Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/39d6c1b2-e873-3848-99a8-0540a93b366c.roa
File:                     39d6c1b2-e873-3848-99a8-0540a93b366c.roa (raw, json)
Hash identifier:          L0uhP+aLuu3rlNi1TNV9yKv2Xd2xRtJmp4g9n+HQgj8=
Subject key identifier:   D1:BD:58:DA:C3:99:AB:46:50:C6:F5:FD:AA:03:2A:88:6B:61:88:6B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AA2C63796840C5D090E8C9600
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/39d6c1b2-e873-3848-99a8-0540a93b366c.roa
Signing time:             Fri 25 Jul 2025 13:01:04 +0000
ROA not before:           Fri 25 Jul 2025 13:01:04 +0000
ROA not after:            Thu 23 Oct 2025 13:01:04 +0000
asID:                     18779
IP address blocks:        23.230.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a2:c6:37:96:84:0c:5d:09:0e:8c:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 25 13:01:04 2025 GMT
            Not After : Oct 23 13:01:04 2025 GMT
        Subject: CN=72fc4061-94e3-4bf8-8a11-f443bbd92c0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f7:12:42:e5:16:0e:33:5e:ac:c6:d8:6f:ec:
                    0d:fd:64:09:da:99:a3:ef:af:74:65:51:ee:fa:00:
                    3c:9e:e7:38:a3:f7:dd:e2:66:bc:b8:ff:75:9b:dd:
                    aa:1c:43:80:dd:a8:af:bd:4b:93:2f:c5:0b:1a:11:
                    26:62:7b:62:d1:69:dd:79:07:9f:80:85:fd:78:c9:
                    6a:97:52:ee:26:3c:c8:d3:01:5f:16:fb:c3:f5:1e:
                    23:9e:8b:15:2e:ed:76:2e:84:5f:32:9e:b8:dd:dc:
                    b6:0c:fc:f3:e7:0d:47:22:d1:c1:3f:73:b4:3b:c8:
                    6e:53:a7:c0:6c:a0:e1:1b:ca:a9:04:e1:28:97:08:
                    b3:84:81:90:8b:99:10:96:72:de:f5:61:9f:48:ac:
                    01:a9:b5:8a:4d:b8:9d:dc:8a:50:c1:2d:f4:57:47:
                    e3:d1:e8:7a:3f:7e:03:d2:91:f6:f5:f9:d5:1f:32:
                    67:d8:51:b3:ab:e2:58:ae:f4:a1:c2:a2:1a:df:a2:
                    37:4b:b9:6f:ee:41:88:03:85:40:08:56:b3:ad:0b:
                    87:6f:78:64:24:85:1b:62:8c:64:07:8c:7b:9e:f6:
                    87:3c:c7:48:43:45:b5:93:1a:32:27:d9:fb:b5:e2:
                    77:1e:b4:50:37:de:69:87:14:7b:7d:5a:cf:0f:ee:
                    de:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BD:58:DA:C3:99:AB:46:50:C6:F5:FD:AA:03:2A:88:6B:61:88:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/39d6c1b2-e873-3848-99a8-0540a93b366c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:d1:50:60:ff:d8:11:ba:54:88:7f:ac:49:7d:04:5c:5a:f4:
         93:fa:10:25:f6:88:36:49:39:1b:65:75:bb:d8:33:71:3c:0b:
         9f:8d:31:5b:91:c3:3a:40:f8:83:31:e5:b5:6e:91:f7:a0:f3:
         84:16:1d:b8:28:fb:65:f4:22:71:d9:fa:5b:e6:01:21:12:51:
         9e:6b:ea:78:f3:65:de:26:2c:94:c8:9b:de:18:c2:82:1a:6b:
         02:93:4e:eb:8e:85:4c:7b:c8:e4:31:a5:dd:eb:20:f0:0a:34:
         b9:f2:04:67:4c:fd:41:51:14:03:1a:97:0f:5e:e2:20:3d:fb:
         13:19:5e:08:3e:ce:1b:f5:41:00:1e:32:64:e5:56:d5:0c:61:
         a0:cc:b1:3a:76:be:b4:5f:0d:5c:79:aa:55:80:bd:c3:e3:50:
         fb:35:1d:96:98:c2:60:ad:d7:b6:a5:86:2c:7c:bf:f2:9a:b3:
         d8:b6:41:df:a2:fc:8c:cc:94:c9:4f:95:12:97:e5:7f:89:e6:
         c6:1f:26:8a:98:ca:58:36:be:c1:00:18:23:6d:8e:7c:e3:3a:
         48:fd:1a:dd:ac:52:5b:d5:d3:cf:30:d7:62:c3:17:93:b0:94:
         22:eb:c3:81:34:5f:db:a6:4b:69:d8:c7:ec:42:12:53:26:c9:
         b3:b2:48:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:09:47 2025 by rpki-client