Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/08c66ce4-ba5b-3cda-8910-f8fe954642d9.roa
File:                     08c66ce4-ba5b-3cda-8910-f8fe954642d9.roa (raw, json)
Hash identifier:          7kgPjpbAYnx8uRFYjUMOZqMbZKEqz10kA1jdfEyy49c=
Subject key identifier:   D3:15:01:05:63:53:89:B5:97:9E:21:B3:C8:68:EB:0A:13:68:7F:42
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848D0ABC73629C8A7504B6B21C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/08c66ce4-ba5b-3cda-8910-f8fe954642d9.roa
Signing time:             Sat 08 Feb 2025 14:00:52 +0000
ROA not before:           Sat 08 Feb 2025 14:00:52 +0000
ROA not after:            Fri 09 May 2025 13:00:52 +0000
asID:                     44477
IP address blocks:        23.230.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d0:ab:c7:36:29:c8:a7:50:4b:6b:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  8 14:00:52 2025 GMT
            Not After : May  9 13:00:52 2025 GMT
        Subject: CN=3355894b-deca-43b9-b0d7-c45166ea2e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ab:46:65:3a:3f:8d:1b:ae:fc:0e:1c:bb:72:
                    b3:cc:d4:bf:c0:96:91:ab:60:2a:80:b5:45:2c:e6:
                    05:d4:47:6f:43:06:b1:d0:bd:5a:bb:3f:0c:ce:c5:
                    bd:8b:82:66:52:53:4c:eb:b1:f5:7c:4d:bd:63:8f:
                    6d:ea:d5:28:e6:e4:51:d6:4d:b9:e7:3c:42:ab:19:
                    97:8b:e7:38:a5:d2:6e:4b:14:8e:7c:50:4c:c5:db:
                    83:89:86:64:3b:ac:ec:b3:4c:cc:e5:28:26:e7:70:
                    3c:7c:35:42:db:05:d6:65:5f:2f:35:3a:c3:59:5d:
                    42:05:3e:16:0a:7d:89:3d:6e:70:39:f3:d3:ec:b2:
                    c5:9a:b9:bb:4b:e3:de:92:55:b0:44:f6:8d:42:b8:
                    42:53:0a:65:19:e1:9d:ef:42:27:b0:0a:1c:e6:e5:
                    0b:dc:2b:d8:c7:ef:89:93:5f:1a:19:e2:a3:dd:a6:
                    48:cf:4e:6e:d6:8c:e5:60:96:28:e6:f4:2b:29:87:
                    3a:c4:00:64:f9:9d:2d:c0:a0:c7:6f:47:fe:4b:46:
                    ad:95:57:80:b6:21:b8:9c:1c:e9:7f:cc:09:0b:76:
                    1a:7f:e2:7b:c1:03:eb:b3:fb:be:ac:05:b7:f8:b2:
                    b4:b6:0a:f8:88:b2:17:d4:05:11:80:7b:70:d1:2b:
                    97:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:15:01:05:63:53:89:B5:97:9E:21:B3:C8:68:EB:0A:13:68:7F:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/08c66ce4-ba5b-3cda-8910-f8fe954642d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:6c:98:bd:73:ee:22:0f:d3:a1:4a:a6:7a:70:88:88:16:06:
         dd:60:59:c0:7c:e3:40:e5:cd:df:05:18:e2:da:43:41:62:80:
         88:cb:e9:f9:32:2f:8d:11:e1:0f:bb:3e:c4:3f:41:33:4c:5d:
         b6:d4:09:80:f7:41:89:5f:dd:39:d5:ca:f1:3a:26:b2:f2:73:
         5e:9a:f9:b3:5e:0f:23:a3:2a:df:a2:1f:0e:9a:2d:91:82:d2:
         0c:10:37:f7:2c:9b:8b:c5:1b:f0:2a:75:ee:44:5a:2b:ac:49:
         92:25:e0:2a:5e:ab:69:84:a7:91:41:8d:7f:a7:2a:99:21:fd:
         77:b9:40:4a:45:01:07:40:09:f9:9c:ee:8a:f0:a2:f7:38:d4:
         66:ab:d7:be:88:b6:83:ab:19:61:8d:28:16:e6:14:27:65:aa:
         50:52:cf:e8:22:bf:72:0f:5a:a5:f4:73:bd:1c:fe:48:0d:fd:
         0c:23:c9:f1:b4:1a:14:8d:55:b3:83:b5:d3:76:2a:cf:8e:fc:
         73:9e:2d:c9:b5:11:5a:20:6d:dd:99:74:aa:d0:e6:11:4b:01:
         e6:91:bc:ab:f2:8a:b9:12:f8:20:6f:0f:e5:f4:98:cb:b9:91:
         3a:26:66:9e:b6:a2:00:f5:8a:23:1f:db:9a:b1:d7:45:75:06:
         4d:0c:7d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:59:44 2025 by rpki-client