Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f915a33a-8fb8-313e-878b-c72cf841dc5f.roa
File:                     f915a33a-8fb8-313e-878b-c72cf841dc5f.roa (raw, json)
Hash identifier:          Azo+DbsI13imQqRTUx/LCfJ3QEJWJ+4pmbHaNR4q0M4=
Subject key identifier:   C2:54:C6:5C:17:3D:6B:62:C8:6C:F6:27:F5:1A:14:7F:FB:71:39:BC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B5F37782BD4750EE961CCA380
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f915a33a-8fb8-313e-878b-c72cf841dc5f.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     5650
IP address blocks:        23.230.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:78:2b:d4:75:0e:e9:61:cc:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=c224c0d7-a03b-4ab9-9685-62077a2d0cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5d:a2:e8:70:35:d6:42:c0:a2:8c:34:a3:a5:
                    22:8c:64:41:a7:db:8a:21:1c:3e:78:93:ef:6f:0f:
                    1b:81:40:78:e0:c5:87:81:2d:d7:52:93:6f:6e:64:
                    5f:7a:e2:76:24:71:8e:b3:b6:ec:67:03:bc:31:92:
                    e7:e4:8e:b6:f0:eb:f6:6a:08:b9:aa:67:7d:09:bc:
                    ce:b6:83:a2:2f:1f:58:e2:81:5e:fa:cd:68:cb:98:
                    66:b9:cb:19:9e:8b:60:5a:a5:bf:5c:c5:0f:c6:76:
                    dd:3a:9e:04:33:2a:35:db:99:58:63:e4:3f:67:97:
                    e6:fb:56:f4:9d:90:2f:ed:dc:95:21:72:1b:43:97:
                    b5:c8:0e:be:3d:5b:ef:6d:aa:44:08:b5:80:87:23:
                    22:77:2c:a6:c3:17:cb:41:e9:0d:10:3a:5e:d8:95:
                    25:3e:f0:f5:af:d4:cf:39:0d:98:21:c8:9e:79:bc:
                    f1:a4:3f:10:1f:e3:5d:d9:96:96:cd:96:99:b3:4c:
                    c6:c5:57:18:6d:bc:f1:69:ea:dd:47:a2:35:0e:6d:
                    81:f6:78:0c:3d:47:4c:19:3d:97:34:4a:75:bc:5d:
                    11:e9:1e:32:93:c3:25:ef:55:c6:61:68:5a:64:1c:
                    9e:64:64:39:1b:8d:b9:8f:82:ae:28:c7:80:6a:bb:
                    bc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:54:C6:5C:17:3D:6B:62:C8:6C:F6:27:F5:1A:14:7F:FB:71:39:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f915a33a-8fb8-313e-878b-c72cf841dc5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e8:e3:ef:c5:29:56:7e:7f:b8:79:fd:5a:1f:19:42:81:14:
         c1:c2:68:a0:65:0f:83:81:70:72:29:e2:af:79:76:30:71:43:
         77:78:97:aa:62:9d:e3:c3:fb:9b:9f:22:a5:b1:e2:50:0a:33:
         4a:86:9e:62:f3:cc:da:4c:6a:c5:a5:4b:b5:55:72:c4:ff:71:
         c0:49:f0:26:62:21:2d:12:cb:09:68:e3:ce:b7:ed:4e:0c:a9:
         0d:46:94:78:15:da:ae:96:52:3e:4a:7e:eb:8c:af:2e:e0:58:
         c9:95:8c:20:c7:61:06:8e:f9:57:17:77:f2:f4:d4:a0:6f:d9:
         8f:35:66:90:b8:88:c5:1d:f8:56:8a:25:17:87:de:3c:d4:a1:
         9c:3c:2b:b7:3e:62:69:e9:a1:8a:5a:e8:cf:af:fa:bc:c5:54:
         a3:1b:1c:3c:4a:c2:c8:40:e2:a3:fd:42:90:30:77:06:ee:58:
         72:5d:e5:59:29:59:8a:68:d8:80:f3:17:5e:d9:6e:dd:4b:39:
         11:70:b0:2a:ad:11:e0:8d:de:6a:9e:e1:13:bc:aa:f6:dc:b6:
         c9:af:fb:6e:e1:4f:23:e2:12:2b:4e:48:0f:94:04:12:11:9e:
         c1:1c:74:6e:91:a6:ef:b9:2a:5d:22:a8:03:68:57:78:fe:34:
         9c:35:10:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 13:01:52 2025 by rpki-client