Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f8ddbe6b-4803-37e2-b51e-d72f07dd310d.roa
File:                     f8ddbe6b-4803-37e2-b51e-d72f07dd310d.roa (raw, json)
Hash identifier:          q/155mI/S0UfsDIkxSP+wCgSLzbXieNrHE/UDI34shI=
Subject key identifier:   CA:92:15:96:09:9D:79:EE:EC:10:FF:34:4E:BD:29:2D:60:F7:0F:DF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848CDE0FE3FF448313E2806E3E0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f8ddbe6b-4803-37e2-b51e-d72f07dd310d.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     11404
IP address blocks:        23.230.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e0:fe:3f:f4:48:31:3e:28:06:e3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=ae1ebe65-44cb-4af1-a81f-f4ea9eb90596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:82:50:d2:2d:0f:49:fb:57:96:ec:95:0f:f8:
                    c3:1d:88:bc:d6:e0:a7:ce:3f:ab:cb:9e:55:74:ad:
                    b7:bb:33:fc:78:4c:69:de:19:d7:6e:d1:3c:ba:3f:
                    6b:27:2a:e6:5d:f5:c6:96:39:12:de:d6:18:d5:d7:
                    b3:8a:9a:60:35:9e:c4:80:dd:2f:e8:82:90:46:23:
                    9b:e1:21:dd:21:61:01:4d:09:92:9f:b3:76:13:18:
                    0c:f3:e2:61:60:6f:c2:0c:5e:15:83:10:ee:e1:67:
                    2f:c6:22:5c:48:f3:84:81:33:15:44:d0:ea:f9:f6:
                    01:8f:64:07:60:d1:9f:a7:c8:00:eb:09:6b:8a:12:
                    8e:aa:c7:12:b7:19:04:a7:15:27:bd:2b:b2:18:94:
                    b4:80:00:b4:a4:53:95:a2:ef:de:24:aa:0e:4e:d0:
                    93:8f:e0:fd:19:3b:bc:0b:1c:fe:d3:13:bd:5c:48:
                    f0:b4:df:78:69:9b:04:af:2e:84:c7:7b:60:04:45:
                    6d:23:73:2c:b1:57:31:fc:9f:2b:7a:74:bf:fc:7a:
                    d2:f7:3a:3f:95:25:8a:b5:84:21:e9:38:3e:ec:4d:
                    d4:8c:7a:de:7e:4b:d6:78:68:34:83:d2:6e:7f:97:
                    ca:dc:d0:a9:e2:46:f5:ad:bc:73:37:cf:10:80:47:
                    8d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:92:15:96:09:9D:79:EE:EC:10:FF:34:4E:BD:29:2D:60:F7:0F:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f8ddbe6b-4803-37e2-b51e-d72f07dd310d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:f1:86:cb:73:f2:8a:26:a5:4d:7d:fa:3f:e9:64:9a:15:3c:
         83:1d:9d:1c:37:d8:8b:4f:31:d5:92:84:06:5c:34:e9:aa:80:
         25:f2:cf:18:4a:51:d0:d3:77:50:80:39:3a:c0:0d:e6:5d:b6:
         ad:8d:3d:92:ae:c9:4f:b8:45:1c:76:e8:97:55:18:c7:f2:ef:
         b8:c7:38:b9:0e:8a:91:be:b9:31:79:cb:eb:28:e4:1f:7b:62:
         4f:b3:8f:e3:e0:4b:4f:99:d4:09:69:73:8e:2e:e4:6b:35:b8:
         5b:dc:4b:74:a9:11:0c:ed:8c:27:1a:86:1a:ca:cd:78:1d:15:
         be:19:af:f0:1c:dd:3f:8c:97:2a:67:ea:9f:73:f1:3a:50:cd:
         66:bd:b5:41:b9:cd:ff:2c:38:89:a5:45:22:c4:ce:26:55:8d:
         eb:49:92:4d:00:81:19:57:09:9c:bd:7f:07:74:13:0e:93:8d:
         49:3f:f2:89:63:e2:57:52:09:9a:60:d3:7e:af:69:a3:d0:7e:
         97:d6:44:c9:3f:9c:48:74:23:fa:a1:c2:3e:e0:81:2d:59:42:
         fc:de:19:65:9a:40:97:72:d9:4f:29:63:b9:2f:01:5a:71:9c:
         c6:8b:57:f7:65:f4:76:a8:b9:ba:57:ff:b4:e2:de:f6:30:de:
         c2:0e:72:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:48 2025 by rpki-client