Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4ddf83f6-86b5-39b5-a27c-a559dc02faca.roa
File:                     4ddf83f6-86b5-39b5-a27c-a559dc02faca.roa (raw, json)
Hash identifier:          S7PdQZCvtBWBSzg2YH4t3WPj+7W50OwI1zmKPQseiwc=
Subject key identifier:   2C:78:57:97:CB:56:66:BE:95:AB:A9:71:69:B6:12:44:B5:F6:EC:5A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A82AB50B60B5883F50269C940
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4ddf83f6-86b5-39b5-a27c-a559dc02faca.roa
Signing time:             Mon 14 Jul 2025 01:00:50 +0000
ROA not before:           Mon 14 Jul 2025 01:00:50 +0000
ROA not after:            Sun 12 Oct 2025 01:00:50 +0000
asID:                     7922
IP address blocks:        23.230.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:82:ab:50:b6:0b:58:83:f5:02:69:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 14 01:00:50 2025 GMT
            Not After : Oct 12 01:00:50 2025 GMT
        Subject: CN=110e2a26-9b19-477a-b283-153a0376227d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:48:15:a1:bb:f8:41:67:eb:65:60:61:64:c4:
                    72:68:c4:45:1f:f7:f8:d4:44:de:18:16:62:c3:83:
                    f1:78:37:5e:f3:bf:00:7e:9c:53:02:e9:68:12:32:
                    56:06:54:0f:bd:de:5d:7c:96:83:02:71:0f:62:7b:
                    e1:5a:5f:da:be:13:a9:31:e5:07:df:71:7b:43:77:
                    62:f0:d7:28:ce:13:d8:bd:1a:74:c4:d0:09:ce:a9:
                    db:30:77:fd:84:af:d6:e5:66:ab:cc:8f:db:70:fe:
                    f9:8c:7a:8e:07:c2:35:5b:35:bd:cc:36:e4:5d:95:
                    16:ae:a1:f2:7b:6d:85:43:dc:d9:13:af:f5:74:af:
                    6f:94:1c:a4:68:b3:dd:52:8d:bb:76:0a:81:19:61:
                    4a:ab:e1:4b:9b:6f:22:63:16:f3:8a:f5:a8:f9:df:
                    64:09:56:2d:d0:b7:e2:a6:de:31:ee:30:90:f8:c4:
                    30:27:f7:e3:bc:7d:69:ff:73:5e:5f:82:bf:61:f2:
                    36:b8:87:67:37:ce:e9:55:03:69:2f:3a:63:67:00:
                    a1:cd:82:c6:38:ff:8b:41:2e:43:1b:2e:b0:d2:40:
                    7c:74:7f:ec:e5:93:b4:c7:9b:43:2f:16:2b:8c:95:
                    2b:20:14:46:65:f1:9d:46:24:b9:db:ac:d3:1b:91:
                    a6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:78:57:97:CB:56:66:BE:95:AB:A9:71:69:B6:12:44:B5:F6:EC:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4ddf83f6-86b5-39b5-a27c-a559dc02faca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:fb:c8:30:32:e9:d8:06:e1:e6:b1:d2:00:1b:c7:d8:84:97:
         ac:a0:66:e8:c8:44:d2:fe:35:de:89:0f:78:cb:bf:dd:21:3c:
         29:88:e4:1e:2d:a0:f7:da:98:62:f4:12:e5:b2:24:95:a6:b9:
         7a:22:5b:14:49:29:2c:69:44:8d:b6:7d:75:3e:9d:a8:f0:c8:
         c6:ef:c3:d4:31:84:8e:8a:d0:7e:0d:5d:a8:e0:d1:c2:b0:66:
         96:3e:29:2a:12:70:05:fe:34:c4:e6:f3:db:1a:5b:cc:9d:03:
         62:b0:c8:23:a1:91:93:e7:da:f4:df:83:7b:91:2e:d8:2d:45:
         52:4a:29:81:c0:18:de:2d:1c:4e:f1:c1:c2:52:b0:29:11:f3:
         b7:2e:0d:f0:c6:30:41:c4:47:6b:3b:7d:0b:8b:92:e5:d6:fa:
         ae:73:fe:8f:10:ac:0b:6d:ca:a6:33:a5:4d:9a:fc:f2:ad:13:
         0e:5a:80:a4:5e:46:c3:02:e3:4f:60:1a:d3:06:fd:e9:a5:7b:
         01:6e:d5:d4:51:e8:84:c9:35:80:28:d1:05:94:cf:2a:2f:51:
         f3:d1:04:17:85:cf:71:66:2f:1e:14:72:b9:92:60:1a:a5:19:
         25:54:8a:57:12:9a:6c:d5:44:73:9a:ec:ec:6d:3f:94:e6:66:
         52:e8:c4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:50:48 2025 by rpki-client