Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6b2d3054-b8ef-33ee-803f-d881f0242977.roa
File:                     6b2d3054-b8ef-33ee-803f-d881f0242977.roa (raw, json)
Hash identifier:          3V/jjjeE7wMu21iajC9WV8ZJz4j4lSYPvrydzr0ebi0=
Subject key identifier:   BE:EF:0B:8E:F7:01:EB:E1:05:06:25:D2:E3:68:A1:08:E4:54:42:FA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AF0D80A16D9FA5C112588E880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6b2d3054-b8ef-33ee-803f-d881f0242977.roa
Signing time:             Fri 22 Aug 2025 12:10:04 +0000
ROA not before:           Fri 22 Aug 2025 12:10:04 +0000
ROA not after:            Thu 20 Nov 2025 13:10:04 +0000
asID:                     5400
IP address blocks:        23.230.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:d8:0a:16:d9:fa:5c:11:25:88:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 22 12:10:04 2025 GMT
            Not After : Nov 20 13:10:04 2025 GMT
        Subject: CN=df76bd4c-9119-4f2a-9d30-4b040bea275c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9c:7a:2c:74:74:57:2c:1e:6d:90:8f:ea:c7:
                    6c:71:8c:7a:82:a9:7a:59:52:ba:16:3b:d7:cb:22:
                    f9:1d:d2:ff:51:47:b3:d8:f8:35:e1:cc:d4:03:e5:
                    33:3c:c8:bb:4b:a3:de:fe:b2:66:3f:91:05:28:20:
                    0f:c6:8b:18:8c:17:b3:25:b0:8c:90:98:31:da:a2:
                    92:db:65:07:a7:19:79:5b:5a:e7:c0:75:10:ec:3f:
                    09:94:78:15:b0:68:9f:3b:5b:3b:7d:02:69:98:36:
                    5a:ad:35:9d:7f:c2:1d:27:39:f3:7d:0d:2a:e7:e5:
                    1c:5b:c6:a4:0d:88:07:6d:fc:e2:34:eb:f2:03:c2:
                    58:bc:52:8e:ff:0b:64:cc:1b:30:8c:84:b4:da:a7:
                    55:8b:61:a0:b2:c8:2a:6b:89:a5:6b:21:73:57:ee:
                    ff:6e:84:34:24:47:33:21:76:19:de:a3:dc:bf:81:
                    29:f9:a9:29:0d:da:51:3d:cc:23:92:71:98:20:fe:
                    13:8d:ab:98:c9:56:8f:3f:60:7b:9f:bf:9f:40:fe:
                    52:49:96:0f:0a:70:1b:06:74:de:71:ba:45:a4:8b:
                    cb:77:b6:10:85:5c:93:dc:de:ae:1f:6f:56:1c:1c:
                    cb:66:45:9d:1d:c2:44:ae:57:b8:a9:00:b1:2f:70:
                    c0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EF:0B:8E:F7:01:EB:E1:05:06:25:D2:E3:68:A1:08:E4:54:42:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6b2d3054-b8ef-33ee-803f-d881f0242977.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:50:99:31:a3:ad:28:5c:82:a3:ce:57:9c:b2:80:f8:a9:91:
         b7:d0:d7:a7:6c:8d:fb:e0:59:e2:cf:aa:c0:97:b6:b1:fc:f9:
         cf:db:42:01:bb:f6:da:ef:70:8e:7c:a9:1f:b9:65:c7:50:51:
         e4:dd:4e:ac:76:a6:c4:52:0b:58:3a:a5:83:9c:e6:30:12:7e:
         e1:96:b8:30:56:2b:e6:88:5e:1f:68:54:e0:7d:22:e0:17:6e:
         fa:27:32:56:96:2d:0c:d8:6c:55:3e:f1:6c:37:b3:0e:00:75:
         c4:6e:36:10:1a:85:02:80:d0:a2:8d:48:ce:63:49:b1:0d:80:
         4d:79:85:28:ed:ba:ac:c6:ef:ee:cf:b4:bb:cf:ec:52:cb:54:
         76:6b:30:de:35:94:03:c7:88:53:1a:8e:11:91:09:e8:b2:fb:
         96:db:d2:a0:df:b3:8d:e2:90:70:28:30:31:ed:6e:e9:86:08:
         24:2a:d7:bf:a3:b0:8e:1a:dd:1f:63:31:5c:70:ca:ca:15:2b:
         20:af:85:b2:c9:ae:4f:42:d0:92:db:ff:e5:d4:52:04:55:51:
         ca:be:ae:14:08:1d:47:5d:76:24:62:a6:1f:c6:b5:3c:97:79:
         25:38:27:c7:66:d2:54:8c:43:01:0c:ed:16:9f:e5:92:c7:90:
         aa:d6:31:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:25:48 2025 by rpki-client