Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1ca06fb5-4411-3c11-9296-5e864a03eb5a.roa
File:                     1ca06fb5-4411-3c11-9296-5e864a03eb5a.roa (raw, json)
Hash identifier:          lvfE0JhYUt21gTKt9yPVxJvYIyuIoEJfBWGF0V2xPDs=
Subject key identifier:   DC:AA:12:B8:78:EF:EB:92:ED:07:36:41:A1:85:06:22:4D:08:7E:F8
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A94D0ED80BF39CC29E8035080
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1ca06fb5-4411-3c11-9296-5e864a03eb5a.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     400402
IP address blocks:        23.230.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:ed:80:bf:39:cc:29:e8:03:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=5ee8e762-6eef-41b4-a67c-5b5388687202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b6:b9:6a:fe:08:1a:3e:61:df:1f:4b:ab:7b:
                    e8:c7:9f:92:d8:02:d2:2b:c0:13:b5:8d:96:cf:8c:
                    ac:9f:4a:0f:7e:bc:ab:8a:e6:6c:67:5c:ad:18:70:
                    1d:c7:b6:c2:1f:c5:86:04:db:e9:25:fa:6f:d7:48:
                    a6:7b:ed:61:2d:a4:27:17:f4:46:8f:99:b0:92:87:
                    32:13:92:e5:c0:16:b2:7d:4c:ef:dd:d6:78:85:08:
                    7b:6a:2b:01:31:0e:b5:d6:36:fe:97:3f:75:49:34:
                    7b:8d:d0:67:76:4c:dc:b5:a5:ba:27:f1:76:ee:5a:
                    bc:7f:a1:1b:aa:15:d3:78:2a:19:06:92:52:0b:dd:
                    72:9b:91:a0:ec:32:23:53:fe:38:87:f7:a2:5b:34:
                    54:87:04:e0:ec:8c:61:c0:8a:47:73:60:23:c3:56:
                    f1:c8:aa:c9:05:32:17:70:5b:f3:a2:ff:f2:ed:7f:
                    f6:31:d2:da:db:37:c7:ae:6b:df:73:ea:f7:54:76:
                    24:a0:e6:91:7c:25:9b:94:00:15:55:97:42:aa:a8:
                    a7:de:7d:7b:dd:e2:3e:ae:e7:2a:a3:b3:7a:8b:89:
                    85:70:79:9f:f8:4f:95:9d:21:0d:6e:eb:f9:f9:5c:
                    d2:02:73:19:2d:07:42:66:7f:65:d7:cd:35:cf:8d:
                    8b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AA:12:B8:78:EF:EB:92:ED:07:36:41:A1:85:06:22:4D:08:7E:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1ca06fb5-4411-3c11-9296-5e864a03eb5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:d5:d1:50:80:ae:f3:08:3c:4b:ba:76:6c:33:73:d9:3d:21:
         43:84:41:16:47:4e:4c:f7:2d:6e:f0:7f:76:7c:db:e9:ad:5e:
         a4:68:92:ee:4b:17:64:7a:3a:8b:68:46:35:40:ab:c3:b5:3a:
         95:59:91:1e:6c:e3:0d:e0:b2:be:e7:a9:86:64:08:c7:5f:3f:
         b1:d4:60:3e:a3:2b:b4:c4:7c:95:33:7c:65:8d:98:53:63:ce:
         72:aa:bc:cf:f9:cf:04:50:dc:84:ac:b3:c5:36:76:67:d6:6b:
         74:38:73:eb:1b:ba:55:cc:e0:35:84:95:77:3e:f5:d1:2c:bc:
         48:39:e4:02:35:e8:be:03:d9:6f:5b:5c:4b:f5:88:bc:ac:31:
         f3:75:07:cd:e5:4d:fc:e8:fe:52:03:ad:36:ed:17:de:dd:ce:
         24:46:c4:22:0c:bb:f1:74:22:5c:0a:30:39:e2:bf:d4:29:fa:
         47:13:3c:0c:68:a0:1b:ca:33:fd:50:73:d1:39:50:c0:2a:e4:
         d7:a6:3e:55:fb:3b:3d:00:71:9c:c0:91:15:4e:6e:b1:8e:47:
         08:ac:82:87:bf:a9:eb:8b:55:a2:06:73:56:b2:dd:54:e0:9b:
         d2:e2:ef:45:9a:ce:0a:c3:b4:76:5c:4b:e9:fd:a8:31:ad:bb:
         ad:42:b9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:01:04 2025 by rpki-client