Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4fd9bc15-3b64-3deb-9c94-0e590cde91a4.roa
File:                     4fd9bc15-3b64-3deb-9c94-0e590cde91a4.roa (raw, json)
Hash identifier:          FYY/rJYVoamtnVEPgtl6mqDcz1fRsY2z0IDDHvT04aU=
Subject key identifier:   F2:1B:52:95:D1:C2:3E:B2:45:3E:46:9B:FC:0A:37:E6:F2:87:B6:FE
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A5CFB2431E143C0F7970F2C00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4fd9bc15-3b64-3deb-9c94-0e590cde91a4.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     18779
IP address blocks:        23.230.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:24:31:e1:43:c0:f7:97:0f:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=ea701477-d486-4dc4-b4d7-83eec258b2e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b5:65:6d:7d:6c:6d:45:aa:1e:19:83:3b:d2:
                    4b:dc:dd:e8:fb:0a:d5:59:a8:93:27:d4:ba:93:cf:
                    74:73:5a:03:38:b3:c4:5d:33:77:a4:9f:08:5f:7b:
                    12:46:1d:64:49:71:d6:97:0a:24:70:56:27:86:d3:
                    46:1e:fb:07:4d:51:a8:ab:ec:35:45:12:c4:8e:b0:
                    53:7b:91:9e:95:48:e4:65:84:0c:5c:b5:91:5e:33:
                    30:82:32:16:82:4b:4d:e1:19:08:b1:12:da:28:3e:
                    d2:e4:b4:02:70:c1:4a:c8:7e:22:94:69:61:9f:9a:
                    cf:87:26:06:bf:e8:fa:f1:c2:4e:a5:f1:13:37:4b:
                    94:9d:2f:75:1b:82:6b:a1:9b:44:25:3e:53:cf:2d:
                    28:ef:68:46:8e:34:42:4b:4f:50:94:72:06:f5:03:
                    99:9f:22:9d:fe:14:42:44:2b:81:67:34:28:d1:c3:
                    dc:12:c0:08:83:3b:16:ad:12:f4:f0:7d:7a:38:b3:
                    47:33:f5:2a:8a:e1:1d:99:d6:1c:16:6d:e1:23:22:
                    2e:52:8b:ab:7c:58:8c:aa:85:f2:26:c6:96:f1:10:
                    20:e9:f0:89:ac:8f:ba:0e:3a:cb:ad:bb:99:cf:b7:
                    6d:e9:08:28:79:9f:df:a3:b0:ae:a3:91:9c:4b:9d:
                    85:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1B:52:95:D1:C2:3E:B2:45:3E:46:9B:FC:0A:37:E6:F2:87:B6:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4fd9bc15-3b64-3deb-9c94-0e590cde91a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:12:d0:8b:62:fe:ce:b7:58:d6:b8:88:60:ca:9c:8a:50:a8:
         25:17:91:ba:5b:60:a1:07:f6:28:8a:7b:21:63:82:6b:33:45:
         99:71:2b:ea:43:67:b2:52:90:69:76:c6:1c:e5:5d:98:fd:e9:
         7b:81:cb:72:35:f6:f5:4b:04:e6:ea:d2:5b:e1:f6:87:03:45:
         4e:c7:f4:a7:e3:66:b9:72:3a:df:d5:99:59:2d:d0:02:18:c3:
         0c:9a:09:d7:fd:d9:3c:9c:34:1d:ef:cd:fc:fd:c1:11:16:1b:
         f2:f7:18:5c:4e:f0:7a:b5:c1:83:45:4f:f4:0a:ac:30:6f:44:
         48:78:7d:c4:76:6c:02:4c:cf:7f:70:83:20:b5:74:e6:15:ac:
         ba:2a:af:5f:64:ed:6a:05:db:1b:eb:82:95:88:20:e7:5e:5a:
         96:70:82:ce:4e:64:ee:11:04:00:da:3d:36:7c:f7:26:c2:7d:
         f4:5e:d0:aa:db:84:50:c5:1b:30:d6:4c:ad:d5:35:db:f1:9e:
         b1:4b:ac:0b:f3:3a:4d:41:70:19:1f:9d:c2:cb:1d:d7:b8:7a:
         4b:f5:a8:aa:0e:fd:26:25:7d:4f:1c:ba:8e:f9:31:20:5e:d6:
         c6:ac:bc:7f:24:93:c4:0f:e9:2d:b5:7f:45:3b:ba:00:cc:b8:
         53:d4:01:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 21:24:09 2025 by rpki-client