Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ce84393f-1071-3a20-b8cd-ce18e9614337.roa
File:                     ce84393f-1071-3a20-b8cd-ce18e9614337.roa (raw, json)
Hash identifier:          0BCJNVrpshoFf1iCEdZbRj5In/ZRBOmsWgKspO1LHDU=
Subject key identifier:   52:9C:EB:B5:60:8E:BF:04:7F:88:E9:8A:BC:30:05:F2:20:8A:E3:C8
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A90A10FB5BC1F45E24CB56910
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ce84393f-1071-3a20-b8cd-ce18e9614337.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     44477
IP address blocks:        23.230.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a1:0f:b5:bc:1f:45:e2:4c:b5:69:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=378addf7-78c5-48da-9203-31748fe9d6e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:24:b7:76:cc:b0:ae:ac:da:2e:94:c2:7f:3c:
                    dc:9b:6e:f8:9f:e1:74:6f:fb:0e:7a:0a:9c:81:4d:
                    c3:d6:09:2d:d5:5d:29:2e:54:96:2c:c1:2f:51:69:
                    21:88:c1:67:40:92:56:93:44:d3:39:93:11:db:4c:
                    dd:a3:63:63:86:0e:08:eb:3a:c1:40:a5:49:fb:96:
                    14:d5:8d:11:a6:af:ac:9a:1d:d4:3c:34:60:93:80:
                    13:2e:90:73:8c:e5:17:e0:62:f9:f0:ae:4c:7e:1e:
                    0d:17:4a:b2:f1:f7:f1:ff:32:2d:8e:a2:9b:57:4a:
                    46:91:17:ec:22:5a:f6:ad:16:89:28:34:17:86:50:
                    b2:02:7f:dd:de:57:f1:13:c7:f8:c3:ae:73:5a:4e:
                    06:24:c3:12:27:68:0d:24:10:3d:a8:6d:1b:ef:04:
                    7c:fd:00:e9:8c:2f:ed:ad:53:d9:d4:47:80:a0:45:
                    38:22:75:97:47:81:35:a5:07:b8:90:3e:8d:b2:f2:
                    eb:94:38:97:d7:37:89:fd:31:93:4c:a2:04:cf:4e:
                    57:33:eb:fd:f2:15:14:29:14:cb:a6:97:ce:e5:d4:
                    19:ca:81:ea:fe:ec:14:b1:eb:ad:66:01:a0:f6:9f:
                    31:2e:ab:7d:e4:7d:41:ed:90:84:dd:81:c9:28:a6:
                    dc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9C:EB:B5:60:8E:BF:04:7F:88:E9:8A:BC:30:05:F2:20:8A:E3:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ce84393f-1071-3a20-b8cd-ce18e9614337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:38:9d:d4:ac:b3:00:56:08:4a:c4:cf:fb:6b:66:3d:c1:bc:
         2a:ba:3e:ec:00:fb:8b:5d:20:51:e0:8a:18:87:57:06:5d:57:
         ad:46:42:13:19:f1:fc:c6:39:58:44:a4:8e:98:a4:7d:bf:93:
         41:2f:02:da:50:7d:1e:63:63:ba:bf:e1:cf:03:6f:70:cf:39:
         0c:91:ef:28:a7:6e:39:6d:81:9b:1d:cd:78:8b:d7:aa:0e:f1:
         34:a5:88:c3:1a:4b:b6:b1:9c:ec:4e:76:5b:4f:47:fb:7a:8b:
         a6:01:2e:47:1f:e8:04:e3:ad:0e:ac:99:8a:53:fb:b1:0b:05:
         0c:34:2c:da:a1:89:62:c9:db:6d:ef:d4:51:4b:1b:d5:80:57:
         c4:4c:c4:88:14:8f:3e:d4:09:4d:51:f8:d1:bd:cf:89:7b:9b:
         d6:ae:7f:73:94:97:db:30:fc:95:09:5f:86:38:0a:5b:df:5c:
         91:68:da:58:9c:59:8d:4e:c1:77:7e:ef:8d:be:34:00:a2:ee:
         4e:9f:db:6e:da:40:95:6f:d0:23:ec:12:68:f7:ac:b8:26:fe:
         61:ad:c7:bc:46:91:d7:87:54:3d:45:6a:44:b2:9a:0a:3d:cf:
         dc:e3:5e:ce:1e:13:1a:46:fb:0f:1b:6d:78:e9:7d:72:60:2b:
         50:3e:2b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:31:52 2025 by rpki-client