Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c8615779-1590-34cc-b34d-32c5c6d7d171.roa
File:                     c8615779-1590-34cc-b34d-32c5c6d7d171.roa (raw, json)
Hash identifier:          O4EhtO7mMDm03d0XqsaOHMGiLTQrY80XhFeA735ZOYw=
Subject key identifier:   28:61:1F:29:9C:7C:CE:60:41:40:C3:22:E4:B4:65:E3:93:1B:86:2E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858496E4981A2CA0F17D89028F970
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c8615779-1590-34cc-b34d-32c5c6d7d171.roa
Signing time:             Sun 06 Apr 2025 01:00:47 +0000
ROA not before:           Sun 06 Apr 2025 01:00:47 +0000
ROA not after:            Sat 05 Jul 2025 01:00:47 +0000
asID:                     214238
IP address blocks:        23.230.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6e:49:81:a2:ca:0f:17:d8:90:28:f9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr  6 01:00:47 2025 GMT
            Not After : Jul  5 01:00:47 2025 GMT
        Subject: CN=fc34650e-76ec-4a94-91c7-b94f702aae73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:97:02:a6:4a:1b:62:ac:98:5f:57:eb:f9:dc:
                    b4:d3:58:9d:cd:15:e6:4a:9e:4e:94:9c:7a:3d:ac:
                    64:c9:c0:d9:59:35:0d:cf:e0:b1:ab:14:35:53:5b:
                    07:1f:a1:e9:a9:4e:56:8d:d4:f1:54:12:5f:13:58:
                    dc:f3:70:9b:eb:95:3f:cd:aa:ab:3a:27:f6:6c:63:
                    a3:3b:c8:51:02:f0:b5:32:88:64:8d:13:e3:dd:59:
                    39:e9:5b:d6:be:65:fd:86:9e:d4:77:65:9f:c1:7d:
                    25:50:e8:0f:8c:fc:7d:b2:53:52:4e:bd:a2:1e:70:
                    ad:64:0f:2c:7c:12:95:88:1b:de:2a:ef:50:4c:cd:
                    90:06:32:d0:e4:b5:ce:75:f2:b4:34:45:69:9a:bd:
                    7c:a8:73:f6:e7:31:5c:79:47:19:a7:37:a8:c7:73:
                    5a:b0:db:d6:b0:91:ff:b3:b8:aa:2b:52:e1:6f:47:
                    21:94:35:dc:0b:d1:87:43:03:92:cc:65:77:17:81:
                    57:25:ad:b1:f1:2c:d8:ba:3c:75:36:81:44:4a:25:
                    69:c0:c4:ec:b2:b3:29:8f:5e:6f:5a:7e:bb:66:a8:
                    c1:4e:f5:f6:70:db:76:f4:2a:94:ae:58:75:f9:14:
                    03:83:1a:6c:86:07:ff:49:47:4f:cb:13:ba:e2:97:
                    54:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:61:1F:29:9C:7C:CE:60:41:40:C3:22:E4:B4:65:E3:93:1B:86:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c8615779-1590-34cc-b34d-32c5c6d7d171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:69:9d:43:29:b9:52:6d:65:36:cc:91:42:b4:81:c1:4d:61:
         e6:a8:90:a6:da:64:d4:59:77:13:71:d5:a4:aa:24:11:44:56:
         6a:f7:8c:a5:80:c6:51:4d:ed:dd:4f:79:30:8d:ad:d0:7c:e9:
         47:59:bb:7a:93:c8:cf:2e:38:3a:2f:d7:b7:f0:23:e7:f5:3c:
         44:40:2f:d5:56:15:9a:9d:80:00:51:7f:57:ce:4c:ae:6b:d0:
         9e:e7:bd:09:c9:d0:5d:19:d9:cb:ad:7a:60:ac:e9:f4:48:c9:
         91:36:c5:89:d5:c1:a2:ca:66:58:c1:2f:c9:d5:e3:32:d8:fd:
         9c:a9:19:76:e9:a7:c5:0d:b5:76:4a:f8:d2:a6:6f:5b:69:b6:
         65:f4:bb:14:90:29:c0:5e:5a:9b:f1:3f:9f:0f:d2:3d:68:a2:
         50:60:93:45:5c:46:c8:d4:d4:cb:30:1e:3a:58:3d:07:ae:c2:
         93:5c:af:dc:b6:9e:12:cd:c1:28:8a:d4:02:e5:85:20:e6:6a:
         55:da:1e:94:47:b6:e3:6f:1e:10:dc:4c:80:4b:f1:77:91:48:
         57:09:a0:e3:93:cd:71:b0:6e:98:bf:b7:03:3a:76:fd:c9:13:
         54:b3:a3:5f:5a:a7:5c:9e:a7:c9:5e:f5:97:83:1d:e5:c7:ba:
         eb:a9:aa:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:55:42 2025 by rpki-client