Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/58a9df34-5fa5-33cc-a258-8633a687005f.roa
File:                     58a9df34-5fa5-33cc-a258-8633a687005f.roa (raw, json)
Hash identifier:          DOOYIuzMLkaee2KEiH59a6l2XLHAjeAs7+WYB693Yy4=
Subject key identifier:   AB:C4:CD:9B:9A:76:96:5A:AD:46:B3:9A:02:CD:49:4A:8F:99:1D:7E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AF0D8194A0EA6B0CB6A57DDC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/58a9df34-5fa5-33cc-a258-8633a687005f.roa
Signing time:             Fri 22 Aug 2025 12:10:11 +0000
ROA not before:           Fri 22 Aug 2025 12:10:11 +0000
ROA not after:            Thu 20 Nov 2025 13:10:11 +0000
asID:                     5400
IP address blocks:        23.230.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:d8:19:4a:0e:a6:b0:cb:6a:57:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 22 12:10:11 2025 GMT
            Not After : Nov 20 13:10:11 2025 GMT
        Subject: CN=a8e67f6e-4d39-49a4-8c3f-d6b7b84c9d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d2:62:ab:65:80:f2:a5:22:34:dd:98:a2:d9:
                    52:26:14:00:c8:bf:17:24:dd:7a:23:a6:f8:38:a0:
                    e4:52:7f:2c:05:0d:e8:4a:cd:f5:39:56:91:ed:0b:
                    42:0e:d8:ff:da:62:af:2c:51:ac:fd:4d:9c:8a:03:
                    c8:6a:91:b3:e2:2d:61:8b:36:e4:04:b2:7b:c4:74:
                    64:22:e2:eb:85:be:25:2f:23:26:85:db:66:0f:09:
                    75:80:84:9f:9f:cf:06:de:5f:e5:95:c6:d9:4a:36:
                    28:f1:b8:e8:2e:63:e7:ad:77:d4:a8:c5:91:6a:4e:
                    d4:4e:c2:64:22:25:5a:12:a9:1d:64:64:40:64:3e:
                    a6:57:7f:72:ef:c8:41:77:4a:70:1d:3e:4d:4d:6d:
                    fd:99:b9:60:6b:75:95:fa:13:ed:39:7a:2e:c1:77:
                    0c:15:e5:af:93:a2:3d:5c:b0:d6:e0:0c:12:5b:6d:
                    6d:77:c8:38:f8:fe:d9:a6:82:7e:44:ed:98:4f:7f:
                    b1:83:62:df:f6:1d:70:ce:c7:38:23:2d:c3:25:ff:
                    58:7e:b0:5d:c9:26:d5:89:c7:0e:63:b0:08:c2:de:
                    32:72:c1:8d:7c:2d:d8:fc:6a:66:8e:28:d6:f3:87:
                    f8:5f:4f:73:2d:3a:f3:6f:6f:42:33:14:92:3b:70:
                    1f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C4:CD:9B:9A:76:96:5A:AD:46:B3:9A:02:CD:49:4A:8F:99:1D:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/58a9df34-5fa5-33cc-a258-8633a687005f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:3c:c3:a2:37:2a:d1:5f:7b:43:3b:3a:51:9d:a2:6b:44:71:
         13:ad:a5:28:43:af:87:d7:e3:d4:87:db:25:12:a0:31:b2:ad:
         22:8b:d0:dd:73:8f:3b:d5:25:8b:31:ef:3c:19:92:ef:b3:94:
         0c:d3:c8:78:da:cf:f0:f9:11:84:4f:c1:6b:4d:2a:c6:95:65:
         b4:c9:0a:d1:dc:b6:a4:82:54:36:d1:1c:f7:80:bc:01:22:79:
         e4:e7:a2:68:77:a5:80:db:d1:1f:b3:bd:21:c0:c7:2a:ab:40:
         65:3e:4b:bc:94:bd:17:13:68:9e:b7:49:8e:cc:6d:58:42:48:
         74:2e:0e:6f:7c:1f:2a:b7:bb:ed:6a:10:c4:0f:0a:63:4e:aa:
         58:c6:4c:03:af:6b:85:2d:db:c6:8f:db:0c:b3:90:52:98:97:
         e8:2a:97:72:f3:7f:4c:15:85:a4:1e:4a:41:e0:5c:d6:27:29:
         63:3f:a3:34:06:f8:26:0e:63:b4:d5:0b:a5:f6:4e:08:73:d9:
         39:ca:c9:e7:c8:f1:89:ea:08:b1:8c:92:31:18:18:b4:27:7b:
         59:f7:37:cf:70:b0:8f:49:37:2e:cb:68:a8:e7:da:4e:ef:41:
         3e:5b:3f:21:c5:f8:04:18:40:fb:74:a0:59:a5:61:33:2f:8b:
         ae:57:c4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:31:25 2025 by rpki-client