Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e09f8bea-1595-3d6c-a6ba-bb6a18b9b6e2.roa
File:                     e09f8bea-1595-3d6c-a6ba-bb6a18b9b6e2.roa (raw, json)
Hash identifier:          7BJgDz9+jdWLFkhlPZShK6DQjLwP/sFYVggya2HfrA8=
Subject key identifier:   EC:F1:B4:9B:3B:0E:D2:88:A8:2F:56:AB:0B:96:D8:5F:DA:14:7E:50
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B758CA6CBBEEE974CF2F61300
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e09f8bea-1595-3d6c-a6ba-bb6a18b9b6e2.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     400536
IP address blocks:        23.230.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:a6:cb:be:ee:97:4c:f2:f6:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=0978e588-b033-487e-a615-5791d1c0fa4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c8:bc:10:18:7e:07:8e:56:07:ca:fe:05:f3:
                    99:8b:98:00:ea:de:23:c4:a6:a5:3e:b6:da:56:8a:
                    5c:00:c7:d6:8d:a9:dd:dc:61:d3:cb:ad:c0:ce:a7:
                    78:8a:f5:5a:40:a9:10:7d:8e:d1:a5:b9:24:20:5c:
                    e1:65:9f:b1:4e:94:be:3b:6d:5c:d7:84:c1:50:df:
                    8a:64:ba:f6:7b:38:96:b7:42:33:41:2d:4a:ec:78:
                    3f:6b:00:fc:45:55:39:b0:78:09:a3:5a:91:08:e9:
                    8b:0a:dc:11:01:27:75:a9:1c:e8:93:33:63:74:56:
                    75:d6:59:84:4d:a6:08:8d:8b:b0:6a:35:0e:ac:f6:
                    a7:75:ed:dd:4f:45:48:eb:9e:d7:5d:4b:48:37:22:
                    7f:bb:b6:89:5d:7f:da:33:a2:a7:61:e5:6e:17:ba:
                    7e:a3:c2:db:24:0f:5d:28:f3:a0:89:cd:3e:9b:65:
                    af:14:0b:d2:2d:9a:64:48:79:80:67:e0:b1:76:df:
                    b2:e0:96:e7:67:89:04:4e:a8:65:f2:77:3d:1d:33:
                    c3:54:c3:8b:b6:f2:49:51:b1:50:c3:ae:8d:df:79:
                    e0:74:ab:f6:d5:cf:24:1a:f0:8a:08:54:77:c8:da:
                    23:74:01:ab:dc:4f:b7:f4:27:88:b6:c8:85:c0:c0:
                    1e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F1:B4:9B:3B:0E:D2:88:A8:2F:56:AB:0B:96:D8:5F:DA:14:7E:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e09f8bea-1595-3d6c-a6ba-bb6a18b9b6e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:bf:d2:63:0a:15:51:1f:a1:34:af:87:30:63:df:7d:20:ae:
         34:9d:0f:8b:5b:6c:41:92:43:63:03:6e:e1:09:d9:a8:48:7c:
         73:c1:56:d3:e8:8d:86:29:1d:9f:5c:9e:2d:52:68:0b:dc:9e:
         1b:83:e6:5c:2a:06:36:69:40:47:81:52:9a:a4:86:5a:2e:2c:
         09:58:f8:61:11:14:ea:dd:b5:64:e3:91:92:52:8d:ca:07:ea:
         38:ab:0b:0e:82:19:35:60:f1:3c:97:e6:49:2b:23:62:ec:1d:
         e4:92:5a:89:e4:7b:fa:d7:c6:f2:e7:79:ce:0d:50:1a:43:2c:
         88:26:80:e6:a9:6d:a2:ec:0a:73:7a:7b:a3:cb:8e:b7:4a:a3:
         2e:34:e2:f9:a6:ed:12:5d:5b:f2:0d:20:b6:46:8a:62:6c:f6:
         2b:46:bc:10:47:80:da:67:66:4e:2a:80:97:96:d7:e8:3e:ee:
         75:81:79:c9:23:1e:31:15:7e:b2:d4:b9:dd:d9:49:cc:34:07:
         8e:c3:57:b9:4f:34:85:7d:4d:f8:88:b5:86:5d:36:e2:27:fe:
         e5:47:1b:eb:16:15:62:e0:e4:6f:a3:7f:86:bb:30:6e:53:26:
         4e:5b:be:02:3b:43:d6:cd:29:c5:e2:f6:c7:2c:3b:fc:61:72:
         d3:af:66:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 13:01:22 2025 by rpki-client