Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8c00a248-8668-3d3c-9818-5705a6515b72.roa
File:                     8c00a248-8668-3d3c-9818-5705a6515b72.roa (raw, json)
Hash identifier:          0yyjNFgDDWNGLDzQygzZKVQ5KkJUeJjSuXjkedyBfEM=
Subject key identifier:   F7:79:68:84:77:29:92:94:E0:BB:D4:0E:C3:AE:2D:C1:B7:E6:AD:21
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AC7110EE4F1ED01FD3B706200
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8c00a248-8668-3d3c-9818-5705a6515b72.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     11404
IP address blocks:        23.230.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:0e:e4:f1:ed:01:fd:3b:70:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=712d2b86-1b76-4e23-844b-2d8652c2d2be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7b:ca:74:f1:92:af:46:95:2d:ca:3c:5b:a9:
                    23:54:bf:23:fb:21:a9:28:ef:85:3d:03:2f:62:c4:
                    89:9d:33:81:44:98:4b:25:67:54:8d:09:b6:ee:59:
                    ad:02:d1:99:32:0c:f5:12:52:49:20:05:d9:86:d1:
                    f9:bd:7f:72:35:a9:04:64:fd:82:67:fe:20:d4:34:
                    2b:9a:21:3d:37:9f:4c:8f:19:4c:f0:94:bf:11:d5:
                    16:7b:80:2a:7e:ce:28:57:8f:5d:94:e2:0e:25:9a:
                    ed:2b:e0:a3:86:54:93:72:b2:e6:d2:86:c3:ab:35:
                    0c:a8:bb:f9:b7:82:c2:b0:b3:73:01:78:67:fb:f8:
                    5b:ba:e7:7c:a1:5e:19:fd:96:65:59:e6:51:a1:50:
                    d7:c0:a2:06:02:ce:fe:91:69:fa:20:43:d7:ed:c9:
                    2c:d4:cf:2b:eb:1a:1d:6e:14:cd:23:8e:8e:8a:9a:
                    5e:4d:5f:4a:4b:c5:81:a5:61:d2:93:18:0c:38:42:
                    53:32:6f:8a:e1:95:0a:3c:50:dd:25:8d:22:0f:07:
                    df:f6:ac:36:07:3b:f2:ee:d8:38:50:a6:75:19:82:
                    63:3f:12:40:f5:eb:72:c8:d5:73:73:b5:97:9f:78:
                    a6:6a:cd:e8:07:97:b2:61:a1:d0:48:a9:8f:1a:e5:
                    77:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:79:68:84:77:29:92:94:E0:BB:D4:0E:C3:AE:2D:C1:B7:E6:AD:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8c00a248-8668-3d3c-9818-5705a6515b72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:48:8d:08:6e:bb:af:5a:87:61:4d:d7:b0:08:35:bb:c0:9c:
         ac:85:64:c7:e1:8d:8b:ef:4a:c1:f1:3e:90:33:b5:58:ad:e1:
         ee:9d:2e:be:75:dc:13:45:a3:96:11:dd:a0:a6:9c:48:9e:7f:
         db:d8:2f:5b:1e:b6:28:0c:58:17:2a:43:b8:62:5f:78:71:a7:
         66:25:15:10:69:60:51:5b:5a:17:c1:29:64:ae:13:17:ac:2a:
         ac:2d:a3:b2:19:18:bc:b2:e8:8a:bf:ff:ac:fd:3c:40:ad:23:
         be:17:fb:b1:ca:3c:8b:b4:ce:bf:e4:59:8d:fc:b1:ff:f3:85:
         60:6e:bc:fd:47:66:96:8d:b6:5d:a8:65:01:8a:1a:0c:1e:80:
         fe:d4:fe:8b:41:41:cc:94:f9:b9:f0:f4:f5:74:bf:28:4a:56:
         76:6a:b1:e1:58:9d:22:51:1c:ef:b0:b9:3d:3e:f2:de:44:5b:
         f5:6e:7b:0d:d3:23:8d:3a:2f:33:12:77:62:13:6f:13:5b:9d:
         49:40:c2:63:ff:88:8d:6a:6c:56:fc:5d:15:e3:87:6c:07:e0:
         b3:62:b0:7a:c9:9a:ad:8a:19:39:b7:69:e7:44:e8:17:e0:d4:
         69:c5:55:76:87:8f:20:48:ba:d0:5a:30:a3:5a:1d:1e:4d:0f:
         3b:2b:86:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHEQ7k8e0B/TtwYgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk
NzEyZDJiODYtMWI3Ni00ZTIzLTg0NGItMmQ4NjUyYzJkMmJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXvKdPGSr0aVLco8W6kjVL8j+yGpKO+FPQMv
YsSJnTOBRJhLJWdUjQm27lmtAtGZMgz1ElJJIAXZhtH5vX9yNakEZP2CZ/4g1DQr
miE9N59MjxlM8JS/EdUWe4Aqfs4oV49dlOIOJZrtK+CjhlSTcrLm0obDqzUMqLv5
t4LCsLNzAXhn+/hbuud8oV4Z/ZZlWeZRoVDXwKIGAs7+kWn6IEPX7cks1M8r6xod
bhTNI46OippeTV9KS8WBpWHSkxgMOEJTMm+K4ZUKPFDdJY0iDwff9qw2Bzvy7tg4
UKZ1GYJjPxJA9etyyNVzc7WXn3imas3oB5eyYaHQSKmPGuV37wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPd5aIR3KZKU4LvUDsOuLcG35q0hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOGMwMGEyNDgtODY2OC0z
ZDNjLTk4MTgtNTcwNWE2NTE1YjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+ZMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEBIjQhuu69ah2FN17AINbvAnKyFZMfhjYvvSsHxPpAztVit4e6dLr51
3BNFo5YR3aCmnEief9vYL1setigMWBcqQ7hiX3hxp2YlFRBpYFFbWhfBKWSuExes
Kqwto7IZGLyy6Iq//6z9PECtI74X+7HKPIu0zr/kWY38sf/zhWBuvP1HZpaNtl2o
ZQGKGgwegP7U/otBQcyU+bnw9PV0vyhKVnZqseFYnSJRHO+wuT0+8t5EW/Vuew3T
I406LzMSd2ITbxNbnUlAwmP/iI1qbFb8XRXjh2wH4LNisHrJmq2KGTm3aedE6Bfg
1GnFVXaHjyBIutBaMKNaHR5NDzsrhoM=
-----END CERTIFICATE-----
Generated at Fri Aug 8 13:03:11 2025 by rpki-client