Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fd0310a5-5009-3299-a898-a6c2fdbefd2c.roa
File:                     fd0310a5-5009-3299-a898-a6c2fdbefd2c.roa (raw, json)
Hash identifier:          a9xg3KsNwKUgrDyMFGoG47wnyyJxC0ZUiI4wzzTJnnE=
Subject key identifier:   C1:13:8D:23:F4:5E:F8:8A:EA:CB:FA:5A:8A:8B:23:03:41:80:56:9E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A00804EE77F1752F5AB4A6880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fd0310a5-5009-3299-a898-a6c2fdbefd2c.roa
Signing time:             Wed 28 May 2025 09:59:17 +0000
ROA not before:           Wed 28 May 2025 09:59:17 +0000
ROA not after:            Tue 26 Aug 2025 09:59:17 +0000
asID:                     9304
IP address blocks:        23.230.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:80:4e:e7:7f:17:52:f5:ab:4a:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 28 09:59:17 2025 GMT
            Not After : Aug 26 09:59:17 2025 GMT
        Subject: CN=12fd4fad-24ce-4b15-b875-5af377585ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:23:70:12:78:1e:4d:ae:dc:b4:7d:a0:67:56:
                    80:4e:10:df:76:4c:ad:bb:7f:09:60:06:e5:dd:d0:
                    4e:d4:cc:7d:18:14:3f:b1:a7:c2:9c:f8:87:d0:67:
                    f5:04:e7:9a:5d:cd:fe:fa:11:79:ee:ce:2a:73:a5:
                    38:5e:fa:e2:86:2b:19:7b:5e:4b:34:79:eb:85:99:
                    8a:4b:f6:3b:b0:38:1b:8b:1a:63:95:cb:fc:29:58:
                    f2:86:c4:e9:29:89:e8:88:b1:1b:ec:29:eb:b1:66:
                    25:a6:e5:39:02:55:c2:71:89:a4:a8:5b:16:77:32:
                    5d:21:99:73:f0:60:2f:49:2f:f9:3c:75:9a:83:f3:
                    00:8d:f8:7b:68:52:2e:09:b6:c4:be:59:98:e9:1f:
                    b1:47:f1:ea:88:38:61:f4:7d:c5:76:9d:06:69:34:
                    95:5d:3e:6b:87:74:63:cc:42:ed:62:46:f8:5d:ee:
                    2e:43:39:25:e7:95:7c:9a:45:a5:85:00:ef:89:9f:
                    13:61:02:00:a6:b1:e6:f6:d3:c6:36:a6:3e:d8:4a:
                    30:e5:a1:9c:fc:80:73:1e:af:c3:0b:89:8f:32:a7:
                    cb:5c:25:98:af:e6:93:10:8d:87:d1:d4:ca:7d:cc:
                    b8:ee:e4:d6:60:d6:0d:b6:c7:9d:b2:11:45:71:8d:
                    cc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:13:8D:23:F4:5E:F8:8A:EA:CB:FA:5A:8A:8B:23:03:41:80:56:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fd0310a5-5009-3299-a898-a6c2fdbefd2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:1d:72:2b:de:79:f7:d7:0a:48:da:28:12:8c:3f:81:d3:c6:
         59:06:58:0c:d8:3a:72:79:f3:0a:70:b5:0f:0a:a6:43:d8:e2:
         4d:f8:91:55:75:4f:df:14:3e:48:54:ca:d8:ed:8a:1e:1d:e4:
         f5:4f:24:13:d0:76:2d:c0:a3:94:cb:bb:fd:2f:f6:02:3d:0f:
         6a:ba:87:a8:af:d8:e5:03:63:5f:9f:f4:4b:de:94:38:63:57:
         89:52:22:3c:89:a5:d8:e0:f8:29:c6:81:71:5e:95:f8:77:83:
         dc:dc:5d:37:16:bc:92:bb:db:9a:9e:0c:df:6c:4a:70:24:f0:
         53:b5:5c:63:1f:f2:94:13:fc:16:80:f5:b4:5f:9f:4b:68:da:
         47:d1:25:a5:07:06:db:20:65:59:fb:22:c2:6b:ef:fa:4a:49:
         0a:48:a2:79:1f:fc:75:af:af:c2:3c:ad:94:87:75:ef:2b:9d:
         58:88:5c:3d:65:a3:6e:6c:e7:d1:7d:2c:8b:d5:ce:39:30:ff:
         00:5e:42:99:32:fe:2e:1e:a6:70:65:75:58:3e:ea:32:c8:9d:
         91:05:81:61:34:bf:99:6c:34:e5:6d:2d:49:4f:39:78:44:4d:
         e4:3d:0f:8d:99:b6:f6:3d:5b:df:55:13:67:d4:0b:29:ff:a1:
         f4:52:f7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:47:53 2025 by rpki-client