Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df2c039e-b712-3c31-8fea-2a1b8df1f43f.roa
File:                     df2c039e-b712-3c31-8fea-2a1b8df1f43f.roa (raw, json)
Hash identifier:          ysyCejGMMcreGqgcMnGvg5JX53Z6hNNcCAlLG5sz+7E=
Subject key identifier:   D3:FB:7A:C5:37:D3:DB:84:2C:4D:B4:38:06:1F:2A:83:19:08:09:93
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B14A00D3AD5A3D3029914480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df2c039e-b712-3c31-8fea-2a1b8df1f43f.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     44893
IP address blocks:        23.230.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:00:d3:ad:5a:3d:30:29:91:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=089ba39b-6d77-4b79-b578-62e0d9b40629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e3:fe:17:8d:94:7b:9f:15:03:d4:74:a2:3b:
                    ad:2d:b0:d1:77:7b:c5:ef:7c:0e:38:e3:a4:34:d2:
                    24:5c:36:23:ec:c6:e2:85:8d:bd:ae:74:6c:1c:85:
                    5e:47:e7:cc:2d:f8:ac:29:5a:50:86:a2:74:7d:29:
                    e9:b9:72:9a:ba:7a:ab:45:0f:da:c5:e8:de:e1:a1:
                    fa:b3:92:ea:a0:b7:94:e4:54:6c:da:6c:bb:a4:bf:
                    29:2c:44:59:2a:46:eb:08:3b:ed:0c:a3:f8:a2:88:
                    58:d6:ec:7a:a6:68:f5:9b:cf:f5:9d:98:84:35:ab:
                    54:9f:e9:24:58:77:96:ed:06:c3:65:d5:f2:c9:73:
                    02:2d:a3:7a:15:b5:36:ea:9a:b1:b0:0a:00:00:25:
                    26:73:87:5b:4d:44:00:a6:71:97:11:a9:a5:90:96:
                    8e:d0:3d:19:f8:f9:94:be:0c:2b:ab:ee:9f:b3:2b:
                    fb:0f:4b:9e:1f:55:5c:39:58:66:4f:66:1f:a2:05:
                    71:d0:5b:8d:19:86:23:47:dd:f2:b0:a2:c9:fe:aa:
                    86:c0:06:5c:c6:dd:2c:86:b2:20:92:0a:e3:15:ac:
                    83:e2:3e:2e:96:dc:2c:b7:5b:bc:7c:5d:07:8d:8d:
                    49:90:76:75:6e:d0:0a:ed:07:7e:78:50:3b:54:b8:
                    fe:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FB:7A:C5:37:D3:DB:84:2C:4D:B4:38:06:1F:2A:83:19:08:09:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df2c039e-b712-3c31-8fea-2a1b8df1f43f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:35:fc:55:f6:f1:59:f8:b1:07:3b:57:88:a4:26:3b:d0:97:
         80:4e:d7:2f:f6:ac:80:77:1f:d4:73:6f:ce:da:ed:31:fa:e6:
         52:e2:72:35:1a:f0:88:80:1c:55:1b:81:ac:ac:c0:43:ed:6e:
         f9:67:88:fc:95:3a:e1:3c:43:5c:cf:09:5d:b9:b7:fe:02:f9:
         89:e9:5d:41:a2:3e:be:d4:ca:5c:b9:c1:63:06:9f:6c:be:c3:
         64:4a:de:fd:c4:c8:20:35:c4:df:2a:67:b6:07:f6:a3:82:f8:
         28:28:06:8c:41:6b:a3:b6:d4:70:3b:5a:6d:ac:a4:c5:fb:81:
         5c:44:c1:60:ad:d2:54:d5:34:54:b5:d1:7b:9f:9b:87:f4:be:
         e5:3b:0f:c3:f3:eb:ff:0a:d1:a0:09:69:4a:ce:fc:19:cf:ec:
         01:ed:8f:80:9f:2c:39:74:29:15:c7:8f:c4:4b:86:28:1d:03:
         c7:26:99:2d:df:d7:45:cd:b5:be:fc:6c:76:25:8f:28:c1:2b:
         28:a4:72:ef:6e:85:c7:6e:55:8a:70:e3:0c:65:3e:fd:ad:e0:
         91:23:13:9e:d1:5b:bd:2a:28:bd:cf:d9:81:6a:45:55:5d:10:
         36:8f:a5:92:40:29:bd:2e:ea:05:72:57:01:c4:4a:3e:92:46:
         62:5e:19:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:08:50 2025 by rpki-client