Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c7f3f36-5bc8-3677-980b-e4182a501ba7.roa
File:                     3c7f3f36-5bc8-3677-980b-e4182a501ba7.roa (raw, json)
Hash identifier:          zdpQxHYlqQlrksBcp6RJrTX3ycyeBlAguPrRoI4iWQY=
Subject key identifier:   58:A1:1B:BD:F7:FA:6A:AD:A0:F7:A9:7D:6A:8A:B2:2C:0E:75:37:AB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B3DBA27F62F67C54971D14A00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c7f3f36-5bc8-3677-980b-e4182a501ba7.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     18779
IP address blocks:        23.230.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:27:f6:2f:67:c5:49:71:d1:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=629e5331-93f0-4c0a-8993-8b17463c9dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3a:23:37:f9:a9:45:9c:7e:13:e7:72:f6:b9:
                    b4:28:a6:70:ef:44:f7:c7:da:d5:b5:ed:10:53:31:
                    fb:14:a9:18:54:af:90:ad:2c:e6:a7:cd:15:bd:47:
                    c6:9a:6d:3f:20:67:e8:cc:70:45:df:9e:3c:12:17:
                    d8:71:1c:28:dc:55:14:04:70:a7:80:df:e7:b8:d9:
                    98:b6:96:b1:d6:d1:3c:4e:4e:ca:82:76:6b:a2:9a:
                    95:ec:ef:79:9e:05:22:db:fc:fe:e0:af:35:c6:7c:
                    60:42:2d:fa:7b:b6:54:fa:9c:95:c0:a1:1a:bb:77:
                    c9:1a:56:c6:90:d1:a2:87:f7:38:58:d3:b1:b9:43:
                    8c:19:f9:29:e2:a3:64:f8:28:ed:6d:e8:02:06:d7:
                    78:93:b5:69:43:93:43:fb:0f:5c:06:7f:b0:53:dd:
                    3e:f7:58:d6:41:07:2e:b9:af:e0:10:99:3a:d0:48:
                    9c:21:4c:49:a5:09:9b:8f:04:14:a4:e5:ce:41:0e:
                    ff:10:c5:f7:66:97:7f:4d:be:2a:cf:57:68:69:27:
                    ed:4c:fb:92:8b:bd:20:54:26:b2:20:39:98:a9:45:
                    a2:54:f1:75:7d:b6:49:52:b2:22:6d:2a:7d:38:7d:
                    1e:39:51:67:ce:f3:15:06:7d:0a:20:ac:4c:bb:7a:
                    d3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A1:1B:BD:F7:FA:6A:AD:A0:F7:A9:7D:6A:8A:B2:2C:0E:75:37:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c7f3f36-5bc8-3677-980b-e4182a501ba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:c2:93:31:f0:32:91:18:94:d2:b0:3c:86:ca:bd:0c:2f:8c:
         12:d0:af:2d:a6:f0:2b:53:29:78:df:cf:6f:ea:d3:af:0d:64:
         24:a1:fc:dc:54:7a:72:7c:ea:d9:87:aa:1a:b2:0a:13:88:03:
         37:a2:db:19:53:22:af:5d:91:f8:3f:68:16:2c:d0:2c:ce:ad:
         1a:bd:53:69:43:73:7a:53:7d:9e:bc:4f:be:b5:f5:92:20:a4:
         6f:8a:74:61:7e:56:a6:70:e3:ed:b6:47:af:40:e6:1b:7e:42:
         23:93:24:c7:fe:59:92:64:ff:75:c9:95:a1:5c:7d:5c:85:ce:
         c5:68:4e:70:4e:e8:1b:9c:b0:0c:d9:24:56:09:2e:5e:98:63:
         1b:d9:97:57:29:89:31:bf:4b:03:a8:7f:db:52:3e:9b:7e:d7:
         c2:c5:0b:44:8e:53:4b:e4:c4:72:55:15:41:d6:ce:e5:2f:68:
         8e:6b:14:c3:25:68:53:16:10:b3:5a:39:87:9d:b9:3e:87:44:
         1d:6d:31:81:d1:c8:4d:72:47:1e:01:4e:52:6d:46:47:a3:20:
         c8:e2:1d:4f:ac:c0:6c:f2:38:6f:f5:1e:dc:66:08:29:db:46:
         9f:97:7a:50:d1:ee:37:ee:3a:e8:50:44:ac:39:03:4b:b1:89:
         ef:4b:5f:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uif2L2fFSXHRSgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
NjI5ZTUzMzEtOTNmMC00YzBhLTg5OTMtOGIxNzQ2M2M5ZGJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjojN/mpRZx+E+dy9rm0KKZw70T3x9rVte0Q
UzH7FKkYVK+QrSzmp80VvUfGmm0/IGfozHBF3548EhfYcRwo3FUUBHCngN/nuNmY
tpax1tE8Tk7KgnZropqV7O95ngUi2/z+4K81xnxgQi36e7ZU+pyVwKEau3fJGlbG
kNGih/c4WNOxuUOMGfkp4qNk+CjtbegCBtd4k7VpQ5ND+w9cBn+wU90+91jWQQcu
ua/gEJk60EicIUxJpQmbjwQUpOXOQQ7/EMX3Zpd/Tb4qz1doaSftTPuSi70gVCay
IDmYqUWiVPF1fbZJUrIibSp9OH0eOVFnzvMVBn0KIKxMu3rTywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFihG733+mqtoPepfWqKsiwOdTerMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2M3ZjNmMzYtNWJjOC0z
Njc3LTk4MGItZTQxODJhNTAxYmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+YGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEzCkzHwMpEYlNKwPIbKvQwvjBLQry2m8CtTKXjfz2/q068NZCSh/NxU
enJ86tmHqhqyChOIAzei2xlTIq9dkfg/aBYs0CzOrRq9U2lDc3pTfZ68T7619ZIg
pG+KdGF+VqZw4+22R69A5ht+QiOTJMf+WZJk/3XJlaFcfVyFzsVoTnBO6BucsAzZ
JFYJLl6YYxvZl1cpiTG/SwOof9tSPpt+18LFC0SOU0vkxHJVFUHWzuUvaI5rFMMl
aFMWELNaOYeduT6HRB1tMYHRyE1yRx4BTlJtRkejIMjiHU+swGzyOG/1HtxmCCnb
Rp+XelDR7jfuOuhQRKw5A0uxie9LXzE=
-----END CERTIFICATE-----
Generated at Sat Oct 11 11:13:30 2025 by rpki-client