:21:27:e0:
         2c:2f:b8:89:d9:c8:5f:93:14:e9:99:23:a2:33:c5:58:4e:dd:
         ae:91:61:d6:e0:26:16:c8:06:ff:0f:f7:ba:78:11:bb:6f:1c:
         5c:db:e9:e4:cc:07:a9:36:b3:e2:75:c0:65:ae:55:6b:46:4f:
         58:83:74:29:e0:b8:d9:d6:a0:2a:f9:2d:94:4a:66:d7:6d:be:
         d8:dc:dd:c2:b7:41:dd:53:13:3c:9f:a0:ed:d2:5b:a7:be:75:
         1b:89:1d:d4:9b:cc:59:a6:d7:c8:02:03:55:68:80:c0:8d:7c:
         37:41:db:13:01:3e:c0:ab:8b:f5:62:61:0c:4e:f5:f1:35:05:
         9e:de:64:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:25:49 2025 by rpki-client