Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/02c047c6-0456-3ba4-a4a6-632ca833f672.roa
File:                     02c047c6-0456-3ba4-a4a6-632ca833f672.roa (raw, json)
Hash identifier:          nwsp2vW2fBa+BIsKbu3FZuaHnTKF8aCtxwwEcAgdB/s=
Subject key identifier:   97:16:BF:0C:EA:AE:4D:3D:82:44:70:69:14:45:B4:73:8B:57:25:7C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B2E5C4201BBB24C9CCE690E40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/02c047c6-0456-3ba4-a4a6-632ca833f672.roa
Signing time:             Sat 13 Sep 2025 13:00:41 +0000
ROA not before:           Sat 13 Sep 2025 13:00:41 +0000
ROA not after:            Fri 12 Dec 2025 14:00:41 +0000
asID:                     214238
IP address blocks:        23.230.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2e:5c:42:01:bb:b2:4c:9c:ce:69:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 13 13:00:41 2025 GMT
            Not After : Dec 12 14:00:41 2025 GMT
        Subject: CN=d30cdbe4-3093-43e0-a637-c314a3461d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:2a:4c:eb:34:27:17:a8:3f:3c:b3:4c:7f:04:
                    3f:a1:62:2f:0c:57:1a:f4:84:c4:46:a6:0b:e9:c1:
                    50:a2:de:38:27:0f:a9:9e:38:a0:e6:11:a9:f9:e3:
                    5f:98:0e:61:ff:dd:df:16:ae:72:91:f5:3f:3b:38:
                    c5:15:b4:ad:3f:ca:27:4f:96:17:90:e4:3c:3a:29:
                    51:fc:71:d6:bd:c3:c5:16:fa:f3:e9:fa:67:68:f5:
                    a7:34:b2:39:ca:42:06:62:29:52:e5:38:e9:ac:0b:
                    f7:6d:07:57:20:df:5f:f2:2a:04:19:a4:d5:d2:7f:
                    73:a5:5f:db:ac:f6:59:2b:ba:7a:64:af:30:5e:f1:
                    f6:64:26:a1:e1:4b:94:68:8c:b9:96:da:53:1f:da:
                    ae:af:e9:99:27:af:4c:a1:79:e9:60:0d:4d:d0:1e:
                    9d:1f:76:b2:42:5a:a9:9c:8c:bd:66:f7:93:36:98:
                    2c:fd:66:39:4f:8e:e2:96:2d:c9:e5:ba:42:02:be:
                    85:9b:1f:e1:0f:02:3c:bb:84:bf:29:f4:7e:36:b5:
                    ad:c7:f8:46:45:6c:87:96:be:e1:74:86:af:c3:6d:
                    9e:02:2f:3f:c9:f8:09:28:6b:cf:ce:26:e0:54:40:
                    cc:96:97:d3:84:c0:81:01:37:da:0c:68:e1:15:f9:
                    9c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:16:BF:0C:EA:AE:4D:3D:82:44:70:69:14:45:B4:73:8B:57:25:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/02c047c6-0456-3ba4-a4a6-632ca833f672.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:d6:cb:f3:33:50:9f:d0:5d:15:79:07:2d:72:d8:87:e7:2b:
         3b:54:de:45:59:cc:4b:f4:3f:34:76:3f:b9:7b:95:bc:ee:63:
         f5:bf:32:4c:7e:04:69:c4:d4:d5:5f:e6:8b:5e:d7:7b:66:c5:
         78:33:1b:f6:20:43:af:93:55:f5:d6:19:5b:da:7e:16:30:3d:
         dd:83:2e:e5:dc:b5:56:e8:a1:c3:39:a3:75:df:24:38:9f:24:
         fd:56:34:08:62:e1:1e:24:a9:ca:e6:4f:06:4a:bb:3f:b5:63:
         f2:11:68:f9:a2:97:eb:6c:e9:66:15:38:83:29:6d:f5:90:9f:
         7a:a2:d5:96:04:c1:24:8b:60:87:3d:e6:26:3d:19:ae:5b:4a:
         29:6b:d1:0d:5a:57:74:72:28:16:32:5e:c3:be:cb:59:ad:86:
         92:6a:b4:50:c1:5e:0d:49:d0:de:c3:52:3d:5b:51:43:e1:bf:
         a8:37:09:21:dd:71:c4:35:9d:3c:75:e6:36:00:60:2a:7e:7f:
         fd:29:e7:37:4a:94:8e:3f:72:57:7e:7c:d1:a7:de:9b:51:af:
         d0:54:29:b0:b7:7f:cf:c2:1c:61:b2:10:c6:d0:fd:87:5d:39:
         76:70:6c:41:3e:ea:60:52:b0:4a:1e:b7:6b:59:ee:60:57:87:
         4e:38:f5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 13:00:52 2025 by rpki-client