Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fe40c86c-bf75-3caa-9c30-1947870247ba.roa
File:                     fe40c86c-bf75-3caa-9c30-1947870247ba.roa (raw, json)
Hash identifier:          n+xKsum0u+pMiCDbhIP06m/9nJ/T+0fE0e2TQNe908E=
Subject key identifier:   4E:A1:D3:FA:14:26:07:1D:50:B2:25:B7:C5:B1:9A:D1:D6:AC:EA:DB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A4DA05215041312FA7398ABD8
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fe40c86c-bf75-3caa-9c30-1947870247ba.roa
Signing time:             Wed 25 Jun 2025 01:00:49 +0000
ROA not before:           Wed 25 Jun 2025 01:00:49 +0000
ROA not after:            Tue 23 Sep 2025 01:00:49 +0000
asID:                     214238
IP address blocks:        23.230.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4d:a0:52:15:04:13:12:fa:73:98:ab:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 25 01:00:49 2025 GMT
            Not After : Sep 23 01:00:49 2025 GMT
        Subject: CN=b7bc351f-ee29-448b-97fe-1d89c7d1a19e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ed:9f:97:f1:b8:51:da:9e:a8:eb:0d:27:4a:
                    8a:76:e0:71:eb:f8:9f:54:ac:5b:4f:f2:5c:32:94:
                    3e:71:7d:0e:a4:08:c1:12:85:c0:84:66:44:93:5e:
                    a4:9d:4e:10:f9:fc:13:55:92:a3:7b:39:d6:f3:fd:
                    77:09:8d:3b:b7:52:40:b7:8c:14:96:85:b0:7f:fc:
                    85:f4:a2:45:bd:b0:e1:3e:b9:e6:a0:bb:fe:c3:ed:
                    7d:10:64:64:17:92:a3:53:7f:3f:9a:08:8d:1b:a5:
                    9c:7d:20:04:e8:05:0d:ae:d2:1d:4d:e2:77:44:fc:
                    96:0b:94:f6:e7:ae:cc:08:b6:8b:be:71:7f:16:88:
                    29:38:bc:fa:fb:d0:8f:d7:ae:03:87:6b:21:f4:5b:
                    f8:94:64:0c:fd:49:06:25:12:ce:64:f2:c9:bf:93:
                    c0:3a:d2:a4:70:f5:d2:10:fd:7b:74:b7:12:2f:b1:
                    ce:78:04:ad:73:2f:ad:77:1a:44:be:38:3f:bb:06:
                    78:d1:6d:55:4d:f2:69:82:5c:3b:28:c2:84:21:dd:
                    5a:45:3e:81:b7:c7:cc:2d:25:0d:01:83:d1:a5:9c:
                    55:80:13:34:53:a1:e6:17:c3:1f:c9:04:22:26:9c:
                    c2:78:18:b2:55:23:6e:21:ac:de:a9:a5:44:e3:71:
                    a7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A1:D3:FA:14:26:07:1D:50:B2:25:B7:C5:B1:9A:D1:D6:AC:EA:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fe40c86c-bf75-3caa-9c30-1947870247ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f7:4a:76:6b:1e:25:6f:3b:a1:98:35:ed:50:e0:20:c4:f1:
         61:55:33:52:26:68:15:aa:24:68:34:84:1c:92:84:a6:a4:2e:
         fa:74:f2:a5:e7:62:5d:f6:03:a6:c9:7c:a9:47:9d:6d:df:2d:
         cc:11:8d:b6:f3:60:2c:bd:8a:cc:9a:a7:6e:96:56:21:d5:8e:
         51:48:44:3a:58:7e:7e:7c:b2:c2:c3:f9:a8:a0:3f:ec:52:84:
         39:db:19:e3:8c:1d:0e:5d:a4:8f:15:1f:4f:eb:50:64:5b:53:
         62:8f:86:1d:93:0c:10:1b:92:e8:2d:bc:a0:23:6e:3d:a9:45:
         75:70:be:5f:28:10:81:55:ff:67:ff:b5:a6:06:0b:91:2a:b5:
         d3:fe:6f:43:3d:72:8f:5f:0a:94:3b:64:4d:c7:6c:69:1a:89:
         7e:d6:c6:2a:b7:61:7f:e4:5d:e7:d9:cd:d9:18:d5:a4:a1:4c:
         bb:05:0b:e6:fe:93:07:bf:dd:67:1f:a8:6e:75:d1:27:e7:c0:
         79:dd:0d:56:42:35:77:36:95:e7:6a:04:68:87:31:27:a4:0f:
         83:ab:59:e5:de:6f:ed:9b:66:ea:87:9a:b0:f5:cb:03:79:c9:
         49:31:38:a4:85:b2:85:91:f8:dd:73:8f:72:e9:8e:74:9a:75:
         d6:20:00:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:25:09 2025 by rpki-client