Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/64c858a1-a453-3f84-b7aa-304fe08d9e57.roa
File:                     64c858a1-a453-3f84-b7aa-304fe08d9e57.roa (raw, json)
Hash identifier:          kORIEXnmMXfamlNdo7Pz4V7ZNh7cPH4q9PSb9rrD/HM=
Subject key identifier:   2E:82:33:58:1A:4F:62:9F:0B:A3:F0:A9:7A:9E:41:2A:A5:5D:8B:DF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A90A0F0A97A98F376F67FCF80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/64c858a1-a453-3f84-b7aa-304fe08d9e57.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     44477
IP address blocks:        23.230.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:f0:a9:7a:98:f3:76:f6:7f:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=3f033557-df30-41ed-b00a-e33a48ebedcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:46:30:68:e6:5b:24:bc:ce:d6:b4:f8:d7:b0:
                    b4:b7:d0:90:d6:9c:de:b5:da:74:ae:3b:38:b7:f7:
                    cf:38:38:41:27:29:76:ba:86:8e:5b:50:01:90:58:
                    48:1e:34:bf:ec:95:81:06:0d:67:2e:fd:40:9e:5e:
                    f4:50:7d:c4:ce:81:37:14:ee:3e:fa:94:6c:55:b7:
                    5b:14:50:36:8d:6d:38:9a:72:94:84:ba:2b:ab:ea:
                    3f:2d:ca:df:61:2b:31:0b:b5:95:a8:b5:c4:31:cf:
                    bf:40:41:0b:70:23:d8:f8:c5:aa:9c:3f:1d:24:8e:
                    35:e5:db:25:25:5d:41:46:d6:61:35:4d:59:a9:04:
                    da:ad:f0:5a:03:df:1c:cf:b0:c2:f3:70:7c:3f:b2:
                    ae:84:70:80:7c:2f:00:70:25:01:a8:68:7a:10:49:
                    57:3e:3c:35:d4:f3:b2:08:4f:60:a4:b2:64:ea:a3:
                    6e:d0:3d:ec:e3:c8:09:a8:a0:bd:77:14:4f:75:37:
                    ce:66:0a:6f:41:d1:f3:71:e4:4b:55:9f:e4:34:c2:
                    cb:e3:44:7e:d8:c1:03:30:85:5f:3b:37:29:a8:dc:
                    c4:e9:b4:29:5b:0d:d9:91:44:15:4a:a6:82:4f:01:
                    2f:72:ec:f7:ed:70:f7:a5:fc:f4:b3:84:10:f4:00:
                    de:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:82:33:58:1A:4F:62:9F:0B:A3:F0:A9:7A:9E:41:2A:A5:5D:8B:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/64c858a1-a453-3f84-b7aa-304fe08d9e57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:3b:08:d4:07:68:f0:fa:e8:67:18:3e:28:6d:75:7e:06:de:
         c0:8f:1f:6f:60:62:37:f0:79:a4:e2:f9:fd:be:39:a8:d3:b7:
         07:92:c4:90:98:e7:8e:59:f3:8b:aa:ae:18:b7:67:f3:34:12:
         f8:88:c9:42:12:22:18:aa:15:66:14:a3:10:e3:84:b6:ab:36:
         52:2a:6f:8d:66:05:ff:df:55:de:8c:cb:16:b1:5e:9c:62:4c:
         b0:6d:da:42:fc:4e:61:8d:18:39:69:6e:1f:ac:4a:77:88:bd:
         e7:72:16:20:47:2e:ee:9d:59:ca:a2:0c:de:3a:4a:7a:d0:1c:
         da:f3:0c:cc:97:12:5d:5b:47:c9:2b:cf:4a:d2:8e:d5:a4:f2:
         f9:e5:0e:f9:da:5c:7d:e9:3b:9e:2f:0b:c0:cd:5c:a8:29:ad:
         33:b3:35:4d:b6:18:24:64:d0:87:81:7c:83:0a:8b:57:b0:97:
         07:36:02:71:f1:8f:f2:88:e0:93:fa:f9:a5:4c:72:7c:34:94:
         86:c3:16:33:84:7e:41:27:0b:a4:18:3c:78:f7:67:60:bb:8d:
         0c:3c:77:16:11:7d:67:23:a2:70:3a:e0:14:93:29:0f:03:3a:
         d5:72:53:54:1c:39:7c:94:50:8e:41:bd:18:d9:fe:7d:0f:04:
         95:4e:86:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:18:47 2025 by rpki-client