Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4ddf83f6-86b5-39b5-a27c-a559dc02faca.roa
File:                     4ddf83f6-86b5-39b5-a27c-a559dc02faca.roa (raw, json)
Hash identifier:          El6Q3TNB82Y37+OFN7CaT2NrkMhsvBOgJ9iHFD1D4VI=
Subject key identifier:   6C:A0:71:31:68:53:0D:0F:3F:E2:7F:32:04:EF:B1:29:1C:37:01:3F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B6367474D4B96E84F514E1E80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4ddf83f6-86b5-39b5-a27c-a559dc02faca.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     7922
IP address blocks:        23.230.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:47:4d:4b:96:e8:4f:51:4e:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=4cc2fdb8-ad5f-4fe0-ba21-367f6d28f770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:00:29:90:c3:bd:eb:59:4c:64:ad:43:39:9c:
                    57:b5:0e:d8:02:c4:05:44:69:25:f3:40:a4:c4:62:
                    99:39:f5:21:bf:88:af:54:fe:f1:f7:a8:bb:82:1a:
                    3c:48:f5:2a:0a:f3:aa:1e:bf:59:c8:03:be:4d:e4:
                    20:6a:fd:c4:7d:2c:e1:70:23:13:cc:0b:ec:58:b7:
                    a9:72:cb:cd:1e:73:b1:f0:ec:67:53:5c:dd:7c:8c:
                    1d:cf:be:e1:5f:f9:73:2a:1d:38:b8:9b:06:12:ca:
                    f8:fa:d2:07:fc:6d:82:cb:f5:4f:54:91:22:22:c1:
                    bd:5a:c6:91:62:63:77:ec:50:94:41:09:55:ae:4a:
                    37:04:c7:15:bf:7f:f7:b4:a4:f7:49:f2:c5:ae:a1:
                    cc:1f:6a:24:5e:19:58:da:20:9e:1e:58:32:ca:3c:
                    23:53:1e:ee:14:a4:6b:4c:bd:54:28:f1:61:26:b7:
                    74:19:de:ee:38:15:41:06:65:58:d5:75:25:52:2c:
                    45:96:1f:27:7d:df:cc:df:08:76:34:e1:c8:e6:b9:
                    f0:a5:54:b4:7f:40:42:d9:13:a2:f9:60:2b:37:aa:
                    26:f3:4b:9c:64:bb:cb:4f:ff:dc:79:ad:37:aa:89:
                    84:1a:2d:eb:ed:44:f0:28:01:74:04:20:b5:f7:56:
                    49:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A0:71:31:68:53:0D:0F:3F:E2:7F:32:04:EF:B1:29:1C:37:01:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4ddf83f6-86b5-39b5-a27c-a559dc02faca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:36:94:e3:be:7c:02:27:26:71:f2:77:9d:8a:1b:63:22:22:
         98:24:43:de:02:52:3f:61:a1:66:b5:21:75:30:cd:09:36:8a:
         48:d3:e2:ef:66:8a:06:70:d7:92:32:84:db:11:5e:4d:6f:d2:
         8b:4f:6b:4e:ea:2e:77:ab:cf:96:51:4c:fc:0c:6d:3a:b1:6b:
         5c:d9:bd:3e:95:4e:48:1c:95:e2:93:d5:ae:d3:2e:90:08:8d:
         51:98:55:c7:27:24:32:f7:5b:6a:ae:4f:d7:fd:86:2f:4f:a3:
         58:f2:b5:ff:a4:21:54:a2:49:6b:15:2e:d3:db:ba:ed:b9:d5:
         4f:80:5b:46:7d:d7:47:6f:83:30:b2:21:7c:18:e1:ad:98:a1:
         89:ab:d4:25:94:09:59:09:e2:f7:7f:0e:fd:a3:7a:54:11:e0:
         ad:fc:d2:de:55:f4:82:f7:a7:bd:cf:d5:71:f0:61:b8:4e:38:
         09:85:a0:7a:43:44:ce:c0:5f:c6:a1:a4:ea:b9:b6:18:50:dc:
         5b:fd:6f:ee:26:83:ce:49:66:d6:8a:12:5a:c4:e0:25:2b:b8:
         48:92:85:51:48:5d:0e:b0:34:20:c3:3f:40:bc:98:a5:15:bd:
         eb:3b:8a:86:b6:32:4c:01:81:d8:f2:6a:61:11:38:16:41:04:
         87:f0:2c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:17:47 2025 by rpki-client