Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/51cc637a-e30c-323c-88a1-981315dde4da.roa
File:                     51cc637a-e30c-323c-88a1-981315dde4da.roa (raw, json)
Hash identifier:          VM2UEEWmypcTBIvPWYc2UR8V/98trTwtUUDRfafIHLw=
Subject key identifier:   F6:A5:F1:FB:A7:AA:C4:63:8D:37:01:97:37:FC:28:5D:C7:A6:D3:17
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A0D6A98F3B6E0C95DB15E5900
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/51cc637a-e30c-323c-88a1-981315dde4da.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     397032
IP address blocks:        23.230.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:98:f3:b6:e0:c9:5d:b1:5e:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=ad830abe-28dd-4289-8313-a710a7d3f234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ca:bb:1a:14:78:55:d5:ea:fc:01:ca:89:5a:
                    0b:5d:bb:b6:b1:32:af:02:df:98:09:41:98:f1:b6:
                    3b:0b:d4:9f:02:6d:7e:11:82:28:22:b0:42:ec:d1:
                    12:c2:23:16:26:66:56:bd:07:5a:c7:0d:89:1a:fc:
                    e8:d8:71:12:7b:93:7d:01:ef:cf:85:03:31:64:53:
                    15:4f:2c:38:53:93:ae:91:8c:b6:34:3d:63:44:f2:
                    ad:a3:3d:a7:b1:65:0d:fb:7e:3a:f3:c5:eb:e4:d9:
                    c1:5e:74:17:14:80:31:ed:3e:87:46:98:37:52:0d:
                    c7:b9:63:7f:79:2d:50:a0:7d:09:d7:42:2c:f9:97:
                    f0:2a:15:fd:f5:dd:8d:17:61:0f:8f:2d:95:cb:fc:
                    78:b1:d5:37:f3:3c:9b:e9:31:4a:ba:99:d0:a1:ca:
                    ff:04:dd:62:84:53:0e:2b:a3:c3:40:fb:3e:f7:06:
                    22:96:fc:a8:5e:1b:68:23:e4:d6:77:84:80:05:eb:
                    d3:1a:9b:24:fe:cb:c1:68:2a:2b:a2:3e:8f:2d:78:
                    38:1c:a4:3f:83:00:36:7c:c5:d1:b1:0f:af:aa:dc:
                    2a:f4:4e:ff:8f:44:3e:8d:55:e3:1d:a7:e3:09:4d:
                    45:e8:e0:eb:b1:d4:79:48:4b:bb:bc:1e:03:02:13:
                    03:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A5:F1:FB:A7:AA:C4:63:8D:37:01:97:37:FC:28:5D:C7:A6:D3:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/51cc637a-e30c-323c-88a1-981315dde4da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:74:c2:70:ac:5c:b7:06:f9:80:a4:3a:1a:3d:b8:d9:6d:6c:
         43:cf:23:9b:90:0d:15:ed:98:fd:2f:36:05:1b:c6:bc:91:72:
         78:86:d2:f7:c8:a1:e4:61:2a:e6:8f:1e:08:d3:7d:e6:2b:0d:
         76:27:99:90:12:a5:a6:0e:a1:97:36:82:8f:9f:f5:77:18:36:
         26:b3:7c:d9:b0:41:49:c8:36:1a:ab:38:55:11:b7:07:3d:b1:
         87:f8:11:e3:9b:61:be:91:7b:96:64:46:15:c1:90:2b:20:d9:
         55:4c:6c:d9:63:46:30:bd:36:80:11:ba:f1:e4:77:97:58:b0:
         4e:63:08:69:2f:ed:9c:4b:c5:d8:44:79:85:7d:e7:73:84:61:
         28:37:d2:95:67:a2:31:4e:d3:fa:b1:78:26:17:24:61:39:23:
         b7:fe:6f:25:64:66:6e:55:95:9f:06:df:6b:b2:33:05:0b:de:
         a4:bc:72:21:b0:6e:90:e5:41:e9:80:7b:66:14:44:7d:5c:02:
         2a:09:3e:c6:a8:01:55:4c:f2:ca:87:ee:42:6d:b0:b5:47:46:
         f2:e5:fe:f5:9b:5d:43:1e:ea:55:7a:e0:70:fa:14:fb:23:12:
         a8:54:86:2d:30:50:13:89:fa:d3:2d:fc:05:54:11:1f:60:7b:
         b8:3b:7f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:01:51 2025 by rpki-client