Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cb6aba6b-5b6f-3894-a9f1-e7f44a6654df.roa
File:                     cb6aba6b-5b6f-3894-a9f1-e7f44a6654df.roa (raw, json)
Hash identifier:          A8qza2io7+G33X1RUvKbQuwAgT4V1b7slJLzOwvMdJ8=
Subject key identifier:   D3:54:F0:40:48:38:6B:7A:9A:D3:FD:A5:12:64:37:27:C8:A5:B3:89
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B3DBA2C44CEDCB3727EECF5E0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cb6aba6b-5b6f-3894-a9f1-e7f44a6654df.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     142111
IP address blocks:        23.230.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:2c:44:ce:dc:b3:72:7e:ec:f5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=7c468482-5d00-48ed-926e-ef7c13b8f04c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0f:9c:b0:3e:ee:33:3b:7e:25:37:06:83:ca:
                    a9:be:02:ac:16:d1:4f:7c:64:e5:23:5b:49:5e:62:
                    6a:13:9d:02:5c:31:61:6e:b2:d4:b6:e9:d8:0c:91:
                    dd:37:28:40:5d:9c:6e:9e:47:ef:d8:7e:1f:88:e3:
                    b7:53:da:21:d4:27:bc:3a:a4:6b:e1:0a:f1:c8:f9:
                    2c:11:d6:20:30:0f:ad:8c:23:ab:72:56:03:2c:d9:
                    ac:94:7b:ff:f7:00:56:8f:98:22:fa:a3:d0:e3:c9:
                    ae:a6:58:ce:2d:2f:84:64:cd:74:7c:0d:07:2b:b1:
                    b3:3a:b8:5f:38:24:2d:3e:c2:80:72:10:e1:4e:30:
                    2a:f3:ca:97:98:48:ef:b4:b5:e9:35:5a:9b:37:26:
                    52:1e:25:f1:4c:e6:66:20:8d:d6:9e:95:5b:33:95:
                    8e:fe:b0:1d:39:d2:3d:73:ce:9f:b1:58:eb:a4:2d:
                    a1:06:f4:e1:c6:d6:c4:fa:84:c1:9c:1e:de:86:82:
                    76:f3:d8:d5:fb:c1:be:f3:42:8f:e8:0a:68:5c:4b:
                    55:dc:72:8b:78:d6:22:ff:14:e0:3a:66:7f:7d:29:
                    13:e0:d9:69:02:3d:e1:55:9a:1f:ba:35:4c:77:7e:
                    aa:d0:25:fe:27:f1:d2:74:87:54:ad:53:ca:ba:6b:
                    00:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:54:F0:40:48:38:6B:7A:9A:D3:FD:A5:12:64:37:27:C8:A5:B3:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cb6aba6b-5b6f-3894-a9f1-e7f44a6654df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:85:44:cc:1d:af:54:58:47:f3:93:3c:54:92:05:d7:d0:75:
         ff:75:28:f2:81:be:47:ae:74:df:49:cb:cc:77:bd:47:a5:8f:
         b4:3f:df:07:5f:85:05:f7:66:d1:58:0f:7e:f2:68:3d:1a:75:
         d0:b5:b4:36:67:7d:97:ec:0e:3d:ae:0a:48:1a:1c:91:a2:06:
         4d:17:4f:b6:91:fc:1b:97:87:cc:ec:18:4c:a5:cb:0c:90:e9:
         0f:0d:c5:29:aa:7f:2a:a4:38:d9:6b:7a:91:de:fd:4a:22:8e:
         8d:cb:8f:24:a1:9e:ac:cf:20:e2:92:4d:4d:cc:71:8d:e4:79:
         60:b3:80:91:1e:84:1f:22:07:9f:7b:2b:3c:e3:7e:96:9f:9a:
         9e:27:9a:f9:a3:2e:54:e7:12:6a:2c:2a:e2:9d:31:09:e7:03:
         7b:ee:38:97:cb:2d:7f:53:e5:b2:42:ab:f3:19:b2:e6:50:6d:
         47:eb:ea:33:d1:db:41:dd:94:aa:b0:e8:1c:d7:6a:36:5e:31:
         15:c4:30:d4:55:9b:93:7f:a0:84:d5:a2:61:ee:d2:7f:c2:3a:
         55:35:31:40:8a:56:07:5a:32:40:ab:35:23:bf:aa:9a:f7:bc:
         30:d2:05:62:de:21:fc:8e:a3:6a:a2:72:40:ae:5b:47:fb:33:
         13:b8:81:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 13:09:56 2025 by rpki-client