Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8c00a248-8668-3d3c-9818-5705a6515b72.roa
File:                     8c00a248-8668-3d3c-9818-5705a6515b72.roa (raw, json)
Hash identifier:          4viqB5HKisqbYsbODZKmKrbYcfFr84JP9mrxTEjDUXw=
Subject key identifier:   14:D4:54:3D:F4:CE:8F:4D:95:01:C9:02:83:70:5E:D0:01:08:91:0A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849E6550945DA648C2F30894EC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8c00a248-8668-3d3c-9818-5705a6515b72.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     11404
IP address blocks:        23.230.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:55:09:45:da:64:8c:2f:30:89:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=3e838e1f-f55e-4834-a92f-ba88faf7bced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f6:96:6d:78:1c:5a:19:c5:ef:12:c5:ca:1f:
                    81:6a:d0:84:83:8a:cf:aa:2d:29:ba:74:03:d6:46:
                    1b:b4:bf:57:84:2a:4e:fa:d9:3c:3d:d4:ff:4e:2f:
                    99:51:5f:01:04:c7:84:e2:ca:a2:06:40:c5:b6:20:
                    9d:6c:1f:16:c6:26:6a:80:d2:f6:db:de:27:a4:14:
                    16:62:54:31:6b:20:c3:c0:b7:97:1f:0f:de:b0:a8:
                    b8:40:24:a8:a5:87:66:76:d1:18:c2:50:d7:c4:d5:
                    08:a9:73:bd:40:69:77:16:75:73:c1:83:11:cf:29:
                    09:66:a8:ae:94:e3:96:13:0f:6f:a2:56:b7:2b:7d:
                    0f:e9:93:68:09:72:cf:5f:32:c6:20:3d:b9:71:be:
                    b0:5d:32:df:45:bd:2b:7c:31:c0:90:1c:5c:b2:f2:
                    ce:d4:f3:be:21:5a:eb:ec:01:93:5b:4e:4b:a2:9e:
                    e5:4a:b7:27:c5:02:b8:14:4e:44:12:cf:e6:50:37:
                    ca:e5:8f:90:1b:70:41:f3:fd:c9:27:5b:68:f2:b7:
                    26:1b:20:01:39:49:e4:7d:aa:70:7c:84:44:b0:0f:
                    b3:8f:a0:81:ec:58:d6:28:27:09:d4:cb:07:65:73:
                    e2:91:66:4e:72:fd:95:eb:b3:87:50:b4:91:ca:32:
                    e6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D4:54:3D:F4:CE:8F:4D:95:01:C9:02:83:70:5E:D0:01:08:91:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8c00a248-8668-3d3c-9818-5705a6515b72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:0a:b1:5f:c7:27:ff:a5:28:79:5e:6a:f3:da:ef:b7:2e:8a:
         bf:96:d9:da:5f:1f:b4:f1:4c:33:5e:77:89:6c:0b:88:d1:6c:
         08:a7:f8:89:0b:56:13:06:af:31:bb:aa:27:ca:ed:63:49:d5:
         da:07:20:19:4a:bd:63:06:1f:83:d4:9f:06:1e:60:3d:bd:e0:
         50:df:c0:bf:c0:5e:c6:7b:36:9f:00:70:c9:22:1f:2a:0e:cd:
         cc:cf:21:61:41:21:84:ef:e2:a0:0f:26:33:a7:34:8a:b7:2c:
         89:b7:58:92:0c:3d:b1:6b:56:c5:72:92:fb:27:2b:a4:3e:d1:
         46:4d:61:15:8c:b9:0c:75:73:2b:65:26:73:43:8d:41:46:3c:
         ac:13:15:c1:14:7e:f0:5a:9e:85:27:db:8e:83:ff:bc:6e:70:
         9c:62:c0:38:fe:f5:43:32:36:4b:2d:4c:4a:81:95:e4:61:ba:
         f5:6b:74:5e:ef:4c:1e:73:98:de:c4:a4:9f:24:98:23:d4:9e:
         b1:d3:6c:42:64:58:39:88:e2:4e:58:29:e7:34:9f:a0:75:be:
         5c:29:75:54:ec:f7:2f:16:a2:5a:11:b0:e8:b3:65:77:64:46:
         15:cd:39:10:e0:cb:66:4f:bb:f3:9a:2d:df:e9:54:61:f0:9e:
         9b:41:df:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVQlF2mSMLzCJTsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk
M2U4MzhlMWYtZjU1ZS00ODM0LWE5MmYtYmE4OGZhZjdiY2VkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvaWbXgcWhnF7xLFyh+BatCEg4rPqi0punQD
1kYbtL9XhCpO+tk8PdT/Ti+ZUV8BBMeE4sqiBkDFtiCdbB8WxiZqgNL2294npBQW
YlQxayDDwLeXHw/esKi4QCSopYdmdtEYwlDXxNUIqXO9QGl3FnVzwYMRzykJZqiu
lOOWEw9vola3K30P6ZNoCXLPXzLGID25cb6wXTLfRb0rfDHAkBxcsvLO1PO+IVrr
7AGTW05Lop7lSrcnxQK4FE5EEs/mUDfK5Y+QG3BB8/3JJ1to8rcmGyABOUnkfapw
fIREsA+zj6CB7FjWKCcJ1MsHZXPikWZOcv2V67OHULSRyjLm0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBTUVD30zo9NlQHJAoNwXtABCJEKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOGMwMGEyNDgtODY2OC0z
ZDNjLTk4MTgtNTcwNWE2NTE1YjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+ZMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAkKsV/HJ/+lKHleavPa77cuir+W2dpfH7TxTDNed4lsC4jRbAin+IkL
VhMGrzG7qifK7WNJ1doHIBlKvWMGH4PUnwYeYD294FDfwL/AXsZ7Np8AcMkiHyoO
zczPIWFBIYTv4qAPJjOnNIq3LIm3WJIMPbFrVsVykvsnK6Q+0UZNYRWMuQx1cytl
JnNDjUFGPKwTFcEUfvBanoUn246D/7xucJxiwDj+9UMyNkstTEqBleRhuvVrdF7v
TB5zmN7EpJ8kmCPUnrHTbEJkWDmI4k5YKec0n6B1vlwpdVTs9y8WoloRsOizZXdk
RhXNORDgy2ZPu/OaLd/pVGHwnptB30Q=
-----END CERTIFICATE-----
Generated at Tue Jun 17 10:21:01 2025 by rpki-client