Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e6c88e1b-f609-3d13-9884-2aa92c1a1e9f.roa
File:                     e6c88e1b-f609-3d13-9884-2aa92c1a1e9f.roa (raw, json)
Hash identifier:          B7WxrBr0H12a+otKoGeFFPtHnCbffDhKAvwfW1I5QGM=
Subject key identifier:   D0:15:70:AB:A0:E6:38:C5:8D:89:C6:AE:73:C1:4C:93:04:54:C4:9B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A5CFB216766E4C3BBF2E8F000
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e6c88e1b-f609-3d13-9884-2aa92c1a1e9f.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     18779
IP address blocks:        23.230.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:21:67:66:e4:c3:bb:f2:e8:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=2b0db3ea-facf-4ae7-bacc-3282461355df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b0:86:87:d0:4e:85:e4:30:ed:b4:8b:8f:11:
                    2b:c3:1e:d6:30:64:3c:73:e8:d5:05:6f:8d:02:6a:
                    3c:90:f6:18:30:37:bd:10:7c:e8:ff:9b:b4:71:6d:
                    ac:a9:1b:84:9a:84:28:a5:63:2a:34:2a:b9:ec:91:
                    01:65:d8:52:09:ad:91:54:9b:08:2c:d8:17:bb:81:
                    bf:f7:f6:5f:4c:ed:8f:e9:f9:75:fe:93:fb:69:23:
                    19:b4:4d:a8:8a:8a:56:dc:ce:ae:55:33:84:05:63:
                    6a:ab:ca:a3:0d:c8:6e:a1:69:52:87:92:26:99:9f:
                    c7:17:6c:45:0c:bc:24:e2:86:ae:15:4d:03:91:00:
                    d6:08:81:07:cb:d2:9d:34:ea:d2:ce:9d:a3:48:d2:
                    b9:79:be:67:3a:50:d1:5f:4b:34:87:57:2d:fc:9a:
                    1a:4f:39:b1:45:0e:0d:90:67:3e:ec:9f:d3:d1:e8:
                    fa:80:25:f6:60:68:cb:1d:5c:79:e9:9c:6b:ae:6f:
                    cc:4d:e0:67:fc:ba:02:1a:03:ab:60:8e:a8:c5:54:
                    16:a5:f1:a9:7b:d0:1a:3a:74:8d:fe:fb:a9:a3:71:
                    16:fd:8e:a8:f7:14:fd:1e:26:55:d0:55:e8:e0:98:
                    17:15:63:b0:63:db:9c:56:1f:7c:87:50:aa:01:79:
                    90:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:15:70:AB:A0:E6:38:C5:8D:89:C6:AE:73:C1:4C:93:04:54:C4:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e6c88e1b-f609-3d13-9884-2aa92c1a1e9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:c9:6b:83:a8:8b:1b:ff:bc:e2:88:e4:44:1e:d5:93:f4:8e:
         ff:3b:22:01:27:75:88:59:50:9f:40:5d:c2:78:5e:df:a3:3d:
         9a:5e:b9:d7:0d:2d:b0:c1:c9:d6:d2:eb:b3:93:1f:0f:2a:26:
         89:03:5d:71:fd:58:b3:66:4f:22:11:52:19:0a:0b:52:4d:33:
         8b:c8:a4:2f:d0:c7:8c:63:a9:1c:66:60:f8:0d:e6:48:43:fe:
         4d:c2:a6:43:ce:60:43:42:2c:0d:2e:fc:9b:2f:3b:cf:34:d7:
         4c:ff:e7:3e:4e:1d:5c:4d:9a:71:0d:3a:bf:8d:26:46:30:13:
         89:ab:90:f0:ab:cd:b0:0c:ae:92:63:16:f8:b1:95:3b:f2:30:
         96:86:6a:ba:3b:16:ec:c6:5a:fd:e4:cf:9f:09:7a:29:29:24:
         0f:7a:14:a8:6f:28:de:4d:63:58:ed:42:21:51:01:97:d6:b2:
         a5:27:38:d9:d9:90:67:a9:17:5e:32:bc:5a:19:5d:f5:f1:b3:
         4b:05:80:28:98:f2:b0:1c:f3:10:27:47:71:a3:91:a9:63:ad:
         c0:ab:95:43:4e:52:77:c2:41:0e:0f:72:65:f1:e4:d3:2b:1c:
         1a:cb:78:2d:b6:ca:10:54:f6:94:ce:f4:c6:e5:25:b1:29:9a:
         67:02:3d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 05:03:48 2025 by rpki-client