Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e1f596b6-4772-3904-b75f-53d7ac42beaf.roa
File:                     e1f596b6-4772-3904-b75f-53d7ac42beaf.roa (raw, json)
Hash identifier:          d43NTWfZ+i/S7IGdcGSittCD3IyEae7ZcYgwdcexzaA=
Subject key identifier:   2A:E5:EE:D9:E2:78:8D:9F:B1:24:32:D1:4B:B9:67:1D:D2:AF:A0:99
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B3DB6EF128317F6017C213800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e1f596b6-4772-3904-b75f-53d7ac42beaf.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     18779
IP address blocks:        23.230.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b6:ef:12:83:17:f6:01:7c:21:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=38bf6a8f-676a-4186-9c71-5f5f5e1fcf7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:01:f4:66:74:9b:d9:55:33:60:0b:3b:bc:64:
                    99:98:65:1c:41:f1:12:b1:3b:bc:14:9a:c7:17:0e:
                    fd:45:00:bb:a5:7a:ef:38:44:ea:29:d9:68:44:d3:
                    d1:a6:7a:d6:9a:63:6c:70:12:12:9f:eb:2c:64:3f:
                    f0:80:e0:ae:02:ed:a6:38:9b:b0:d3:66:10:08:39:
                    ca:a5:40:51:e4:ce:2c:2c:2b:07:ae:cd:74:d5:f9:
                    91:f6:1f:fb:4b:b8:09:a9:65:45:e4:9a:97:90:2a:
                    43:de:f5:39:56:b8:65:45:70:98:89:2f:3d:b6:be:
                    f3:ab:49:07:d8:1a:bb:cd:e9:22:d0:14:4e:81:4e:
                    63:33:dd:9b:b3:6d:19:be:a8:5c:9d:a0:e5:22:4b:
                    12:44:c7:fd:0b:88:13:69:3c:31:3f:31:ac:c6:7e:
                    53:6f:9c:4e:84:ca:5c:64:18:76:ac:0a:9f:0a:00:
                    52:3e:6d:70:2e:9d:00:9a:08:12:28:00:dd:75:dd:
                    b7:c5:ce:71:3c:e1:cf:4e:c9:0f:1b:a8:a7:16:e6:
                    11:37:40:75:4c:d1:1a:71:44:9c:cf:23:0a:64:98:
                    dd:e2:bb:4f:d2:9f:2a:47:ad:e4:78:fc:bf:98:9f:
                    74:7a:2c:b6:81:d5:a8:22:75:44:62:0d:41:89:bd:
                    e9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E5:EE:D9:E2:78:8D:9F:B1:24:32:D1:4B:B9:67:1D:D2:AF:A0:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e1f596b6-4772-3904-b75f-53d7ac42beaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:71:f5:f0:9c:9b:ec:ba:da:d0:ca:ce:27:fc:1b:4b:ff:5f:
         fb:77:a5:91:0c:e5:95:98:24:4f:9f:a7:02:72:74:a1:b7:55:
         f0:8a:9b:27:77:bb:92:4c:d0:c2:5c:0b:3a:73:3a:b7:0c:d4:
         01:eb:af:08:2d:c7:cd:65:01:92:cc:99:47:6e:8c:17:65:57:
         f7:25:de:99:d1:08:5e:5e:cd:0f:50:1d:86:8b:aa:7f:04:ba:
         d9:9d:ec:ff:0a:00:07:ab:a3:35:a3:61:e5:50:01:ae:5e:a5:
         7c:3f:b3:75:ca:07:1e:6b:f8:89:dd:e3:8a:90:73:2c:0a:96:
         b2:40:bd:fd:8b:13:69:db:15:e0:ae:c2:23:e3:b7:cf:28:b5:
         77:64:47:fd:8e:9c:ba:3e:b2:2d:97:43:12:4f:23:fe:d5:c8:
         87:e1:82:f0:36:e9:b4:2d:e0:74:bb:3d:d4:6e:8e:f7:59:6c:
         32:fc:89:6c:e0:c1:43:2e:96:05:3b:fd:6e:44:c0:85:b2:3f:
         33:5d:1a:56:33:61:fd:6b:f4:d3:04:83:62:a2:d1:26:64:f2:
         3d:bb:a6:c0:35:76:65:af:27:bb:45:bf:18:32:c7:64:fd:12:
         49:95:6f:84:53:7b:9e:b4:43:db:03:df:f1:b0:4a:a9:d6:b2:
         7d:8c:39:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9tu8Sgxf2AXwhOAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
MzhiZjZhOGYtNjc2YS00MTg2LTljNzEtNWY1ZjVlMWZjZjdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QH0ZnSb2VUzYAs7vGSZmGUcQfESsTu8FJrH
Fw79RQC7pXrvOETqKdloRNPRpnrWmmNscBISn+ssZD/wgOCuAu2mOJuw02YQCDnK
pUBR5M4sLCsHrs101fmR9h/7S7gJqWVF5JqXkCpD3vU5VrhlRXCYiS89tr7zq0kH
2Bq7zeki0BROgU5jM92bs20ZvqhcnaDlIksSRMf9C4gTaTwxPzGsxn5Tb5xOhMpc
ZBh2rAqfCgBSPm1wLp0AmggSKADddd23xc5xPOHPTskPG6inFuYRN0B1TNEacUSc
zyMKZJjd4rtP0p8qR63kePy/mJ90eiy2gdWoInVEYg1Bib3plQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCrl7tnieI2fsSQy0Uu5Zx3Sr6CZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZTFmNTk2YjYtNDc3Mi0z
OTA0LWI3NWYtNTNkN2FjNDJiZWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+ZjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFhx9fCcm+y62tDKzif8G0v/X/t3pZEM5ZWYJE+fpwJydKG3VfCKmyd3
u5JM0MJcCzpzOrcM1AHrrwgtx81lAZLMmUdujBdlV/cl3pnRCF5ezQ9QHYaLqn8E
utmd7P8KAAerozWjYeVQAa5epXw/s3XKBx5r+Ind44qQcywKlrJAvf2LE2nbFeCu
wiPjt88otXdkR/2OnLo+si2XQxJPI/7VyIfhgvA26bQt4HS7PdRujvdZbDL8iWzg
wUMulgU7/W5EwIWyPzNdGlYzYf1r9NMEg2Ki0SZk8j27psA1dmWvJ7tFvxgyx2T9
EkmVb4RTe560Q9sD3/GwSqnWsn2MOWI=
-----END CERTIFICATE-----
Generated at Sat Oct 11 11:09:08 2025 by rpki-client