Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/547f5941-fae4-3c47-b806-5b58445f8fb4.roa
File:                     547f5941-fae4-3c47-b806-5b58445f8fb4.roa (raw, json)
Hash identifier:          u4ovOVyaToVOwAtbq728VJIlYRWfcf7ZZAOWnAkwRx0=
Subject key identifier:   3A:94:90:AE:CF:65:6C:D4:35:A7:94:EE:46:C8:9C:A7:A5:9C:BD:50
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A0080622E406EEF4B18055E80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/547f5941-fae4-3c47-b806-5b58445f8fb4.roa
Signing time:             Wed 28 May 2025 09:59:26 +0000
ROA not before:           Wed 28 May 2025 09:59:26 +0000
ROA not after:            Tue 26 Aug 2025 09:59:26 +0000
asID:                     9304
IP address blocks:        23.230.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:80:62:2e:40:6e:ef:4b:18:05:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 28 09:59:26 2025 GMT
            Not After : Aug 26 09:59:26 2025 GMT
        Subject: CN=3433bf1e-6596-4eab-a134-7d3b269403d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:17:33:d4:15:6b:ab:c3:d4:1a:8d:68:f4:91:
                    30:a5:ff:76:8f:5d:89:4a:e4:41:5f:3d:6b:27:0f:
                    8c:b2:92:28:f3:fa:da:25:75:9d:d2:50:dc:e6:28:
                    c0:67:e6:94:cf:b7:55:b5:d0:4e:b0:48:a3:1e:9a:
                    b7:3f:26:d1:92:dc:d7:08:d7:87:29:27:d4:2e:3d:
                    ca:9c:93:05:58:9c:d4:7f:49:0c:d0:63:27:43:6a:
                    19:5f:9e:8f:27:08:55:b9:77:7a:94:7a:32:7b:e3:
                    6d:30:a3:e6:0f:36:43:f2:b3:9f:80:79:4f:e2:e6:
                    fd:3c:6c:3d:ad:28:a6:bf:25:5a:b7:24:ee:9d:3f:
                    2f:d6:0b:0c:b6:b4:56:75:78:a8:ff:5e:32:1d:b9:
                    d6:cb:81:1a:29:38:5c:19:68:5e:cb:51:42:10:2d:
                    ab:a3:50:31:f6:53:ee:c4:21:af:36:22:2b:84:a0:
                    6d:aa:c3:05:ad:aa:92:da:1c:8b:f0:f4:b8:a2:af:
                    cd:4b:0e:82:0f:35:5c:31:26:b5:78:d0:44:79:a4:
                    5b:f4:91:20:f5:93:ee:34:1a:4e:78:d8:c7:6e:01:
                    ff:aa:c7:09:13:52:80:e6:ef:c4:5b:ed:b5:94:d6:
                    74:d8:ed:59:7d:0a:0e:85:14:08:db:76:ae:5c:66:
                    ad:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:94:90:AE:CF:65:6C:D4:35:A7:94:EE:46:C8:9C:A7:A5:9C:BD:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/547f5941-fae4-3c47-b806-5b58445f8fb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:76:88:ce:bb:34:33:e5:8a:30:0f:a3:55:9f:09:c9:04:fd:
         b5:bd:14:7a:d0:ac:ff:36:69:0f:fc:4f:f9:8b:46:05:a4:40:
         12:f3:e2:1e:93:0c:1c:19:37:95:11:19:4e:9b:ec:d7:b6:c2:
         d6:47:27:8b:c5:95:0a:17:76:46:65:a9:87:f3:08:88:72:18:
         ef:29:aa:bc:f4:80:0c:b1:88:3a:24:42:1a:b4:4d:b7:62:2e:
         52:59:7e:f1:ac:df:b5:b0:37:ba:d2:1a:c5:7b:68:77:2d:ca:
         31:5f:ff:36:54:26:bd:b3:32:13:f8:69:b5:97:53:b4:a3:e5:
         62:07:0e:09:67:ec:99:d3:53:65:12:98:ae:f2:ed:f7:cc:18:
         b1:88:ec:ab:fa:09:9a:64:bb:8e:c6:90:0b:1c:90:87:9e:cd:
         6e:f0:9e:4b:78:17:9f:87:0b:b1:b9:d4:94:7f:07:78:c3:b0:
         a3:6c:7e:dc:fa:e6:e4:2b:00:f7:a9:69:37:be:1d:b7:84:e2:
         f7:e7:80:f2:00:5d:84:c7:0e:21:f4:4d:46:38:14:7d:ec:22:
         1e:cf:23:5c:b1:54:49:18:ed:d4:fb:a9:c2:3f:fe:26:ed:8a:
         5b:31:0c:c0:41:6a:bd:0c:62:0d:c5:96:5e:8a:4f:bb:6c:57:
         a7:18:3b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:59:41 2025 by rpki-client