Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a9ce7348-5c1a-3a59-90db-1fdbc31c0a83.roa
File:                     a9ce7348-5c1a-3a59-90db-1fdbc31c0a83.roa (raw, json)
Hash identifier:          204Gro+8NvVmo1h89G/61Okywf5Ljb013pSw/uoJQFI=
Subject key identifier:   3A:0F:37:60:2A:5A:CB:E5:87:91:E3:61:F5:ED:1E:AF:DE:92:75:FC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584929D89B2C4AA006D05CDB26C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a9ce7348-5c1a-3a59-90db-1fdbc31c0a83.roa
Signing time:             Wed 12 Mar 2025 12:38:24 +0000
ROA not before:           Wed 12 Mar 2025 12:38:24 +0000
ROA not after:            Tue 10 Jun 2025 12:38:24 +0000
asID:                     3561
IP address blocks:        23.230.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:d8:9b:2c:4a:a0:06:d0:5c:db:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 12 12:38:24 2025 GMT
            Not After : Jun 10 12:38:24 2025 GMT
        Subject: CN=45c0e596-e757-4978-8158-6556f25b26a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:66:c5:bf:f2:c5:19:d0:13:96:f5:2f:38:dd:
                    c6:a9:82:a3:59:53:fc:4c:a1:a6:72:da:81:04:b3:
                    55:af:e0:6b:36:5a:0a:ce:13:45:3e:66:8f:f4:4f:
                    56:d8:08:54:30:03:46:70:be:41:d5:5f:92:3f:d1:
                    ea:ef:55:ee:de:18:37:2b:d2:dd:2b:78:3b:c9:96:
                    3c:e3:6d:29:a0:33:5e:38:15:fa:ff:a3:65:99:18:
                    5f:7e:e3:2a:43:72:9b:ae:36:fa:c0:1b:9c:6e:2d:
                    e4:a5:0d:e0:49:56:6e:f6:7b:c3:58:73:e6:b3:c4:
                    56:72:95:50:21:e5:1e:f0:15:49:e6:51:d2:40:a4:
                    2c:20:f7:7a:93:1f:8d:81:4e:68:54:0a:e7:96:d4:
                    ee:3d:57:de:da:f5:70:0a:e8:05:61:65:88:c6:95:
                    fb:c5:c3:e9:c0:09:62:13:d1:9d:55:ae:3c:fa:49:
                    b9:4d:0d:b8:22:05:b5:9d:51:b0:b2:0a:ae:de:e2:
                    a2:de:81:ac:af:33:c8:94:1b:f7:d2:de:d3:75:08:
                    27:59:db:cf:be:2d:a8:5a:24:bb:72:8a:58:14:d0:
                    6d:9d:98:15:72:ab:ca:59:ab:75:a5:b7:4e:3f:e3:
                    9d:86:d9:62:5d:ee:4a:b1:71:e9:cb:92:e5:e3:30:
                    9d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0F:37:60:2A:5A:CB:E5:87:91:E3:61:F5:ED:1E:AF:DE:92:75:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a9ce7348-5c1a-3a59-90db-1fdbc31c0a83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:93:2a:a3:52:81:24:ad:b6:14:a4:80:a1:f6:7f:20:b0:16:
         90:a4:7e:ce:95:f7:74:3a:27:1c:99:7c:70:7e:15:cd:56:d8:
         bd:52:29:84:77:d0:86:36:53:b6:2e:20:61:f9:43:89:be:1b:
         09:7b:8a:be:b2:8e:10:0f:ee:4b:8a:a5:69:3d:cb:01:c0:be:
         b4:e4:09:98:31:b9:3a:47:77:ed:5c:b7:07:c2:c6:20:55:1a:
         b2:c0:15:69:1b:3d:e3:c9:42:b5:ff:59:26:5f:0d:b0:f8:b9:
         68:e1:b4:4b:b7:16:b7:1e:2f:1c:52:01:5a:53:4e:1e:0b:82:
         16:80:c3:35:09:b6:b0:9d:46:42:8a:35:48:0c:35:6d:d2:08:
         fe:1a:53:94:b4:d5:2e:18:63:9c:b6:5b:78:6f:6f:4c:ec:1c:
         74:1f:1a:1d:7b:c0:50:5e:7b:17:78:13:64:e0:32:a5:a3:55:
         f3:ee:81:b7:b0:c1:fc:44:8c:c5:40:ef:96:6f:b2:36:9f:fc:
         94:98:7a:95:39:b7:7f:67:4b:0c:9c:8a:86:4c:07:a9:fc:e4:
         12:0d:0f:35:87:5e:77:cc:ed:d3:ed:be:15:8b:5f:63:2a:2b:
         4e:fa:59:7d:6e:e5:dd:81:d9:dc:b7:40:64:81:a9:92:e0:a8:
         7d:56:15:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:35 2025 by rpki-client