Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df2c039e-b712-3c31-8fea-2a1b8df1f43f.roa
File:                     df2c039e-b712-3c31-8fea-2a1b8df1f43f.roa (raw, json)
Hash identifier:          V+FCfyWxbH7zLbCPvmnl0yicWwBZMZUEbTvI+6mV9vc=
Subject key identifier:   07:93:3D:87:43:E9:41:09:3C:D7:58:6A:07:EC:37:A3:A3:22:4A:DB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B715D0D21D1AA16077211BB00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df2c039e-b712-3c31-8fea-2a1b8df1f43f.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     44893
IP address blocks:        23.230.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5d:0d:21:d1:aa:16:07:72:11:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=ff59651b-12ce-4e70-b241-b3720877525b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:32:65:3c:0f:d6:46:12:a0:81:09:6f:c5:e0:
                    7b:e4:37:35:f2:6b:b9:d0:56:9e:4c:26:aa:67:93:
                    02:e0:e2:f8:f0:ec:45:2f:10:61:5a:a1:a9:c6:c6:
                    c2:ca:80:07:da:af:de:16:90:12:80:7e:85:aa:47:
                    2d:a8:6f:e1:44:14:d9:20:c0:94:51:46:8b:37:31:
                    c0:09:a8:73:de:6a:44:5a:ee:18:c5:df:df:5f:9f:
                    64:ea:65:d0:90:cc:72:4e:fd:42:9b:f9:f1:36:2c:
                    9f:80:72:2c:e9:8c:fb:06:fe:d0:6d:1b:49:f9:d5:
                    48:31:58:eb:35:b1:bb:44:7e:b2:0c:83:1b:72:f7:
                    56:2b:67:a9:e7:e7:0b:ef:40:b3:d5:ce:97:06:5e:
                    c3:40:82:7f:f7:f5:43:49:02:8d:9f:2f:ce:e9:da:
                    49:f6:35:8e:a3:a8:68:db:de:e3:5e:c7:a3:70:86:
                    aa:94:a9:e4:66:97:c2:47:76:96:76:8b:fa:78:68:
                    a4:4e:e5:28:be:64:77:85:02:f7:43:cf:73:2b:18:
                    53:70:89:1d:9d:40:94:77:71:96:7f:ad:8e:88:83:
                    2f:93:1f:ea:95:8f:7c:20:86:b6:70:10:fe:8b:97:
                    73:14:80:45:b5:22:60:ab:50:d8:51:77:0b:62:f7:
                    40:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:93:3D:87:43:E9:41:09:3C:D7:58:6A:07:EC:37:A3:A3:22:4A:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/df2c039e-b712-3c31-8fea-2a1b8df1f43f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:a0:0d:cb:fb:3a:b7:7c:d7:90:b3:bb:84:3a:f4:a8:13:80:
         d9:ed:85:a9:f4:d2:98:30:26:49:f0:fe:4c:76:0f:a9:a9:c3:
         b6:57:1e:74:22:4e:98:0d:9c:0a:c1:e3:44:f7:e8:d3:7c:aa:
         98:b2:2c:a4:58:18:93:39:d8:af:8d:fc:a6:4f:49:f3:82:9c:
         a3:c4:e1:49:0f:3b:04:f6:7d:d6:2d:fa:8e:5c:3b:89:41:fd:
         b6:a5:4b:fe:7f:aa:84:9a:48:f7:e4:fc:37:b6:f9:50:68:8d:
         82:32:2e:95:20:d5:5b:3e:b5:97:22:93:d2:8e:c8:40:bd:2f:
         32:dd:9d:d2:af:c9:23:fb:a7:1e:c2:6c:33:59:b6:02:be:78:
         07:f5:70:10:76:bd:28:8e:39:c3:4f:40:2b:5e:b4:c0:38:1b:
         4f:1c:93:e1:9b:ac:35:cd:7b:41:ef:d7:94:b6:80:29:fb:8f:
         45:6c:01:81:0d:f9:71:5c:de:1d:2b:47:53:9b:5b:0f:32:81:
         05:ce:4a:e2:b6:ae:2b:fb:54:63:b5:96:ed:c2:60:10:22:f3:
         50:96:d2:bf:da:8d:3f:45:87:47:1d:29:3e:42:2e:6f:3d:83:
         6e:48:63:1e:fd:e9:34:20:c0:32:a9:e8:32:93:94:81:40:06:
         25:7b:f0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:17:51 2025 by rpki-client