Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/95af9bf1-4f38-3814-b278-ab307afd1991.roa
File:                     95af9bf1-4f38-3814-b278-ab307afd1991.roa (raw, json)
Hash identifier:          +M/62O2+WFdXeclpuyW76icU5/pATc75SxC7MIi7/fc=
Subject key identifier:   4B:AF:2B:35:C9:A1:88:CE:7C:96:49:7D:B2:70:E5:E8:8B:2F:68:EB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AF0D80DF298A09E513C96DB00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/95af9bf1-4f38-3814-b278-ab307afd1991.roa
Signing time:             Fri 22 Aug 2025 12:10:05 +0000
ROA not before:           Fri 22 Aug 2025 12:10:05 +0000
ROA not after:            Thu 20 Nov 2025 13:10:05 +0000
asID:                     5400
IP address blocks:        23.230.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:d8:0d:f2:98:a0:9e:51:3c:96:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 22 12:10:05 2025 GMT
            Not After : Nov 20 13:10:05 2025 GMT
        Subject: CN=75d31824-88f7-4bde-a38f-5ab102a99486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:45:b4:da:a0:33:43:f9:ef:2d:bc:bc:d3:f1:
                    30:b2:f2:b4:90:1a:0a:33:50:61:a7:28:c8:72:44:
                    ce:39:35:3b:87:80:65:39:c6:31:c0:72:0f:fe:ee:
                    bb:a0:f2:0d:a7:37:1d:0c:1d:4d:31:39:da:1a:e4:
                    74:a2:ba:b8:af:f4:7c:e4:02:43:37:89:72:d2:ae:
                    4b:9d:63:2d:43:2c:69:fe:fc:c7:e7:cf:35:87:73:
                    ee:3f:af:0f:76:3d:14:8a:a1:be:95:38:21:e8:79:
                    49:ba:1c:82:cb:77:ca:fa:e2:c2:7b:db:86:bf:70:
                    5c:02:3d:d7:b9:01:6c:08:9c:3e:2a:c4:57:a6:56:
                    d7:9b:87:4d:9c:6d:bf:c8:10:4d:90:ec:03:c8:32:
                    2b:3f:8c:03:6b:f8:9a:26:5c:8b:74:56:35:f9:33:
                    29:6b:ce:53:92:79:ac:a7:96:bb:ab:fd:e9:5f:b8:
                    0f:d0:90:08:2e:0d:e7:04:51:30:22:41:ee:24:dc:
                    e7:7b:4b:68:20:51:eb:8a:8b:31:a5:d1:f2:0f:c6:
                    f9:b3:17:88:02:09:a1:e3:eb:fb:12:d2:61:c1:b9:
                    61:de:aa:3f:11:90:f8:70:1b:5e:96:7e:a3:cc:4d:
                    48:78:4a:18:4a:68:a7:15:34:16:88:42:ed:2c:1d:
                    67:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AF:2B:35:C9:A1:88:CE:7C:96:49:7D:B2:70:E5:E8:8B:2F:68:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/95af9bf1-4f38-3814-b278-ab307afd1991.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:c3:c6:3f:71:3a:3a:87:0f:c7:35:3e:45:8d:9d:b6:de:94:
         3f:a6:7b:c7:c2:7d:22:7b:58:05:58:f9:b9:39:86:b7:81:de:
         17:b1:b7:fb:d3:46:4a:45:77:d5:e9:33:a6:a3:1a:c8:32:9f:
         13:51:c1:73:35:17:53:a2:1f:9d:a5:a1:6a:03:26:98:c4:eb:
         24:fd:a5:75:3c:3a:34:cc:f0:fa:13:54:f5:96:55:a6:16:34:
         8b:3c:f9:ae:8b:80:15:55:b3:4e:9c:27:95:36:8c:3e:f1:51:
         9c:f0:48:b8:b4:10:d0:71:9b:15:2f:ef:84:0c:63:6d:3c:48:
         93:35:e4:2a:66:c5:b3:96:0f:00:10:a0:bd:33:ec:91:e8:0b:
         c8:69:4c:0c:4c:05:0f:e6:91:42:8c:c3:7e:33:96:60:0f:31:
         20:b9:07:e5:f5:3b:7c:f9:2c:1a:8f:75:c6:59:43:e4:1b:0d:
         51:f6:23:dc:4c:40:6c:5e:f9:ed:90:96:5f:75:ba:aa:bd:4c:
         d6:6e:3e:fc:c4:ec:ed:27:36:30:a0:7d:2a:7d:de:56:73:b9:
         d5:c7:d5:b8:bb:d8:9c:d1:c8:3c:5f:5a:9b:2f:21:4d:ca:57:
         3d:68:84:2a:c1:f4:93:f5:0d:33:6e:c8:20:5a:2d:86:23:b4:
         52:7e:a1:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw2A3ymKCeUTyW2wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDgyMjEyMTAwNVoXDTI1MTEyMDEzMTAwNVowLzEtMCsGA1UEAxMk
NzVkMzE4MjQtODhmNy00YmRlLWEzOGYtNWFiMTAyYTk5NDg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUW02qAzQ/nvLby80/EwsvK0kBoKM1BhpyjI
ckTOOTU7h4BlOcYxwHIP/u67oPINpzcdDB1NMTnaGuR0orq4r/R85AJDN4ly0q5L
nWMtQyxp/vzH5881h3PuP68Pdj0UiqG+lTgh6HlJuhyCy3fK+uLCe9uGv3BcAj3X
uQFsCJw+KsRXplbXm4dNnG2/yBBNkOwDyDIrP4wDa/iaJlyLdFY1+TMpa85Tknms
p5a7q/3pX7gP0JAILg3nBFEwIkHuJNzne0toIFHriosxpdHyD8b5sxeIAgmh4+v7
EtJhwblh3qo/EZD4cBteln6jzE1IeEoYSminFTQWiELtLB1nswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEuvKzXJoYjOfJZJfbJw5eiLL2jrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOTVhZjliZjEtNGYzOC0z
ODE0LWIyNzgtYWIzMDdhZmQxOTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+a1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFTDxj9xOjqHD8c1PkWNnbbelD+me8fCfSJ7WAVY+bk5hreB3hext/vT
RkpFd9XpM6ajGsgynxNRwXM1F1OiH52loWoDJpjE6yT9pXU8OjTM8PoTVPWWVaYW
NIs8+a6LgBVVs06cJ5U2jD7xUZzwSLi0ENBxmxUv74QMY208SJM15CpmxbOWDwAQ
oL0z7JHoC8hpTAxMBQ/mkUKMw34zlmAPMSC5B+X1O3z5LBqPdcZZQ+QbDVH2I9xM
QGxe+e2Qll91uqq9TNZuPvzE7O0nNjCgfSp93lZzudXH1bi72JzRyDxfWpsvIU3K
Vz1ohCrB9JP1DTNuyCBaLYYjtFJ+odM=
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:13:49 2025 by rpki-client