Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/acb5e843-17e6-342c-aeed-1cdc6c5c1b09.roa
File:                     acb5e843-17e6-342c-aeed-1cdc6c5c1b09.roa (raw, json)
Hash identifier:          PQC+SJyTp0Tow981MDwpw9oIGJ83c7Cam+mRuV5UFxk=
Subject key identifier:   B5:8D:0B:FC:1C:2B:6C:54:BD:BB:31:C6:D4:6A:A1:4C:E5:74:24:37
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AF0D80B2ACE9CF02A48554480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/acb5e843-17e6-342c-aeed-1cdc6c5c1b09.roa
Signing time:             Fri 22 Aug 2025 12:10:04 +0000
ROA not before:           Fri 22 Aug 2025 12:10:04 +0000
ROA not after:            Thu 20 Nov 2025 13:10:04 +0000
asID:                     5400
IP address blocks:        23.230.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:d8:0b:2a:ce:9c:f0:2a:48:55:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 22 12:10:04 2025 GMT
            Not After : Nov 20 13:10:04 2025 GMT
        Subject: CN=9e78ece6-bbc4-4960-915c-7c5b258bb29e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:72:c6:4c:f3:e9:26:1c:5e:bf:e5:65:50:bf:
                    1f:69:49:3e:18:42:e4:1f:48:58:20:d6:64:d7:62:
                    56:c6:0c:46:9d:9e:a8:81:d4:6b:06:80:04:48:8d:
                    d9:dc:be:f9:6e:7c:9e:23:0c:4d:b7:0d:3e:ea:df:
                    cd:87:ca:66:7b:3f:01:e3:56:f8:02:13:41:a5:f8:
                    2e:1d:78:71:00:ea:74:20:1c:30:af:7d:80:fd:83:
                    34:a0:fb:cc:6d:3e:dc:69:38:4b:f5:05:36:c2:01:
                    e0:f4:09:97:1c:3d:20:42:af:13:f8:69:ad:c8:ac:
                    92:6b:69:42:76:64:b7:94:78:3c:e2:ca:14:30:dd:
                    ee:33:59:d9:c8:66:e1:ab:f5:c7:4f:84:8d:24:24:
                    2d:24:82:fa:81:39:2d:df:84:31:af:e2:f5:0f:1d:
                    6d:8d:8b:e6:f2:60:b5:c8:a3:16:9e:5e:53:07:95:
                    70:8c:d6:3b:c2:85:97:48:cc:86:9d:3a:93:8d:5a:
                    e7:e4:17:76:cc:bb:5d:86:9c:7f:b0:d9:00:9b:10:
                    81:4b:a5:c8:8f:bc:27:df:49:a7:57:24:fe:1f:0b:
                    82:b2:0d:ae:ad:0d:c2:c6:2f:1b:b1:6c:d1:77:73:
                    c4:4a:be:73:b5:70:45:c4:f4:53:16:36:dd:31:aa:
                    fb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8D:0B:FC:1C:2B:6C:54:BD:BB:31:C6:D4:6A:A1:4C:E5:74:24:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/acb5e843-17e6-342c-aeed-1cdc6c5c1b09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:0b:34:5a:da:a2:42:af:2c:f0:dd:65:01:32:81:13:29:0a:
         7c:42:c4:f7:3b:71:ff:c9:53:af:b3:eb:1f:8b:42:a9:4f:9f:
         33:6d:b2:39:d7:ba:ac:d9:ff:25:fa:f0:be:72:05:0a:e1:95:
         3e:13:2a:70:31:e2:75:16:3f:6d:b3:54:db:71:68:9e:4a:04:
         db:58:0b:40:e8:8c:c8:82:75:92:b0:c9:ee:f5:ba:f9:ce:80:
         4c:ae:cf:80:41:c8:5f:a9:5d:23:24:a7:ad:0d:22:34:13:06:
         22:4b:2d:e9:85:60:9c:03:23:4b:f3:b6:95:95:ea:59:b7:f2:
         0c:86:14:d2:89:92:72:41:64:f0:bb:07:92:07:46:f9:ab:ea:
         cd:6e:c0:16:76:23:61:3c:fb:fa:b0:13:4b:32:40:7e:63:21:
         13:ef:7a:fc:0b:c5:b3:0c:e4:59:d3:74:7d:81:21:96:d8:2f:
         79:65:a6:53:26:6e:b8:f1:9d:a4:43:8b:73:5a:9f:1c:bf:8e:
         cf:e0:9c:ea:96:ee:12:27:d8:90:db:e7:e3:76:fc:55:d6:3b:
         00:2a:eb:27:92:96:bb:84:9d:ed:7c:95:32:41:d2:af:87:38:
         97:92:a8:34:86:f1:7e:80:4d:88:8e:56:ce:b5:ac:80:56:8c:
         83:41:27:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:53:41 2025 by rpki-client