Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7116d002-a54f-3ba1-bffd-5a3025913cf3.roa
File:                     7116d002-a54f-3ba1-bffd-5a3025913cf3.roa (raw, json)
Hash identifier:          BuVxQxM2Io1ANoPLsTKGj8v6jOhARHQoi78m5EpW/wo=
Subject key identifier:   2C:A1:EB:E1:33:89:9B:DF:42:E1:4D:55:B6:ED:EA:C1:F8:14:D0:9D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B57A36FF3D502BF9C42CBF00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7116d002-a54f-3ba1-bffd-5a3025913cf3.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     400536
IP address blocks:        23.230.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:36:ff:3d:50:2b:f9:c4:2c:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=4892c3da-651b-4e57-aa66-5bd76d595c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6b:b9:db:79:60:9a:74:75:1e:4c:67:a3:9e:
                    d2:e9:cf:ee:87:e1:1c:1d:f0:1b:f6:1a:65:3b:ab:
                    58:3c:67:dd:5f:bb:39:b8:53:ad:04:a4:54:70:16:
                    81:56:b2:48:d2:8f:01:87:86:4a:b0:5b:da:d1:29:
                    7a:50:fd:e9:85:3c:89:d9:76:9f:8e:95:f9:05:37:
                    70:84:7f:35:d0:40:3a:1f:10:16:4f:f5:16:24:69:
                    1c:8b:f8:ba:15:2f:5d:91:fc:32:59:aa:2b:0e:ee:
                    57:df:c0:52:d6:8c:a1:5b:d4:6a:26:d1:d2:a1:6a:
                    8a:8b:bb:c2:e6:a4:8c:63:1a:6a:57:d2:b6:9f:28:
                    6f:35:82:43:ed:83:21:e4:20:a2:9d:6f:17:36:28:
                    17:49:8d:f3:e9:d3:f9:29:17:d9:ca:58:21:f9:a5:
                    87:f2:d9:ed:da:10:b0:2a:0c:33:a5:10:fe:8c:c3:
                    d1:be:87:c3:8e:70:78:db:ec:8e:47:73:4d:1b:1d:
                    13:fb:33:21:5b:e1:c3:92:af:8e:a8:24:55:3a:ea:
                    1e:e7:eb:d4:09:81:fe:44:70:83:1e:62:85:b5:4c:
                    79:d7:e2:4d:f2:e0:52:7b:26:3a:f6:a5:37:ad:d4:
                    09:ea:a0:13:16:44:c3:bd:9d:18:97:fa:38:73:39:
                    59:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A1:EB:E1:33:89:9B:DF:42:E1:4D:55:B6:ED:EA:C1:F8:14:D0:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7116d002-a54f-3ba1-bffd-5a3025913cf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:db:30:b1:cc:bb:d2:be:70:a9:9c:a4:05:78:84:6f:ae:58:
         61:21:89:99:77:da:48:86:d5:ac:a3:f5:ce:0d:0b:61:91:ac:
         08:27:33:37:ef:4d:68:3b:95:61:fa:fd:24:ce:44:60:12:08:
         d8:88:67:38:a7:00:3d:2f:dc:af:09:14:3d:2a:e9:2e:12:60:
         94:66:d2:fc:0c:e3:1b:49:be:53:25:24:b4:88:64:fd:7d:69:
         57:bd:7d:03:d2:f1:d8:5a:85:6d:b1:d4:06:cc:01:40:96:47:
         dd:cb:8a:5d:1f:35:e6:d9:17:b0:08:76:71:cb:f3:21:dd:6e:
         5f:ee:5b:6b:3f:bb:a3:06:4a:e6:57:2c:57:6f:76:27:5e:3e:
         a9:a8:f5:e5:ae:36:86:8a:53:b9:16:d5:45:00:de:4f:6b:72:
         eb:df:94:1c:47:03:50:62:b4:4b:53:34:c5:cb:41:e3:76:dd:
         1d:b1:0e:f2:f9:94:9e:82:0b:cd:fb:05:a5:0d:13:34:b8:89:
         6d:af:f6:46:23:b8:fb:df:04:66:56:5c:6e:05:7b:eb:3c:92:
         0b:d9:d1:03:57:4c:40:dd:53:4e:44:ba:8d:ca:9e:4c:2b:be:
         17:88:b5:9b:3f:26:02:19:d3:8a:d0:3f:1b:5b:ce:f9:28:99:
         76:53:02:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:45:11 2025 by rpki-client