Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/36c412f5-7cc0-3219-98df-a2a10184772c.roa
File:                     36c412f5-7cc0-3219-98df-a2a10184772c.roa (raw, json)
Hash identifier:          XiUMmV2D0lXTeKYwBq4sAQWiWr0yL6TtK60235Ihcqw=
Subject key identifier:   4D:04:9F:C4:02:2D:21:4B:6A:E1:87:FA:7E:A6:35:71:6B:A5:9E:CB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A90A0F115E150D68BC4F82640
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/36c412f5-7cc0-3219-98df-a2a10184772c.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     44477
IP address blocks:        23.230.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:f1:15:e1:50:d6:8b:c4:f8:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=80028bad-2cc9-4cc8-b110-268bcc5a91ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d1:dd:db:f5:35:99:86:88:e4:d3:a6:b4:8d:
                    c5:97:9e:4c:d2:e3:33:a7:ef:0a:93:65:b6:90:3d:
                    95:81:25:ca:e8:d4:5e:67:ab:11:f1:36:99:6a:d7:
                    32:df:fe:db:c5:00:71:56:af:8a:a0:10:42:a1:9d:
                    d7:a0:e7:37:4d:9d:0b:f2:72:ed:db:13:c5:19:4a:
                    80:c9:5d:75:57:ad:3a:d5:ec:62:a8:59:cf:57:41:
                    f3:40:88:69:21:2e:76:45:b2:9f:f2:c8:86:be:49:
                    86:44:3b:dd:13:18:76:95:90:49:be:a4:f4:92:54:
                    41:02:65:07:ca:7a:e0:92:a3:01:cc:09:01:23:c8:
                    7f:96:18:bf:a0:e5:b7:0f:8b:ff:57:2c:68:93:b4:
                    d1:31:84:11:3d:44:49:ba:2b:62:15:fd:5a:cc:50:
                    1b:e8:f2:40:66:6d:dd:bc:09:9c:1b:1a:84:03:e4:
                    1c:a9:4d:60:3c:4b:b2:4f:f7:7b:c0:7d:64:6f:10:
                    ad:68:8c:c4:49:dc:ba:b6:5b:84:9a:52:70:d7:3b:
                    ea:fc:08:7b:42:ea:f7:55:b3:19:c6:84:a9:6b:53:
                    fb:f2:70:55:b9:e9:15:84:3e:60:d6:29:9c:91:2d:
                    d5:70:a7:9e:4a:9d:4c:d1:57:88:e6:27:6e:38:19:
                    28:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:04:9F:C4:02:2D:21:4B:6A:E1:87:FA:7E:A6:35:71:6B:A5:9E:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/36c412f5-7cc0-3219-98df-a2a10184772c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:df:0d:df:f5:c0:91:92:ed:1d:0d:18:5d:20:9c:ce:1a:88:
         05:63:41:e9:8d:08:ea:2d:5c:63:1d:bc:0d:9f:df:fa:dd:7f:
         0c:b1:cd:37:c2:b4:ea:b5:fe:0a:f7:52:42:2c:cd:43:5e:c0:
         45:ca:53:86:49:f0:7a:c1:6b:2b:3f:c5:5d:b9:b4:f2:84:d6:
         26:3f:76:23:ba:a5:db:12:fa:07:e7:10:2e:87:dc:38:f6:06:
         de:a9:c2:dc:27:b8:92:a0:e4:ba:89:b3:e2:95:a2:47:65:63:
         12:84:db:54:98:01:da:94:11:b6:50:b9:87:9e:56:ff:f0:25:
         c3:7a:f8:fd:1a:86:23:67:b2:4a:9d:8b:63:20:08:5f:50:f6:
         c7:aa:2c:22:9e:44:7c:93:81:b2:b7:60:1a:46:d9:b3:dd:ef:
         1f:9f:c4:80:30:28:c0:80:b2:85:b9:d6:4e:57:17:3a:44:1b:
         f9:70:38:19:14:ad:29:c0:1c:49:c3:a6:66:22:9c:26:c7:19:
         9e:6b:d1:56:c9:e3:b1:ad:c2:74:2f:6b:cb:43:6a:9f:64:95:
         51:5f:50:b1:3f:5f:ea:74:1a:4f:b5:38:0c:01:d9:2f:80:9c:
         c7:49:7f:51:a7:98:a7:16:dd:61:86:d7:1d:c6:f1:5e:95:ad:
         aa:60:3b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:17:56 2025 by rpki-client