Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/91f816c4-705d-3160-9852-bddf162cd38c.roa
File:                     91f816c4-705d-3160-9852-bddf162cd38c.roa (raw, json)
Hash identifier:          e4cIfh7/a+iWV1Fhtzu8D6P5Yo0yJMmGh1O+G3Ao/kk=
Subject key identifier:   3C:8B:96:57:46:58:8D:11:71:00:F2:B1:B2:0F:1B:23:4E:01:25:10
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B838215E2BAC3E02932B3C700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/91f816c4-705d-3160-9852-bddf162cd38c.roa
Signing time:             Tue 14 Oct 2025 01:00:30 +0000
ROA not before:           Tue 14 Oct 2025 01:00:30 +0000
ROA not after:            Mon 12 Jan 2026 02:00:30 +0000
asID:                     209604
IP address blocks:        23.230.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:83:82:15:e2:ba:c3:e0:29:32:b3:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 14 01:00:30 2025 GMT
            Not After : Jan 12 02:00:30 2026 GMT
        Subject: CN=03563446-663e-4bfa-87fc-44990ae379d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a5:e6:38:50:9e:ec:21:f1:eb:e5:89:ce:0d:
                    b3:1f:e6:9b:fb:31:aa:eb:b7:83:e5:fb:af:5b:c8:
                    08:2d:34:b5:d2:e0:84:f0:ac:5a:8c:14:9b:0c:0b:
                    ee:25:1b:1d:d3:b4:6d:24:96:5e:81:6b:80:69:e0:
                    7a:66:ac:76:d2:4c:37:d9:9a:b2:be:fd:b6:44:52:
                    7a:8f:f3:c4:fc:d1:35:a6:19:59:cb:cd:f2:4a:90:
                    42:d4:9d:2b:7b:0b:10:fb:1f:56:27:59:98:e8:4b:
                    69:77:4e:ba:28:b6:80:20:73:77:74:6e:8b:a0:da:
                    90:ba:7d:75:3e:2f:c6:86:80:03:e1:87:f5:3f:fc:
                    b5:fd:7f:be:cd:fe:2b:8e:a5:aa:a6:40:e3:09:69:
                    d8:27:2d:db:d6:8d:20:88:c7:6a:2c:0a:34:c1:cd:
                    23:b7:57:36:ea:82:2a:27:2d:e0:ad:c5:7b:05:53:
                    79:3a:96:6d:9c:15:e3:b3:9e:b0:1b:01:05:1c:73:
                    c6:1e:f2:77:68:17:b0:12:fe:ed:0e:ac:6d:cc:c8:
                    2b:2f:8e:17:34:f2:ce:f3:6c:4c:b8:8b:bc:08:4b:
                    ad:5a:4b:a0:01:be:b6:c5:d3:cc:c0:35:aa:b8:6a:
                    e9:8d:cf:35:22:97:4b:bd:44:b3:bb:49:99:b1:c8:
                    b7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:8B:96:57:46:58:8D:11:71:00:F2:B1:B2:0F:1B:23:4E:01:25:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/91f816c4-705d-3160-9852-bddf162cd38c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:06:c1:84:41:c4:5e:2f:dd:f9:5f:64:50:2a:54:43:7e:a8:
         04:69:88:ce:4f:ee:fc:4e:85:0d:3d:80:51:d1:33:5c:c5:12:
         f8:0c:41:63:5f:23:1c:aa:d4:cd:a2:b2:4d:06:d9:46:e4:3d:
         32:01:54:14:2d:f9:df:ef:c6:56:2d:aa:12:cf:fa:72:33:c5:
         09:93:64:1d:2a:3e:de:9a:48:ff:cf:d3:ca:9e:16:26:0b:e1:
         e2:50:b8:32:fe:07:23:1e:19:ee:e0:f0:11:40:41:a0:52:e4:
         eb:a1:0d:13:f9:87:de:8c:19:ca:fc:af:db:5e:00:d1:ca:82:
         48:92:4e:22:5c:6c:9b:2f:3c:e7:ee:35:34:02:6a:8e:a5:ad:
         0b:24:cb:f3:aa:af:f1:39:7c:80:0f:3a:55:f0:66:c3:f7:d4:
         2c:48:a4:12:66:2e:db:3e:a7:d0:d0:78:2b:42:0f:54:56:d6:
         e3:d7:7d:d9:29:2f:02:9b:2a:cd:18:7d:91:66:e9:56:49:c0:
         cf:ab:31:2e:38:a7:2a:7f:5a:0e:02:0d:38:81:85:cf:ec:ff:
         37:2e:98:37:6b:ba:73:7f:2b:32:47:87:60:54:e6:77:dd:96:
         db:85:52:bb:11:84:1b:7d:7d:a2:e8:e3:30:ca:b0:b2:2b:b6:
         0b:e0:15:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:38:32 2025 by rpki-client