Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/74a21568-ed70-303e-81ae-3d0aedcee153.roa
File:                     74a21568-ed70-303e-81ae-3d0aedcee153.roa (raw, json)
Hash identifier:          4w6/vPu8yCnIM2LEx5b5HXyJl2685rW+CEfAgat5zwo=
Subject key identifier:   BF:CB:16:C0:C9:9C:55:41:47:43:AC:DA:BC:E2:67:37:66:FA:33:31
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B3DB6ED5B63D9B7CB19B02700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/74a21568-ed70-303e-81ae-3d0aedcee153.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     18779
IP address blocks:        23.230.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b6:ed:5b:63:d9:b7:cb:19:b0:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=a5a1399e-b652-4a22-add6-a041c971c979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b9:ba:b2:2e:a6:9f:6c:50:77:52:c2:8b:85:
                    95:ea:58:64:39:a2:65:44:6e:7d:ad:a8:44:45:19:
                    e1:fe:91:b4:ca:c7:f7:35:c6:0e:3a:6f:e3:4d:6e:
                    e1:e4:ed:4a:a1:89:c6:2c:ea:ce:2a:4d:ff:79:23:
                    b6:64:bb:c9:18:c2:aa:d7:60:5f:27:1f:10:7b:d6:
                    18:64:ea:d9:09:18:7e:6c:d4:54:5b:c8:5b:c2:57:
                    f8:28:9c:ef:13:fe:8f:7f:be:b8:76:a5:f5:7b:4a:
                    32:bb:6c:fd:10:e6:33:d5:54:88:94:88:53:f7:5f:
                    d1:d2:62:da:db:fd:10:62:f7:81:87:73:4c:61:1d:
                    30:80:33:69:fa:eb:ed:21:b8:98:55:45:08:31:dd:
                    f1:4d:cd:05:15:8c:b5:32:6c:aa:c2:49:85:38:87:
                    5f:6f:d5:bd:02:94:e6:c1:a3:2d:14:c6:76:20:88:
                    5f:45:ab:0f:46:88:79:6e:e6:82:b9:2c:08:03:94:
                    9a:e5:2f:db:2f:cf:f0:d5:5f:fa:c7:51:82:6e:4c:
                    b8:9c:26:57:07:19:87:46:e8:17:9c:22:c1:7f:f8:
                    cf:11:02:7c:9d:b4:8c:a1:d6:65:bd:d6:aa:4f:13:
                    da:8f:c6:63:1a:bb:20:45:e8:81:e0:c9:2d:21:69:
                    03:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:CB:16:C0:C9:9C:55:41:47:43:AC:DA:BC:E2:67:37:66:FA:33:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/74a21568-ed70-303e-81ae-3d0aedcee153.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:af:f8:a5:3c:06:2b:7b:20:d8:99:e1:8f:45:71:e9:51:a7:
         af:ca:30:bd:9f:d3:dd:0d:fd:58:ce:85:39:37:0b:ee:60:f0:
         13:fe:14:c7:04:b2:a5:92:bc:2b:35:b5:d7:1f:f2:7d:70:e5:
         9c:70:3d:f7:f5:af:de:3c:13:fb:54:4e:26:ae:7c:a3:3f:bf:
         83:b7:63:94:f2:11:dd:92:d9:ca:53:e5:82:e0:d1:83:64:b3:
         fd:bf:52:f4:ca:39:fe:cd:7f:2b:90:33:ff:40:ae:f7:2a:86:
         55:b4:b2:1c:bf:8d:59:12:b2:90:73:82:6d:7a:59:ea:7f:67:
         fa:3a:59:e4:0d:6e:9b:b6:89:68:ac:2c:51:3d:b8:82:82:e1:
         bd:23:a8:e9:5b:06:67:a3:57:35:c3:27:f4:47:eb:67:cc:10:
         ee:f8:d4:a7:cd:dc:45:c4:d5:59:ed:b6:2f:bc:b3:c0:60:ac:
         0e:08:78:c9:d2:a5:61:ca:b7:94:79:0f:ee:f9:b0:dc:cc:a8:
         8c:10:81:be:4c:c4:3d:e2:c5:cf:60:71:4d:af:0f:23:a5:1d:
         08:bf:04:fb:86:97:98:a1:29:a8:c2:0b:b5:8e:bd:cb:39:b8:
         81:c3:7a:b7:32:06:6b:fb:a6:96:f1:ab:43:99:f0:03:20:11:
         65:d3:56:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9tu1bY9m3yxmwJwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
YTVhMTM5OWUtYjY1Mi00YTIyLWFkZDYtYTA0MWM5NzFjOTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbm6si6mn2xQd1LCi4WV6lhkOaJlRG59rahE
RRnh/pG0ysf3NcYOOm/jTW7h5O1KoYnGLOrOKk3/eSO2ZLvJGMKq12BfJx8Qe9YY
ZOrZCRh+bNRUW8hbwlf4KJzvE/6Pf764dqX1e0oyu2z9EOYz1VSIlIhT91/R0mLa
2/0QYveBh3NMYR0wgDNp+uvtIbiYVUUIMd3xTc0FFYy1MmyqwkmFOIdfb9W9ApTm
waMtFMZ2IIhfRasPRoh5buaCuSwIA5Sa5S/bL8/w1V/6x1GCbky4nCZXBxmHRugX
nCLBf/jPEQJ8nbSModZlvdaqTxPaj8ZjGrsgReiB4MktIWkDewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL/LFsDJnFVBR0Os2rziZzdm+jMxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNzRhMjE1NjgtZWQ3MC0z
MDNlLTgxYWUtM2QwYWVkY2VlMTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+Y1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFqv+KU8Bit7INiZ4Y9FcelRp6/KML2f090N/VjOhTk3C+5g8BP+FMcE
sqWSvCs1tdcf8n1w5ZxwPff1r948E/tUTiaufKM/v4O3Y5TyEd2S2cpT5YLg0YNk
s/2/UvTKOf7NfyuQM/9ArvcqhlW0shy/jVkSspBzgm16Wep/Z/o6WeQNbpu2iWis
LFE9uIKC4b0jqOlbBmejVzXDJ/RH62fMEO741KfN3EXE1Vntti+8s8BgrA4IeMnS
pWHKt5R5D+75sNzMqIwQgb5MxD3ixc9gcU2vDyOlHQi/BPuGl5ihKajCC7WOvcs5
uIHDercyBmv7ppbxq0OZ8AMgEWXTViQ=
-----END CERTIFICATE-----
Generated at Sat Oct 11 11:15:06 2025 by rpki-client