Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d918d446-dc86-352a-8dc2-01753529ec3d.roa
File:                     d918d446-dc86-352a-8dc2-01753529ec3d.roa (raw, json)
Hash identifier:          pnTU/Sycpz9/XwipGNDqzYjLIQ2CTkBPxJxQsYfclP8=
Subject key identifier:   6D:83:72:A4:FC:2E:2D:EF:8C:20:F0:61:D3:EB:66:BE:C2:A9:E1:81
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B149FB7AE440544792BE7380
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d918d446-dc86-352a-8dc2-01753529ec3d.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     44477
IP address blocks:        23.230.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:fb:7a:e4:40:54:47:92:be:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=9c8fa8b2-0462-4735-bf6d-8044bb6c9aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:8c:f4:7e:47:c1:63:23:65:52:63:5c:1b:40:
                    a6:08:6e:96:09:9e:e7:e0:07:57:da:4b:fe:6e:5b:
                    2f:57:c4:5b:33:71:30:45:91:4a:b6:a2:ef:04:06:
                    ba:37:38:3c:82:00:c1:2d:5e:a5:6e:fd:4a:9c:ed:
                    09:ff:f3:77:a4:9f:08:67:c0:da:92:f7:e6:c5:89:
                    b6:ba:73:ee:35:5f:9b:6b:66:ce:bd:b5:3b:a1:73:
                    8a:86:87:f7:2c:d7:39:e0:85:09:ea:4d:82:1c:8e:
                    ab:3f:c7:00:5f:7f:a2:be:f2:69:e1:42:9f:99:19:
                    ff:db:04:c1:17:d9:0b:24:31:8d:b4:11:99:ea:ba:
                    63:3d:7e:f2:8a:7f:fc:49:12:09:9c:ea:e6:80:b1:
                    7b:49:cd:af:0d:3d:be:a5:c0:6f:77:e2:56:a5:72:
                    10:10:1e:c8:4d:a3:72:20:69:d1:33:1f:41:7b:4e:
                    63:6b:8d:90:e7:eb:22:99:06:32:87:94:78:1b:d5:
                    0b:18:11:30:57:83:cf:09:5c:73:83:b8:f7:29:11:
                    8f:93:19:1e:eb:6f:fe:55:41:70:78:97:55:6a:0f:
                    d6:37:11:06:4e:dd:ca:35:ab:4d:49:e0:76:22:79:
                    87:95:f3:bb:b7:ec:1b:c9:c2:7f:1f:a9:e2:19:bf:
                    27:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:83:72:A4:FC:2E:2D:EF:8C:20:F0:61:D3:EB:66:BE:C2:A9:E1:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d918d446-dc86-352a-8dc2-01753529ec3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:5c:3e:4e:bf:8c:17:38:50:2d:a3:be:f3:d6:9c:ba:55:70:
         27:f0:2e:d5:9f:2f:fb:1f:3c:3d:14:96:45:13:d7:da:e7:48:
         34:f5:7b:15:e4:eb:f8:4e:e3:86:47:d7:98:7c:35:88:95:c2:
         9e:da:e1:9c:92:bf:88:7d:82:bc:f9:33:3f:42:de:f5:3c:4c:
         d6:5e:2e:ae:1f:73:9e:d5:4f:64:10:c7:a2:b5:1f:da:e6:ab:
         25:50:7f:f4:ea:0e:f8:f3:ea:db:b2:35:03:56:82:b2:05:30:
         7d:d0:3f:8f:b6:5a:79:75:07:e2:27:54:31:54:85:c6:80:cd:
         f4:59:3d:c4:08:ee:02:e6:0a:b9:d5:01:99:44:c7:16:83:75:
         3e:36:18:a1:ad:8b:92:17:6c:76:db:0d:f2:cb:0a:49:03:68:
         fd:d4:e0:bb:d0:c9:be:12:94:cb:b4:da:89:06:40:c4:1d:01:
         37:09:34:54:90:c0:12:ce:02:68:32:5f:63:99:0a:09:fd:60:
         f0:86:0a:9c:21:6c:04:6d:b7:ae:96:90:54:f2:df:78:20:0a:
         d8:2c:15:c7:ca:59:54:8b:5e:81:fb:08:cc:a0:25:47:80:fd:
         82:7a:76:59:1e:c9:8f:5f:3d:a7:cd:ef:ae:d2:36:6c:1b:ea:
         37:b2:1f:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSft65EBUR5K+c4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk
OWM4ZmE4YjItMDQ2Mi00NzM1LWJmNmQtODA0NGJiNmM5YWFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8oz0fkfBYyNlUmNcG0CmCG6WCZ7n4AdX2kv+
blsvV8RbM3EwRZFKtqLvBAa6Nzg8ggDBLV6lbv1KnO0J//N3pJ8IZ8DakvfmxYm2
unPuNV+ba2bOvbU7oXOKhof3LNc54IUJ6k2CHI6rP8cAX3+ivvJp4UKfmRn/2wTB
F9kLJDGNtBGZ6rpjPX7yin/8SRIJnOrmgLF7Sc2vDT2+pcBvd+JWpXIQEB7ITaNy
IGnRMx9Be05ja42Q5+simQYyh5R4G9ULGBEwV4PPCVxzg7j3KRGPkxke62/+VUFw
eJdVag/WNxEGTt3KNatNSeB2InmHlfO7t+wbycJ/H6niGb8n0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG2DcqT8Li3vjCDwYdPrZr7CqeGBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZDkxOGQ0NDYtZGM4Ni0z
NTJhLThkYzItMDE3NTM1MjllYzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+bsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIRcPk6/jBc4UC2jvvPWnLpVcCfwLtWfL/sfPD0UlkUT19rnSDT1exXk
6/hO44ZH15h8NYiVwp7a4ZySv4h9grz5Mz9C3vU8TNZeLq4fc57VT2QQx6K1H9rm
qyVQf/TqDvjz6tuyNQNWgrIFMH3QP4+2Wnl1B+InVDFUhcaAzfRZPcQI7gLmCrnV
AZlExxaDdT42GKGti5IXbHbbDfLLCkkDaP3U4LvQyb4SlMu02okGQMQdATcJNFSQ
wBLOAmgyX2OZCgn9YPCGCpwhbARtt66WkFTy33ggCtgsFcfKWVSLXoH7CMygJUeA
/YJ6dlkeyY9fPafN767SNmwb6jeyHyg=
-----END CERTIFICATE-----
Generated at Sun Jun 15 05:58:58 2025 by rpki-client