Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d199c96f-44b3-33f0-b7e0-0d2607c9c136.roa
File:                     d199c96f-44b3-33f0-b7e0-0d2607c9c136.roa (raw, json)
Hash identifier:          5yfcldAgTUkdcalET8S37OJlEofLZEeb3Q3DoLFxQ+4=
Subject key identifier:   0D:BD:27:AB:60:06:82:28:0F:CB:A2:7D:C7:0D:E3:A2:6D:AF:B1:FC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848D6412B28FA1A3BB6160B6000
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d199c96f-44b3-33f0-b7e0-0d2607c9c136.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     212238
IP address blocks:        23.230.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:2b:28:fa:1a:3b:b6:16:0b:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=5b21def2-81aa-4aa4-a40a-3ea0a18edb39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:94:67:43:b2:6c:aa:a0:ec:94:02:0b:51:1a:
                    b4:a2:5f:d7:12:d5:ef:c9:fe:a9:f4:8a:37:dc:f3:
                    84:fd:41:e0:a1:73:17:a0:94:83:2d:99:a6:d3:d8:
                    f8:65:88:0c:6a:02:bb:41:33:75:3c:04:1f:da:43:
                    e9:73:e7:2c:df:c2:00:05:6e:d2:30:0c:0f:c9:5a:
                    b1:e1:9d:f8:eb:f0:7f:f1:48:70:36:fd:1f:43:66:
                    ae:0f:a7:41:0c:08:12:73:f7:b6:e9:2e:67:f9:cd:
                    52:7d:0d:a6:ef:6b:21:fd:d8:34:f9:d6:e0:20:db:
                    0d:a4:7a:a3:f8:e6:b3:02:51:47:35:77:79:ff:dc:
                    6f:64:5d:d1:20:36:ff:48:d9:1d:8c:07:e3:e5:a1:
                    da:09:f9:f6:7f:8a:34:58:e4:65:f7:16:8d:af:ba:
                    17:5f:1b:37:1c:8b:d0:fe:9e:a3:51:b2:3c:85:5c:
                    90:d9:13:b8:2c:93:da:3b:ec:90:19:7e:ce:3c:4e:
                    f3:ab:a9:25:9e:5f:63:c3:4f:eb:de:b6:cb:96:d9:
                    40:5a:c7:4d:7d:d1:6e:33:ee:53:b9:91:c8:af:3c:
                    d2:dd:ae:ff:6c:57:62:67:cd:d9:fb:15:0a:5a:ef:
                    c3:c1:32:96:92:20:5d:5a:d4:83:1a:57:5e:c7:97:
                    33:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:BD:27:AB:60:06:82:28:0F:CB:A2:7D:C7:0D:E3:A2:6D:AF:B1:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d199c96f-44b3-33f0-b7e0-0d2607c9c136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:c0:f4:a3:6d:7e:65:5e:11:90:03:88:51:90:fa:c4:f3:4d:
         a0:3f:ed:b8:27:ee:69:c7:b9:8b:a9:88:8a:ad:4e:52:26:ec:
         b8:53:78:d7:a5:a1:4e:4c:f5:db:58:61:98:5f:8b:91:f9:91:
         ad:bf:d7:51:ff:68:5a:5e:e4:94:ba:1e:d1:f4:b2:df:eb:53:
         2f:ec:e0:45:64:e1:7b:15:26:c9:f3:71:13:36:0e:e3:dc:90:
         bc:bc:6e:eb:03:bf:39:12:51:84:96:0c:75:8f:f2:d6:e8:c2:
         f0:62:e0:ff:09:6e:2d:97:56:9b:4d:7c:81:85:dd:bd:4a:ec:
         98:1b:eb:d9:49:e1:57:44:b6:61:95:d6:3f:3a:18:9d:32:4a:
         65:ad:1f:d4:9c:3f:d9:6b:7a:f8:22:f4:68:4f:c5:76:58:d7:
         74:3e:95:ef:12:37:b1:ec:73:35:ae:67:56:13:a1:a4:d3:d9:
         24:36:ae:15:38:b6:a6:99:7b:0b:ee:ad:40:5d:e8:0e:49:85:
         2e:97:70:24:44:a2:7f:9c:52:c3:f2:0e:ac:d8:54:dd:ae:06:
         87:0d:0f:0b:a3:70:d2:f2:5f:65:98:4e:73:1b:68:f2:85:71:
         72:e6:88:cc:b9:27:82:2e:75:5a:14:b3:15:cf:8d:c1:46:85:
         34:d0:5d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:15 2025 by rpki-client