Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/011fef55-f8e0-3d9f-b4d0-54377a70acde.roa
File:                     011fef55-f8e0-3d9f-b4d0-54377a70acde.roa (raw, json)
Hash identifier:          J3Dy/iAlUpp2IOOA1P+aiwrz2pVlpKz+3oXn1h22s+A=
Subject key identifier:   48:C7:E3:A9:39:A4:50:6C:A2:0A:E3:11:52:9E:33:68:1F:2B:E9:B8
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B5F377819EEBB33B995191780
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/011fef55-f8e0-3d9f-b4d0-54377a70acde.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     5650
IP address blocks:        23.230.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:78:19:ee:bb:33:b9:95:19:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=d110aaf6-b54c-4c2b-8bd9-31f495aab2ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:25:95:5d:95:57:51:da:55:f7:d2:c1:82:c4:
                    0a:81:fd:c9:0c:7c:bd:70:e3:07:e6:aa:2a:fd:e8:
                    94:34:6c:41:98:62:fa:f4:59:9c:0b:de:70:06:03:
                    c9:cd:28:44:c2:96:8e:6e:f8:6e:43:23:f6:6a:ff:
                    a9:ce:44:f1:2f:54:72:f1:a5:f4:bf:7a:ca:a1:68:
                    d4:27:63:8e:02:2f:28:5d:49:a2:03:f8:2b:0f:2c:
                    d9:e0:fc:14:ec:c4:eb:e7:2a:7c:97:48:c0:37:fe:
                    a3:bd:ed:d3:6f:15:48:42:50:56:60:3e:00:df:2a:
                    b2:09:d5:60:b5:42:53:e8:ab:45:d7:18:45:76:1c:
                    42:48:39:4d:23:50:ef:97:19:71:9a:63:99:38:36:
                    16:0c:51:e1:12:41:68:42:cb:c2:b7:55:ed:6f:66:
                    03:87:26:bc:3a:f4:98:1c:ae:37:72:9a:8e:1d:74:
                    93:62:4f:2c:7e:3f:db:ec:16:92:79:75:35:1d:35:
                    17:46:21:40:d1:f5:13:f9:ac:d6:9a:5f:66:11:eb:
                    31:35:bb:60:fb:c6:22:ea:a8:c6:21:27:1e:08:ba:
                    07:48:aa:ad:32:e8:c9:ff:ce:78:1d:5a:dc:3c:00:
                    cf:33:2e:b4:9a:99:3c:b0:2c:17:76:89:64:d8:40:
                    1c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C7:E3:A9:39:A4:50:6C:A2:0A:E3:11:52:9E:33:68:1F:2B:E9:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/011fef55-f8e0-3d9f-b4d0-54377a70acde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:2f:9e:55:f6:0f:a9:63:2f:8d:7b:2b:94:8a:32:69:c6:bc:
         c4:94:b6:8c:0c:ce:7b:9a:d5:85:25:e5:04:37:97:95:44:92:
         17:be:ba:af:78:12:65:ed:c8:89:dd:7a:29:6d:7d:d2:c2:6d:
         8c:73:5d:3f:50:5e:ce:d2:39:59:61:9b:4b:90:f2:19:7b:d4:
         0f:01:19:0f:79:b4:a9:fc:a1:1b:c2:39:56:25:ad:20:79:97:
         aa:ae:8d:18:ac:9f:a0:68:a5:6a:87:89:96:2a:a8:05:4e:c1:
         24:c6:4a:79:e9:92:63:bd:aa:0a:fc:2c:b3:78:28:86:57:0b:
         5a:cb:d5:b8:b5:4b:e8:09:8b:f1:b1:e4:7a:bd:ab:73:f3:34:
         c9:3d:cf:d1:47:40:fb:36:1e:55:a3:1d:00:2d:5f:80:30:83:
         71:80:d1:db:f6:d8:68:9e:d3:0b:46:2f:5a:f1:3f:0b:9b:bb:
         20:cb:cb:da:44:75:3f:97:c6:1e:f3:d6:19:ca:e3:a5:8f:18:
         59:06:88:e9:6b:2b:8f:7e:d1:3c:9b:5e:0b:45:c6:5d:b9:da:
         8f:83:10:89:cb:28:60:43:b2:dd:56:c6:34:f4:73:c5:15:cf:
         fd:ab:76:ec:d6:e4:33:21:5c:92:3d:7b:57:06:ed:af:bb:df:
         89:25:a8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:15:15 2025 by rpki-client