Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/787d152e-185d-3bdf-89a3-3ff58d02e77e.roa
File:                     787d152e-185d-3bdf-89a3-3ff58d02e77e.roa (raw, json)
Hash identifier:          hOiPFYFTfh8FJ9CWRMEd3cr9qCCNHtFG5WBkPUnHj6U=
Subject key identifier:   13:D2:4E:64:55:B5:1A:19:EE:0A:C3:76:36:99:85:41:8F:5D:98:3F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849295A8945899446CCF53CF6D0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/787d152e-185d-3bdf-89a3-3ff58d02e77e.roa
Signing time:             Wed 12 Mar 2025 08:24:23 +0000
ROA not before:           Wed 12 Mar 2025 08:24:23 +0000
ROA not after:            Tue 10 Jun 2025 08:24:23 +0000
asID:                     400536
IP address blocks:        23.230.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:5a:89:45:89:94:46:cc:f5:3c:f6:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 12 08:24:23 2025 GMT
            Not After : Jun 10 08:24:23 2025 GMT
        Subject: CN=cd69b58c-f92b-46a3-bc7d-dc92e7039a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e3:7b:82:d6:b6:b1:f0:ee:23:20:da:ab:e8:
                    c7:47:3c:ee:4c:ba:d2:26:86:71:9e:aa:db:8b:87:
                    4e:1c:37:ca:f3:dd:dd:2d:18:a9:30:64:08:e1:51:
                    98:15:14:34:cf:3c:fa:27:37:33:5b:54:35:d7:c6:
                    39:dd:53:3e:00:e1:4f:8e:f5:76:86:cf:f4:d7:38:
                    09:60:82:c2:2b:22:c3:b3:72:a5:df:49:b0:ff:66:
                    93:65:df:a5:5f:c7:08:7a:b3:e2:86:99:d9:0c:3f:
                    4e:77:98:42:d9:38:ee:c1:ba:df:f9:c5:06:88:8f:
                    f7:44:1d:a9:4c:5e:64:cc:68:7f:1c:b6:2f:cf:a4:
                    ab:93:a8:03:c8:0c:59:d1:dc:22:89:3c:de:a4:b7:
                    58:fd:70:ac:04:c2:71:98:fa:61:ce:e6:88:3f:76:
                    94:f4:9e:ac:05:b2:1d:f7:dd:a3:90:af:90:83:87:
                    40:57:fc:ce:4b:a7:c2:7e:08:be:7c:7d:7d:21:51:
                    ac:3f:96:2e:be:fb:83:49:63:55:ca:54:6c:ae:68:
                    a1:b4:05:69:a3:21:97:8a:81:05:ef:c3:9c:b7:76:
                    f9:f9:8e:e4:8c:45:3c:3e:d7:f4:8a:41:fe:cb:3f:
                    1b:a8:21:8b:82:ff:3a:2a:bb:ba:68:93:32:99:7d:
                    e7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D2:4E:64:55:B5:1A:19:EE:0A:C3:76:36:99:85:41:8F:5D:98:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/787d152e-185d-3bdf-89a3-3ff58d02e77e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:50:36:d5:16:1d:13:66:4f:1b:67:da:5b:1f:22:e6:16:78:
         77:83:98:e5:c7:6b:ed:87:a4:7e:23:37:1a:02:40:5f:d9:71:
         77:ff:1d:5b:6d:8d:25:da:b6:c9:f0:f9:0a:ca:c1:1d:91:90:
         f3:c7:73:76:8a:40:93:68:bd:28:0a:db:30:73:e5:9c:93:85:
         21:91:5f:91:cb:90:ad:07:99:83:ea:83:e7:61:f2:43:51:3a:
         c4:e0:1b:2e:7a:88:95:b2:0f:20:34:32:90:cc:23:ca:e1:62:
         5c:05:86:e9:9c:e9:d8:6c:6c:69:04:a8:d2:f0:1b:fa:a4:14:
         1a:70:51:a4:0d:e1:62:d0:54:45:ad:3e:2d:83:ab:d5:12:ac:
         46:19:9b:81:74:1c:ce:9f:55:44:a2:d9:2e:a3:22:fd:19:b9:
         e7:f6:27:2d:67:80:6f:e2:aa:73:07:57:5d:1f:2d:99:2e:53:
         47:83:d6:07:f9:7e:4a:6b:6c:75:05:3c:6a:d3:5c:39:b5:c4:
         86:80:8d:d7:aa:ba:3a:f7:97:d8:10:8e:79:39:0d:bd:4e:91:
         05:d7:ef:a0:8b:10:2a:01:e8:e5:9d:0e:2c:e7:ec:47:bd:04:
         e3:44:d2:ed:ff:39:74:e1:0a:1d:67:e1:ed:f5:5e:e8:b2:40:
         9f:0d:22:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:27 2025 by rpki-client