Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fba7e22b-8fa7-3793-b17f-8927471c9160.roa
File:                     fba7e22b-8fa7-3793-b17f-8927471c9160.roa (raw, json)
Hash identifier:          MeBhHqZ8U7HqtpkykTvWj0AWGWIgV8PRcwCEDsgITp0=
Subject key identifier:   EC:42:75:6F:03:10:7A:D3:27:DA:9E:4E:82:95:E6:61:42:0C:46:95
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AE891348A79C1850E7463CA00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fba7e22b-8fa7-3793-b17f-8927471c9160.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     64267
IP address blocks:        23.230.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:34:8a:79:c1:85:0e:74:63:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=a402aa5a-6bd1-4535-9511-dcef7993a6c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:99:8f:03:5c:5f:23:b4:4e:52:45:16:a7:4a:
                    f2:26:1e:5e:b2:04:7c:9c:83:57:ad:36:c3:e2:68:
                    24:0c:07:67:ff:e8:26:57:2c:a2:9a:d8:ff:af:bd:
                    de:3b:2f:81:09:a0:13:99:6a:bd:33:b5:b0:07:40:
                    da:9d:4e:4b:49:7f:5c:6c:5d:be:17:ab:ad:a3:8a:
                    98:45:5d:ab:f9:d5:8a:37:e0:d9:87:38:50:e8:23:
                    91:60:0f:43:90:c7:79:7a:73:b7:21:46:06:b3:d3:
                    8c:88:e9:ed:0a:c7:c0:bd:d7:26:53:2c:c5:62:77:
                    bf:81:2e:6c:d3:13:59:70:ae:32:c0:02:50:3b:c0:
                    02:c0:e5:8d:57:8b:81:e9:b1:ca:e8:c1:7a:c8:06:
                    29:d9:41:9b:e4:ef:70:6a:b6:9a:aa:d9:35:6f:e5:
                    4a:7c:59:7a:1e:b3:78:33:17:89:8e:b1:4d:89:72:
                    8b:ae:d4:a5:b1:bd:c3:0d:9d:0f:d2:12:13:d4:f9:
                    30:27:32:38:e6:4c:99:8a:ee:0e:d1:c7:b3:c3:29:
                    d6:f0:e3:37:e8:6d:40:a1:30:78:b4:e1:ae:2c:13:
                    ff:da:e9:76:20:8a:44:36:f6:c1:f4:ac:d9:43:4a:
                    be:f4:75:cb:cb:f2:b2:f6:19:02:8a:c7:63:7d:6d:
                    91:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:42:75:6F:03:10:7A:D3:27:DA:9E:4E:82:95:E6:61:42:0C:46:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fba7e22b-8fa7-3793-b17f-8927471c9160.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:65:0e:a8:9c:37:f3:bc:f0:ae:49:db:98:f2:b6:d8:07:ea:
         55:4c:d2:db:fb:f5:34:31:97:c4:b4:e9:eb:9c:13:51:64:9f:
         34:6f:b7:40:82:7a:52:b6:ef:cf:49:09:28:df:8f:93:ac:92:
         05:0c:72:1a:b4:d2:89:20:90:e9:09:ed:50:5c:79:8a:f8:44:
         ee:78:aa:be:3a:20:4e:e3:b0:60:f4:e8:7e:4b:70:7a:7d:ab:
         6d:1c:4b:47:b1:d2:f0:7f:00:48:65:5a:3c:6e:00:7e:4b:b6:
         37:6a:30:e4:d7:48:e3:4a:74:7a:81:71:17:60:1a:dd:69:a7:
         d4:8a:64:60:2b:e1:b1:46:4c:f2:d5:82:a1:9a:a7:f4:04:80:
         f9:34:01:94:71:8a:74:41:c3:3c:7a:e0:a7:f3:1e:4d:62:5c:
         a8:a4:73:42:9b:bf:18:b1:fc:49:cf:89:f9:f0:b5:f7:9e:a0:
         86:58:6a:04:ad:32:1a:70:32:f1:b5:e6:6a:f3:c3:cb:54:ef:
         e7:90:5b:eb:a9:13:51:bf:79:21:df:cc:49:89:c3:26:c5:34:
         b7:8c:e9:ff:86:7d:55:43:b6:e3:79:e1:3e:3d:ce:8b:32:4b:
         57:3c:f7:88:7c:24:f0:e4:94:af:e2:6f:42:0b:58:27:ab:07:
         31:22:92:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:30:30 2025 by rpki-client