Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/30daea55-d3a5-3757-ab36-1526db40db9d.roa
File:                     30daea55-d3a5-3757-ab36-1526db40db9d.roa (raw, json)
Hash identifier:          IrlEi6bwN0AYiBcXKiHKuAVfw+zSY0sUBBXfuG/Msvw=
Subject key identifier:   76:8F:23:73:56:22:B5:5D:48:60:E8:BD:6E:F5:BD:D5:D8:15:3E:81
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848D0ABC746F54B36E76C80C040
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/30daea55-d3a5-3757-ab36-1526db40db9d.roa
Signing time:             Sat 08 Feb 2025 14:00:52 +0000
ROA not before:           Sat 08 Feb 2025 14:00:52 +0000
ROA not after:            Fri 09 May 2025 13:00:52 +0000
asID:                     44477
IP address blocks:        23.230.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d0:ab:c7:46:f5:4b:36:e7:6c:80:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  8 14:00:52 2025 GMT
            Not After : May  9 13:00:52 2025 GMT
        Subject: CN=efafa63e-f5bd-4276-ae3c-6d767c3e4611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7a:78:5c:84:b5:7a:4f:b4:f3:0e:ed:d9:28:
                    a9:36:64:9e:e9:2c:05:02:6d:3c:3f:e2:9f:38:a1:
                    3a:16:ee:83:66:73:10:ef:3c:fb:98:0e:7e:d4:94:
                    2c:96:70:19:00:8c:44:b4:81:ec:bb:da:8d:18:6d:
                    21:bd:33:e9:49:b5:6c:d1:06:f8:eb:a3:fe:4c:6b:
                    f2:25:d5:4d:8a:7d:68:27:1b:6b:d1:0b:9e:97:d8:
                    24:0b:1d:88:8b:61:6e:34:d7:3e:ed:67:46:45:af:
                    25:53:3a:6d:3e:88:00:17:03:f2:ba:6f:56:4b:42:
                    13:50:06:8b:98:04:b6:3e:17:24:4d:49:0f:d8:ac:
                    7e:75:9a:3a:f6:92:6f:b9:e4:f3:ab:dc:8d:2d:1c:
                    e0:22:7a:6e:72:31:ef:8f:bb:26:6f:00:ea:c3:54:
                    11:17:a4:1d:c4:2b:e6:5f:99:66:13:8e:ae:46:7b:
                    9f:90:af:95:2a:0a:d5:21:31:33:76:90:23:71:1f:
                    09:64:8e:3f:7a:3f:c5:d3:47:58:8a:fb:ac:f5:f7:
                    09:38:02:2b:70:58:45:57:94:37:e3:77:96:44:ef:
                    d5:6c:37:f2:b4:11:5b:1d:33:d8:58:a7:9e:54:6f:
                    d4:10:14:3b:1b:e5:e2:de:79:85:12:ee:f2:f0:86:
                    26:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8F:23:73:56:22:B5:5D:48:60:E8:BD:6E:F5:BD:D5:D8:15:3E:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/30daea55-d3a5-3757-ab36-1526db40db9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:09:f5:fb:70:90:d3:46:88:18:64:3e:af:32:2a:c1:0b:1b:
         e1:0f:a3:fa:d8:6e:65:a9:30:b1:81:fc:2b:b4:e0:f8:44:ed:
         7e:5b:dd:44:b1:bb:e0:33:ba:aa:31:d4:e0:ea:ec:68:bf:00:
         8a:14:ac:8f:8f:06:ed:92:1b:2b:df:99:ac:8d:d0:35:c0:3d:
         cf:e0:ae:43:ab:f6:11:ef:e5:ee:06:d7:02:ac:c7:62:5b:8b:
         0f:c1:ef:b5:fa:1b:38:fd:ff:5a:5e:45:01:ff:2b:92:94:df:
         ac:6f:d1:89:26:a0:38:86:76:74:fa:20:17:78:f8:43:5f:da:
         03:d5:1f:9b:a6:7c:d9:29:ce:7d:3d:68:2d:16:78:4a:7b:dd:
         be:a2:0a:22:74:5a:f3:5c:be:12:44:e3:28:67:7e:cc:3b:3d:
         69:02:07:3d:28:70:d5:56:cf:fb:8c:27:ac:88:73:55:30:b5:
         e4:e8:2f:d0:7f:93:a3:3c:aa:3d:7b:91:5c:ce:e9:f9:fc:ce:
         03:75:f2:4b:72:52:2d:45:f4:d3:26:57:8a:b5:d8:e2:54:96:
         61:bb:8f:cf:fe:24:4e:61:e8:0f:77:b9:54:d2:67:7e:ba:f3:
         52:6c:d8:bf:aa:a9:a0:de:48:0c:fb:f9:2f:40:49:80:06:b2:
         3e:66:1a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:27:49 2025 by rpki-client