Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/66461d7e-de4e-32f2-9d61-7a2254ff44a7.roa
File:                     66461d7e-de4e-32f2-9d61-7a2254ff44a7.roa (raw, json)
Hash identifier:          PX5aUPZx2wF0+FxLAt1aUKvEDkEHPHx9qQ860ME2anI=
Subject key identifier:   BE:E6:72:C6:37:80:1E:04:79:A5:7F:6F:62:A8:4A:C7:9E:8D:12:B4
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858496E4980C8E2AABB3C87CF0A80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/66461d7e-de4e-32f2-9d61-7a2254ff44a7.roa
Signing time:             Sun 06 Apr 2025 01:00:47 +0000
ROA not before:           Sun 06 Apr 2025 01:00:47 +0000
ROA not after:            Sat 05 Jul 2025 01:00:47 +0000
asID:                     214238
IP address blocks:        23.230.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6e:49:80:c8:e2:aa:bb:3c:87:cf:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr  6 01:00:47 2025 GMT
            Not After : Jul  5 01:00:47 2025 GMT
        Subject: CN=56b8c441-8b56-42e1-949b-df0b19fa746a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3a:6d:6d:33:64:d3:0d:ad:7c:fe:11:98:78:
                    5e:e1:e0:a0:8a:ce:44:86:91:85:6d:92:46:97:ad:
                    1b:2a:d8:f2:8b:fa:77:f5:29:26:3d:58:2c:cf:34:
                    de:3f:63:ab:2f:9f:09:e7:d7:b0:16:93:9a:da:94:
                    6f:5a:04:b5:9c:f9:fe:30:90:f5:16:69:a3:4e:04:
                    6c:4d:09:c3:be:5a:27:22:b4:16:65:e5:7c:7d:4d:
                    46:9f:f1:ca:88:02:d9:db:c5:93:65:e8:53:75:2d:
                    9a:4b:4e:4a:ba:84:34:f6:a6:ef:a8:c8:7f:72:83:
                    c4:80:36:df:39:57:71:56:ed:aa:44:27:00:52:c2:
                    85:2e:11:29:32:a1:33:1a:c0:6d:46:d0:08:85:ca:
                    13:9a:fb:78:e1:67:57:71:d6:e8:54:ea:22:68:b3:
                    ed:b4:50:51:79:3a:37:b0:df:52:03:7d:67:48:95:
                    0e:21:d4:96:14:02:43:71:7f:8c:8b:89:92:c4:55:
                    31:ee:da:fb:57:4f:2c:04:33:d7:7a:8c:31:af:39:
                    81:82:da:1e:fc:fc:58:bf:d1:dd:99:7a:7d:1e:38:
                    50:70:df:f1:6d:74:3b:9d:9f:16:54:89:a7:00:a8:
                    c3:a9:3a:01:e4:52:43:c9:36:c6:b9:6d:49:c9:4d:
                    c5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E6:72:C6:37:80:1E:04:79:A5:7F:6F:62:A8:4A:C7:9E:8D:12:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/66461d7e-de4e-32f2-9d61-7a2254ff44a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:51:aa:a9:bf:8c:da:7d:a9:45:7e:57:89:94:c2:48:98:4a:
         34:87:05:64:aa:9d:97:62:e7:46:b3:07:d8:97:65:3c:43:9e:
         c6:c5:94:53:2e:2c:dc:19:07:90:38:59:00:7e:fb:ea:a1:77:
         bf:d6:77:dc:b6:29:9d:a8:9f:01:a8:72:2c:ad:53:3c:5f:97:
         67:09:36:23:94:9c:df:56:d2:8f:0e:01:3a:e1:24:85:c4:23:
         35:42:b7:df:6e:0e:0d:0b:da:67:39:b1:ea:72:d5:40:2e:b0:
         5a:b9:c4:79:37:75:6f:f6:c9:4b:f7:ba:cb:d3:2b:9b:75:a5:
         72:6c:9a:9b:ea:23:47:41:25:5b:c0:2c:15:c5:46:90:03:00:
         58:30:c1:37:2b:68:f5:d9:03:b7:6c:eb:fa:65:49:cc:9a:1b:
         f5:ee:8e:98:1f:da:11:3f:74:cd:bd:cc:ea:28:7b:71:09:47:
         32:f9:00:f7:86:69:75:55:8f:ac:46:2e:59:ec:88:73:0b:57:
         c4:55:6b:6a:08:60:13:5c:52:85:3d:20:a7:f5:87:45:b5:60:
         b4:c8:19:f1:18:2c:92:76:9a:2e:cb:d3:b6:16:a4:c0:9b:52:
         61:99:fc:a4:b8:ba:fb:12:f8:67:e2:8f:b7:31:7d:2e:7b:83:
         d6:d8:1c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:08:40 2025 by rpki-client