Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f4d173dc-05dc-3603-86e2-b7f586068b16.roa
File:                     f4d173dc-05dc-3603-86e2-b7f586068b16.roa (raw, json)
Hash identifier:          rZdDP8jmVnM/AtxHn3Bgo//58Zhlasm8tyn+mBZGzOE=
Subject key identifier:   9D:CC:87:D8:13:22:98:98:46:D3:74:5A:93:49:A7:E7:43:62:6F:17
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858499F24DD7622EBD363DE1F00E0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f4d173dc-05dc-3603-86e2-b7f586068b16.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     3257
IP address blocks:        23.230.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:dd:76:22:eb:d3:63:de:1f:00:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=177e6ace-0f26-44ea-a475-701f4ea27ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9e:81:15:e3:a6:3e:35:28:ea:72:c4:f5:d9:
                    08:7e:fe:6e:3e:09:8c:88:0a:a6:89:dd:7b:f7:11:
                    50:2a:36:a4:4c:51:d2:32:a4:14:ae:4f:85:f1:eb:
                    8d:00:77:46:09:0a:5c:b4:7a:c8:86:51:d7:eb:33:
                    ca:f2:99:0e:4a:86:29:80:aa:79:25:c0:2d:84:2c:
                    b9:bb:42:1a:16:27:f9:71:f9:76:db:d3:f3:3c:87:
                    aa:3f:da:23:c0:05:79:69:56:7e:e3:4f:c3:35:42:
                    48:d7:09:e9:52:18:bc:f4:5b:14:23:b6:e0:92:12:
                    35:6a:9e:ce:8e:20:7f:0b:6f:4a:4e:92:fa:45:14:
                    49:01:36:54:8f:70:07:58:c5:7d:fb:ce:d6:97:39:
                    2e:c6:8b:ce:7d:a1:0f:53:f4:99:19:a8:b1:0a:42:
                    b3:6b:75:d2:53:db:8e:44:ea:0b:6b:67:de:ae:81:
                    7d:c4:b6:f5:3a:ae:61:58:d0:7d:a8:38:cb:22:6c:
                    ba:f8:c4:5e:49:93:63:f1:c3:a3:02:5a:b9:ef:d6:
                    c5:1f:eb:36:9e:bd:4c:2c:ce:21:4e:97:5f:c5:8e:
                    2b:ea:b8:ca:7a:7b:9b:2c:55:a1:c0:81:bd:09:85:
                    d2:21:c9:72:bc:f8:0c:db:da:21:02:bc:8e:39:b0:
                    e0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CC:87:D8:13:22:98:98:46:D3:74:5A:93:49:A7:E7:43:62:6F:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f4d173dc-05dc-3603-86e2-b7f586068b16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:6b:5a:4e:a9:07:b4:0e:cf:a0:14:88:e3:e2:28:52:ac:16:
         7e:28:a6:cc:dc:c5:31:83:8c:9f:8c:83:e3:a4:b6:f3:7d:b2:
         d6:d3:bb:f6:13:15:84:5a:f3:ce:4c:a8:85:29:30:10:fe:b1:
         ea:db:f7:bf:f3:22:9d:f7:dd:9d:69:97:60:18:7c:ca:56:d4:
         c5:24:7b:a8:fa:23:fa:33:c2:5b:77:cf:65:0b:fd:8e:b2:ed:
         16:3e:dc:7e:bb:e2:47:2a:05:5e:2a:04:6c:be:f9:3e:a4:40:
         fe:3e:0c:0d:d3:e7:95:d9:79:0c:0e:32:83:d8:81:34:21:33:
         d3:2a:ee:95:ad:ab:99:8e:9e:e5:f8:d7:e2:b3:7c:85:e9:7b:
         da:1d:23:50:df:ef:a8:89:52:4a:7c:38:45:a1:11:8e:c2:2c:
         56:f6:49:e5:0b:05:31:14:ab:1d:45:68:96:56:b7:f2:fa:ea:
         32:ae:29:7e:83:08:21:1a:43:a5:ae:f5:0a:5a:23:67:16:88:
         6b:0d:85:ef:19:2c:1b:a7:53:27:cb:b9:3c:a6:25:f9:dc:c8:
         16:27:bf:b9:29:d1:e6:fe:95:f2:60:4a:89:6a:41:d8:e3:7e:
         da:0d:e1:bb:e2:37:3d:5e:c1:a4:20:e8:4e:0d:21:da:19:db:
         c1:72:eb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:48:15 2025 by rpki-client