Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e870243e-2bab-3b14-90c6-3b50ee649216.roa
File:                     e870243e-2bab-3b14-90c6-3b50ee649216.roa (raw, json)
Hash identifier:          h/Zxpq4FmjNJNRhU+uYIKk9e/QTxLu85Mb1wI+W38gk=
Subject key identifier:   DE:9C:7F:2E:3C:B7:2C:89:8F:0E:EF:07:AF:0D:C1:29:04:3E:6B:71
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B3DBA27B6C94879C0A1EEA600
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e870243e-2bab-3b14-90c6-3b50ee649216.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     18779
IP address blocks:        23.230.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:27:b6:c9:48:79:c0:a1:ee:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=121a2af5-7268-4937-a2d8-3476052db8ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1a:7e:c3:c2:dd:97:72:a2:27:6d:1d:fa:90:
                    f3:7d:b9:a4:2d:c0:1d:9d:3c:ce:f3:ff:ad:da:fc:
                    f6:2e:94:7c:7f:5e:7c:e3:88:b4:59:97:89:a9:3a:
                    cd:92:b8:66:c2:b6:89:53:cf:b6:6c:89:0c:0d:5c:
                    d9:49:74:2a:22:a9:9f:23:c1:c1:7c:89:1f:01:60:
                    82:da:5f:c9:5e:c0:5c:f5:f1:89:53:13:15:51:5c:
                    f6:36:fd:d1:83:e1:f9:db:04:9f:94:12:35:2a:03:
                    0c:6f:c9:c7:05:b6:19:9c:40:75:08:b5:57:2d:12:
                    c9:37:3c:c3:4b:ce:ca:95:2d:e3:4e:96:f0:ef:89:
                    57:fb:4a:2c:6e:66:19:0c:10:f6:72:35:52:98:1d:
                    e5:e7:b5:61:7c:2f:3a:90:da:61:b1:4a:7d:6f:00:
                    53:b1:c2:a3:ba:69:60:ec:2e:6c:04:3b:4b:b6:c1:
                    ed:6f:ca:a3:42:28:d4:dc:b0:8f:0c:87:9d:46:73:
                    90:14:b1:94:c4:56:9c:c2:e9:44:9b:ec:16:ee:c2:
                    c8:b1:23:0c:9a:11:69:4c:e6:89:80:18:d3:3b:57:
                    97:3f:62:0e:1d:2b:59:37:fc:27:f7:c1:50:8d:d3:
                    bb:52:a1:61:cd:8d:6c:37:ff:5f:11:bd:0a:2c:b1:
                    7c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9C:7F:2E:3C:B7:2C:89:8F:0E:EF:07:AF:0D:C1:29:04:3E:6B:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e870243e-2bab-3b14-90c6-3b50ee649216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:92:0f:23:fc:33:ea:a8:88:13:2e:97:a5:51:2b:b8:31:62:
         8a:b0:e0:80:38:27:fc:94:9a:0e:68:ed:7d:b5:6e:60:bd:38:
         aa:a3:3f:9e:dd:02:b2:00:48:0f:c7:81:83:c6:24:fd:a4:5e:
         51:b5:ee:f7:b3:95:3e:f7:6e:f3:4e:ca:f6:6e:33:c6:04:ea:
         1c:17:dd:17:6f:f2:a6:5a:d4:6f:57:27:b9:ba:df:a9:94:53:
         c5:4a:70:ef:31:54:ab:15:aa:60:2b:b4:da:0a:c5:18:70:af:
         df:d8:5e:a3:ba:1b:18:98:09:5f:ca:b9:0f:a1:e3:ba:15:50:
         62:12:0b:d1:9d:75:c8:88:29:b2:c6:4d:0b:2e:72:1a:77:65:
         e0:0e:9b:8b:eb:d8:57:4e:a1:05:a9:04:3f:fa:43:ca:90:c4:
         58:4f:90:66:7a:93:39:64:e7:b3:ed:17:8a:11:05:c9:da:a8:
         09:51:df:64:8e:b2:87:2d:71:b2:48:c5:25:35:b6:f3:e1:c5:
         68:59:1d:c7:5f:44:39:7a:c5:72:d5:8b:22:4a:db:c6:4b:34:
         73:1d:ec:d9:f4:f8:44:09:9f:f5:b7:55:e6:82:ef:8a:77:d1:
         64:40:dd:35:51:e3:db:be:77:0b:9b:52:cf:04:69:04:e7:b0:
         0f:ac:63:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:15:03 2025 by rpki-client