Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0fd5bed-a231-3a28-aac4-a1195018a2c6.roa
File:                     d0fd5bed-a231-3a28-aac4-a1195018a2c6.roa (raw, json)
Hash identifier:          3WiTtbXyMYcOR+eC3i2NuAzEULLDVUwWakBLsKBFhFw=
Subject key identifier:   0E:38:82:43:DE:EE:9C:6C:65:0E:C4:FF:59:20:41:58:F3:E2:09:11
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B64CE71394CEE9D4245D51E80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0fd5bed-a231-3a28-aac4-a1195018a2c6.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     44559
IP address blocks:        23.230.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:71:39:4c:ee:9d:42:45:d5:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=1bc26f9d-08ba-4e52-ab2a-dce8cdabb435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f7:bc:83:14:60:cc:ba:df:81:32:ef:8f:e1:
                    72:94:c8:ec:27:bb:18:69:9a:80:ad:09:6f:1b:3b:
                    ed:43:76:77:77:84:01:73:ea:14:b3:2d:52:f1:49:
                    b5:f0:8d:14:23:f9:30:b2:b0:31:5c:fd:f5:26:2c:
                    cd:74:15:34:09:ba:65:69:3f:74:30:01:89:02:60:
                    3b:c3:3c:e3:2b:d1:ab:26:88:60:f7:25:5b:35:ab:
                    a1:fe:63:20:f8:96:a2:10:16:4b:ee:e5:02:9e:df:
                    6a:0a:e8:03:16:42:f8:b8:9a:5f:e8:f2:07:49:88:
                    78:13:28:3a:a6:dc:89:84:e5:33:67:41:b1:e8:0c:
                    90:25:2e:83:9e:ed:07:1d:60:b1:f6:77:e3:7c:a9:
                    a6:7a:87:86:e6:b4:30:02:11:e5:59:ae:fe:16:1e:
                    b5:e6:47:a3:b3:60:eb:cd:34:b9:e0:7c:86:32:15:
                    f9:b6:dc:13:f6:76:d9:21:b0:8b:3e:c1:cd:48:87:
                    e2:b1:46:69:17:5d:63:d0:8c:1a:f7:cc:74:8f:80:
                    27:f8:d4:4a:0c:e6:0d:09:d2:e2:20:1f:84:b2:c0:
                    d3:bf:f1:83:00:4b:29:fc:17:50:0d:3d:56:a0:78:
                    cb:7d:e7:12:be:7b:fa:f1:58:fb:4b:e4:e2:64:1f:
                    94:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:38:82:43:DE:EE:9C:6C:65:0E:C4:FF:59:20:41:58:F3:E2:09:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0fd5bed-a231-3a28-aac4-a1195018a2c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:49:e6:46:2c:d2:1d:c4:f2:df:24:2e:81:66:c6:e5:05:fa:
         4f:18:ff:ba:35:86:1b:1f:b2:bc:d2:7d:ed:fd:ef:63:79:e8:
         4a:b9:05:ab:e5:20:d8:09:1f:f0:54:a4:a6:c9:8d:dd:46:f0:
         6d:98:91:3d:74:c0:3f:94:1d:a7:1d:bd:5a:f0:47:2c:82:13:
         58:34:d8:4a:1c:cb:5f:fd:ac:fd:fd:85:ae:ce:ba:65:6f:c0:
         05:05:45:49:bb:c8:8e:56:ca:94:a7:cd:e5:7d:e1:78:47:84:
         55:49:a1:6a:a5:e1:01:ae:9e:cb:b0:b4:37:16:6f:31:24:15:
         1a:81:7f:d7:02:ae:7d:07:7a:78:3c:e5:91:fc:13:16:d8:3a:
         a5:70:df:57:e3:fb:51:74:d2:45:a6:fd:0a:30:e8:fb:6f:2f:
         ca:62:8c:20:2e:88:14:23:af:a9:ca:47:20:45:fa:7a:7b:78:
         e8:95:a3:ff:63:22:f4:18:64:89:c4:e5:b0:c4:50:ae:61:11:
         48:57:5f:4f:dd:e6:1a:2c:f1:06:31:16:a5:1e:ae:69:46:c8:
         a9:b4:1a:ff:fa:71:51:af:09:e4:a2:4d:c5:53:45:53:b4:9a:
         aa:af:ad:0f:d7:78:20:b1:88:bb:7f:80:e6:1a:ac:9e:74:b6:
         9c:cb:ef:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:21:07 2025 by rpki-client