Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9f270aa9-9ae0-3404-a901-373d2bd94e0d.roa
File:                     9f270aa9-9ae0-3404-a901-373d2bd94e0d.roa (raw, json)
Hash identifier:          tvfbW3DiW+KJXDRD5uSiUu8e1eZs9TxpFus3eVCi8dY=
Subject key identifier:   D1:6D:44:05:03:59:D2:FC:7E:92:6F:F4:3A:1C:75:C9:72:4F:95:7D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A90A0F0DA40191B3C47083CC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9f270aa9-9ae0-3404-a901-373d2bd94e0d.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     44477
IP address blocks:        23.230.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:f0:da:40:19:1b:3c:47:08:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=73674d8c-0e3e-48ba-9ab5-03f9bcd93abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:60:7b:13:12:8d:93:81:ea:89:c2:da:8a:90:
                    2b:39:e1:54:54:12:10:06:1f:dc:ea:0f:cc:7f:b1:
                    20:b6:93:a4:44:7f:88:ab:eb:e8:ff:44:7c:21:d4:
                    f4:0f:51:f1:25:3c:38:c3:a1:f1:15:58:7f:bb:cc:
                    fb:2b:95:e2:63:77:8d:24:e5:5d:6f:f0:d3:91:e0:
                    ef:1f:a3:9a:de:c6:73:f7:86:f5:49:32:9c:82:5e:
                    d4:1d:40:1a:57:5e:8a:3b:6a:77:98:3f:86:e2:1a:
                    45:ac:41:df:9d:20:f0:52:cb:62:4e:cb:83:63:cc:
                    6c:99:6f:49:f1:5e:07:79:c6:b6:a1:08:38:96:0b:
                    32:fe:0e:0c:76:8d:21:4a:9e:57:87:b0:19:1a:4d:
                    15:dc:0b:d6:74:a1:b4:52:b8:48:69:73:04:10:ba:
                    ca:fe:d2:13:de:43:57:5c:19:ca:41:c7:99:30:79:
                    df:d7:f2:f9:95:40:e9:42:e6:fb:9c:ed:74:87:d4:
                    dd:3d:59:6f:84:f9:35:bb:c4:54:2b:f0:8e:29:06:
                    ef:8a:6c:cd:1c:16:67:a1:f8:7e:6c:ef:2a:ed:a0:
                    53:3b:07:3d:21:95:3e:74:f8:7b:94:9a:e7:40:c3:
                    07:e0:9f:7e:6a:37:c6:dc:8f:16:35:1f:9b:02:4d:
                    84:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6D:44:05:03:59:D2:FC:7E:92:6F:F4:3A:1C:75:C9:72:4F:95:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9f270aa9-9ae0-3404-a901-373d2bd94e0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:3b:05:b7:cb:57:08:79:5d:15:ca:f1:25:37:9a:df:77:f9:
         fd:35:22:e0:94:4c:60:cb:71:b4:87:59:26:62:47:fa:39:ee:
         93:22:95:76:44:14:60:60:a9:72:bd:13:85:1a:be:6b:5e:b6:
         78:4e:5c:8d:6b:3a:d2:6b:5b:d5:0f:d0:b0:1e:ab:e6:c3:3d:
         6b:e2:8c:50:39:22:00:b8:dd:3c:ef:60:16:1c:cd:08:c9:d3:
         35:0e:92:07:00:d8:57:e2:b3:cb:da:af:73:31:47:32:e0:e9:
         cc:70:ab:50:7a:0d:57:a2:8a:84:1a:7d:5e:f9:2c:bf:3e:93:
         21:be:d2:7d:fe:e8:63:49:13:16:50:7a:a6:87:6f:36:15:51:
         2e:9b:e8:9c:aa:c6:51:cb:2c:f3:f1:52:da:04:a4:a6:40:96:
         3f:97:75:1e:ba:c9:1f:8e:6b:a4:57:3c:a3:a7:70:78:0c:bb:
         98:29:a5:19:9a:47:4b:40:9d:5e:b1:4c:1f:95:f3:90:27:9f:
         b9:49:03:46:35:0e:05:41:62:3c:19:c4:d5:a3:1f:ce:94:65:
         74:11:ed:ad:6a:03:78:99:15:20:0c:6d:a7:00:b0:1a:d3:f7:
         95:23:61:07:c7:de:c5:a8:d2:fd:b1:79:c6:1c:06:2f:f8:dc:
         d7:e6:34:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:23:48 2025 by rpki-client