Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/31e9c4a0-e4c9-3102-aff9-fa4c673bec81.roa
File:                     31e9c4a0-e4c9-3102-aff9-fa4c673bec81.roa (raw, json)
Hash identifier:          D7w1NYTzqfizpI3HwVp11hWM2lXJMwNWXErBWKG/ULo=
Subject key identifier:   75:FE:4C:93:40:5E:17:02:28:BA:06:90:36:7D:6B:63:60:83:81:90
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A84A9B66E89466EA2CEB6FE00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/31e9c4a0-e4c9-3102-aff9-fa4c673bec81.roa
Signing time:             Mon 14 Jul 2025 18:09:25 +0000
ROA not before:           Mon 14 Jul 2025 18:09:25 +0000
ROA not after:            Sun 12 Oct 2025 18:09:25 +0000
asID:                     44559
IP address blocks:        23.230.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:a9:b6:6e:89:46:6e:a2:ce:b6:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 14 18:09:25 2025 GMT
            Not After : Oct 12 18:09:25 2025 GMT
        Subject: CN=3d8d6cfc-d892-42a6-8fcf-c7319897ff69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0d:c6:ef:6c:6f:51:38:53:86:3b:81:78:c2:
                    fc:5d:a3:65:e3:fa:85:68:36:d9:09:56:80:4f:10:
                    50:27:a9:a5:de:1a:1d:21:cb:23:04:74:bc:6a:5b:
                    53:bf:bb:88:2b:f6:1a:20:7b:d8:c9:0f:c1:e8:7d:
                    cc:24:9d:f3:9c:e0:a1:73:1d:34:74:cb:12:80:2b:
                    88:27:4c:5a:8f:66:40:d6:dc:2f:02:d4:bb:b0:b4:
                    aa:2a:1d:bb:7d:a9:7f:7d:fb:bd:88:df:84:23:bc:
                    11:9c:e1:3d:ce:3c:b2:82:fa:90:d5:f0:10:ad:ce:
                    44:76:c0:83:ef:6e:61:a6:fa:3c:29:18:3d:ff:df:
                    1a:54:e7:1f:4e:b5:cc:b4:d3:67:ed:ee:f9:22:27:
                    ec:6a:3e:0b:c5:b4:4e:f4:7a:79:e7:3d:6f:8a:a7:
                    e8:d8:0a:3e:55:ee:b4:37:cb:c1:45:e4:9a:72:9e:
                    d6:32:c7:c6:82:9e:a3:d1:f6:aa:50:df:2c:89:dd:
                    e7:fe:68:e5:60:ff:04:24:48:72:87:33:61:ad:ad:
                    74:a6:80:c6:cd:e3:22:ff:15:de:a9:05:70:78:79:
                    7b:4d:8d:de:a1:1d:44:8f:d7:51:39:7d:a7:5d:39:
                    5c:46:2a:ed:1d:e4:c5:04:04:c7:e3:5f:98:0b:f5:
                    58:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FE:4C:93:40:5E:17:02:28:BA:06:90:36:7D:6B:63:60:83:81:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/31e9c4a0-e4c9-3102-aff9-fa4c673bec81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:a5:f7:00:08:51:8a:2f:48:9f:e1:18:07:43:ee:d9:d3:ea:
         cd:b1:4b:3a:70:c7:a8:c9:80:96:00:46:6f:ec:d1:9f:50:b8:
         12:19:36:c8:06:0c:20:85:40:8e:74:ed:f5:0d:51:f1:e9:9f:
         14:61:f8:54:65:46:4b:71:dd:70:54:db:ba:3e:ae:94:73:3e:
         25:f2:63:13:08:db:59:1f:bd:f1:16:81:aa:76:e3:45:6d:21:
         89:98:9c:ba:bc:7c:d0:58:e6:f3:d2:ce:23:25:56:63:84:c8:
         e8:1f:30:83:61:7a:ef:43:c2:98:ab:82:b3:e9:8e:c5:8a:79:
         fe:49:55:7f:db:85:19:3a:9a:2e:18:bd:d4:c7:68:64:e4:35:
         f0:d2:8f:ee:42:09:82:d2:d7:0f:98:30:9d:f8:ee:00:fc:37:
         e7:5c:e2:ab:7f:d6:d5:a4:c7:22:0b:79:9a:76:8b:9f:30:7c:
         49:c2:51:d5:08:2e:96:8b:3a:13:69:85:d0:dc:a5:fa:4a:8e:
         28:91:9f:14:75:30:bb:0b:b9:e5:48:ee:57:05:20:08:64:2b:
         ff:ea:7d:ed:1e:d6:d0:ed:40:4b:e0:15:22:ba:60:86:e4:92:
         9f:69:d6:6a:d1:8c:80:94:86:b3:15:cb:7d:f4:ba:a3:68:5e:
         dd:f6:4c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 13:05:40 2025 by rpki-client