Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/942df509-6178-31bc-80bd-f64c0163ce9e.roa
File:                     942df509-6178-31bc-80bd-f64c0163ce9e.roa (raw, json)
Hash identifier:          Bl4huEvFOXFCtaAtJVL/WBmmVSJmrES2B+ZXwGI7OU4=
Subject key identifier:   A4:02:04:89:4C:84:6E:32:28:9A:2D:33:DB:86:69:93:18:DD:48:25
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A5CFB22CFDD78B7FAD2895930
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/942df509-6178-31bc-80bd-f64c0163ce9e.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     18779
IP address blocks:        23.230.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:22:cf:dd:78:b7:fa:d2:89:59:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=e4871d84-3b5c-4278-929f-ffe7b295d0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d4:e9:fc:80:52:09:3c:75:20:5a:92:ca:56:
                    13:cd:c6:b2:86:22:41:97:d8:e8:9b:46:21:45:14:
                    f6:9e:80:11:94:87:37:17:86:51:5c:02:d5:aa:59:
                    86:f5:a5:72:42:aa:19:42:5d:a9:ab:ac:85:51:1f:
                    0b:10:54:a8:d2:e4:d4:61:da:6d:26:4a:3a:fa:5f:
                    86:d1:49:77:03:de:ce:05:83:33:55:6a:7a:4a:57:
                    d5:de:fb:8d:30:6f:91:d4:77:02:f8:a9:2f:37:16:
                    cf:1a:fd:e8:1f:7a:83:4a:4a:4d:41:01:e5:b9:6a:
                    23:4e:7f:b8:e4:fa:16:e5:d2:30:34:0c:78:25:a8:
                    9d:b0:23:d1:38:7a:08:8b:4a:a5:98:47:04:14:f4:
                    ca:66:76:2a:0a:b2:89:60:0b:c4:43:f1:7c:19:53:
                    a7:5a:1e:a7:00:93:a3:58:e2:47:ff:cf:7a:49:d8:
                    11:25:4b:68:d7:b3:65:28:4b:e3:6e:d9:ed:36:39:
                    0d:74:b1:58:a2:3e:29:e5:0f:b6:b3:14:7a:80:7b:
                    63:46:a8:41:36:13:87:af:c3:e1:57:9f:b6:ea:70:
                    d9:47:2a:84:2a:98:6f:de:36:d6:77:84:68:75:91:
                    e1:aa:61:fd:81:59:10:1d:ea:4d:8d:5e:ef:fc:57:
                    29:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:02:04:89:4C:84:6E:32:28:9A:2D:33:DB:86:69:93:18:DD:48:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/942df509-6178-31bc-80bd-f64c0163ce9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:d0:d8:71:0e:34:4d:89:27:c0:16:6c:17:6a:5c:7c:c0:88:
         92:ef:18:89:b4:fc:f9:6b:f3:ef:08:d3:1b:71:c4:cf:d4:52:
         99:e0:83:42:b4:0a:c9:af:f2:4c:a2:ee:ae:ce:40:ab:33:16:
         51:3c:b6:64:2a:7c:5d:7a:35:aa:8d:86:b5:f3:d9:90:83:6a:
         7e:db:f5:3e:01:5f:97:48:ec:b9:fa:99:2d:6d:59:73:13:d2:
         98:e6:41:c3:62:bb:46:15:a1:72:9d:72:4e:cf:3a:14:21:b2:
         83:fb:ed:ba:9d:8b:17:35:ef:ef:51:48:af:2d:b4:a1:be:c6:
         e8:8f:21:41:73:88:34:a4:b4:b3:c4:51:87:b9:b0:a2:49:b5:
         bc:b4:d2:30:02:98:5b:3a:e9:a8:0f:14:48:ff:cf:4d:5d:55:
         d6:55:19:cb:2f:ae:79:a0:69:70:22:0f:1d:f7:f8:66:ea:df:
         e6:05:a6:f9:a8:20:9c:fb:4d:d6:13:2d:45:32:cd:e8:40:c4:
         03:de:ef:2c:e0:c8:db:27:bc:ac:63:72:ca:a5:bf:21:98:ab:
         1b:10:43:a9:6d:ba:58:46:d6:99:a7:b4:6f:10:7a:8f:75:99:
         f5:7c:9e:fb:bf:2c:f8:b9:9c:16:3c:44:60:07:99:c7:77:f8:
         c3:c8:0e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 07:04:08 2025 by rpki-client