Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8a2463e2-60b4-3f18-8bca-1e871239dc3e.roa
File:                     8a2463e2-60b4-3f18-8bca-1e871239dc3e.roa (raw, json)
Hash identifier:          ueRFydN1TXBSJao5XB8adjGRGvwfP4t4u17SVbGGxgE=
Subject key identifier:   C2:1D:2D:46:74:04:F2:30:8D:1C:5C:F8:E5:F9:39:EA:DA:58:13:0B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A84A83EEAAAF010AC0A14A380
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8a2463e2-60b4-3f18-8bca-1e871239dc3e.roa
Signing time:             Mon 14 Jul 2025 18:06:28 +0000
ROA not before:           Mon 14 Jul 2025 18:06:28 +0000
ROA not after:            Sun 12 Oct 2025 18:06:28 +0000
asID:                     44559
IP address blocks:        23.230.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:a8:3e:ea:aa:f0:10:ac:0a:14:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 14 18:06:28 2025 GMT
            Not After : Oct 12 18:06:28 2025 GMT
        Subject: CN=3c89781a-e105-4d80-ba07-0639c5a7aefa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:62:97:fb:cd:8d:b9:51:87:03:9e:4e:59:c9:
                    1e:dd:e2:a4:fc:41:d7:a5:ba:f0:8b:06:2b:39:6c:
                    b0:57:48:ea:db:9f:ad:0a:3f:cd:fb:48:22:4e:94:
                    82:57:a7:02:ad:f3:dd:4a:47:46:d6:79:c4:4c:50:
                    04:fd:65:2e:4e:a7:a8:b7:fb:63:e7:e2:a1:c5:78:
                    14:9f:2e:de:99:dc:df:2d:fd:31:2f:62:aa:87:70:
                    fb:70:ba:ef:85:5a:ab:9b:52:e6:ce:93:2a:2d:3c:
                    bc:ac:2a:51:0e:ce:3a:0a:50:c9:0a:84:b6:8c:39:
                    54:b3:6a:f1:a9:c7:e9:bc:db:2d:66:4a:d0:b8:25:
                    a2:81:c9:fe:ca:62:b9:ca:82:1c:27:f6:41:3f:0c:
                    71:9d:85:6c:ca:ae:55:9f:47:77:8b:0f:9f:5c:1c:
                    cd:7f:a3:f2:f9:84:90:07:ee:07:c2:f9:50:d2:0e:
                    c9:c9:b4:a7:8c:65:58:fb:19:95:f7:0c:15:18:db:
                    37:4f:e4:24:69:80:c1:f5:ad:ac:35:1d:66:0b:d4:
                    64:8b:13:47:2a:0f:61:60:9e:1e:cf:7b:ce:cd:ac:
                    be:a7:a8:b9:35:12:15:0f:a5:c4:f4:18:29:8d:0e:
                    18:0b:d7:96:84:91:02:0e:9a:ab:2b:92:c3:e3:40:
                    e4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1D:2D:46:74:04:F2:30:8D:1C:5C:F8:E5:F9:39:EA:DA:58:13:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8a2463e2-60b4-3f18-8bca-1e871239dc3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:73:45:64:59:88:8f:31:25:64:22:26:ec:46:5e:4f:92:f2:
         a8:db:38:a1:f2:d9:5a:03:a9:80:fc:7c:0f:cf:c1:7b:17:7c:
         3a:c7:7a:b3:83:b1:66:67:71:6d:8c:08:28:dc:5b:a7:33:f9:
         79:d5:ad:87:71:7d:64:84:bb:2e:8b:67:44:0d:e5:7a:2f:eb:
         23:00:21:42:97:a8:b7:3b:18:2f:fd:0c:96:64:4b:55:b9:56:
         5f:6e:b9:e1:99:50:54:04:32:2b:e1:2d:03:59:ea:9a:d7:3f:
         f0:4a:ca:f9:8a:ac:d4:df:52:2c:de:70:9f:a6:39:df:0c:f8:
         c9:27:46:4d:67:c4:92:5d:12:95:9b:c3:8d:90:13:d7:eb:77:
         81:8d:2d:1a:ab:11:d1:89:e4:26:6a:32:e0:14:9f:b0:11:05:
         44:31:40:d7:5c:31:a4:03:a7:82:d9:75:6a:f4:2e:91:8e:04:
         1b:16:3d:ec:e8:a4:c0:73:03:4e:15:25:cf:04:df:6d:55:1a:
         a7:65:cd:6d:16:9b:4f:ce:4f:3a:03:12:84:94:88:37:96:6c:
         d8:cc:b0:b1:58:65:e8:be:99:24:0b:fa:35:a3:43:d2:a6:fa:
         91:ba:03:97:b3:30:82:e1:e4:b7:49:60:a1:cd:71:5c:f4:5b:
         08:83:97:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:31:30 2025 by rpki-client