Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9670ac0d-6191-3f5a-beda-3a3c9e6d650d.roa
File:                     9670ac0d-6191-3f5a-beda-3a3c9e6d650d.roa (raw, json)
Hash identifier:          /HFyMq8aug974Ao8T3EYVtvUTDBu2dIVrnKkuFB+h58=
Subject key identifier:   0F:95:63:7A:7F:7A:68:B8:98:34:23:7A:DB:B4:27:9A:70:2E:A6:D5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B715D0C7A4E6D694D80AE1580
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9670ac0d-6191-3f5a-beda-3a3c9e6d650d.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     44477
IP address blocks:        23.230.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5d:0c:7a:4e:6d:69:4d:80:ae:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=8730fde8-cd4e-4ec4-b001-55909218744e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b2:91:08:9e:87:7f:51:b4:2d:01:39:ce:65:
                    ce:8f:04:13:93:73:45:3e:c2:9d:b6:08:3a:26:25:
                    34:03:53:a9:a9:f8:f0:e8:90:2b:4a:40:6a:1d:2c:
                    9c:3a:fe:eb:dd:92:49:ab:f6:24:54:18:79:24:da:
                    59:b7:dc:5c:85:19:ce:7c:75:44:60:a9:3c:cb:95:
                    84:54:13:97:fd:d5:65:c7:27:62:ef:e2:62:40:f1:
                    d4:98:89:c6:30:ef:51:f1:88:1f:03:8b:02:6c:ea:
                    e3:a9:5c:97:bc:8d:78:a9:f6:c6:03:e6:72:4b:bc:
                    ea:86:4f:e5:83:d7:26:b3:da:e6:57:15:02:74:09:
                    55:a4:ee:53:20:70:34:f3:5b:00:a5:20:f2:8c:87:
                    cf:c6:b9:22:cf:db:89:0a:19:c8:33:6f:07:ec:92:
                    f1:0d:6a:23:94:cf:aa:91:e8:04:75:39:bb:6f:1a:
                    1d:a2:57:a9:8f:9b:97:3c:35:e9:36:05:08:e8:01:
                    71:83:68:66:89:b0:dc:ff:78:8f:a7:f9:20:3d:c6:
                    8d:bb:b9:b7:83:d5:2c:be:84:ce:d6:91:97:79:56:
                    e9:3a:4a:78:3b:79:ec:69:b9:5c:c4:24:09:8b:f1:
                    3c:73:25:df:1c:bf:7a:03:4f:77:bd:2b:5a:d4:63:
                    30:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:95:63:7A:7F:7A:68:B8:98:34:23:7A:DB:B4:27:9A:70:2E:A6:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9670ac0d-6191-3f5a-beda-3a3c9e6d650d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:4f:04:87:da:75:49:05:aa:57:84:bd:a7:dd:0b:64:9b:05:
         b2:4a:f4:6f:d9:97:d8:41:8c:65:7f:ed:45:a3:a1:75:4d:0b:
         6b:64:55:99:31:ce:65:c0:8b:a2:8c:51:ed:f8:2c:9c:48:45:
         2a:c9:ab:55:cd:34:b4:6c:7d:96:48:1d:fc:5d:c6:29:d9:35:
         23:a2:a4:c5:30:ad:fb:68:06:00:cc:e6:db:0c:83:74:8c:32:
         29:af:88:b0:f4:4e:8e:7f:75:a6:1f:ca:7f:40:61:48:41:0a:
         ea:f1:e5:4b:cf:65:b8:35:3e:73:d2:0f:2d:59:65:0d:64:1f:
         18:c2:40:6e:6a:97:5f:96:79:2a:55:e1:09:4d:98:af:eb:ee:
         4b:1a:9d:b4:60:ea:9d:70:77:3c:e4:55:8b:1f:48:43:03:5c:
         b8:73:0f:a6:fa:88:b4:37:fa:90:69:a3:85:ed:f1:cd:1e:a5:
         34:11:56:75:6f:69:40:36:d6:0e:99:f7:eb:f3:9a:d0:5a:3d:
         37:d6:36:28:a2:a8:8a:6e:bf:54:cc:59:a3:f0:75:9e:fb:55:
         01:f1:97:0e:38:0f:10:52:a2:9e:91:e9:01:50:e7:57:c6:49:
         22:a6:66:fc:42:74:d4:2e:21:26:ad:0e:2f:5a:69:36:53:e7:
         1d:22:63:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:14:48 2025 by rpki-client