Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0e5e1adf-be07-3938-951d-efb021595089.roa
File:                     0e5e1adf-be07-3938-951d-efb021595089.roa (raw, json)
Hash identifier:          2Vo6A2x6etQ4nc5cJD+CCkrh1hGVq8XkV4pP7hulIPg=
Subject key identifier:   85:B5:82:3C:90:15:3D:55:B2:E7:7B:8A:75:79:F8:95:18:BE:80:10
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D24E12CF95E8DE10A14E98200
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0e5e1adf-be07-3938-951d-efb021595089.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     44559
IP address blocks:        23.230.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:2c:f9:5e:8d:e1:0a:14:e9:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=b013bfac-7f05-4fa7-89b5-c21cd49e2f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c4:d9:db:60:01:3f:c0:98:a0:bf:bb:31:25:
                    67:1d:ea:d2:ee:41:4a:e9:80:b2:7d:44:ea:c1:30:
                    f2:7f:17:00:00:fa:31:b3:64:da:36:3e:da:e4:f9:
                    ff:a4:cf:82:e0:32:1b:47:e8:66:02:ed:0b:50:b7:
                    a0:fe:fe:ac:6f:16:13:65:13:50:6e:7b:75:46:30:
                    3d:78:b8:4b:c8:9b:a2:cc:31:ad:db:1f:f4:46:43:
                    ad:b1:23:f7:22:49:68:a2:4b:11:9d:80:24:83:a1:
                    3b:fc:bc:79:c9:3d:32:b7:a7:77:98:57:4a:15:fd:
                    b0:78:3d:f3:90:5f:a0:cb:d2:43:65:77:2d:0a:c6:
                    c9:17:63:c0:33:e0:4d:5d:44:52:aa:e7:07:6f:bd:
                    89:07:ac:51:71:71:ed:21:c9:50:f1:38:77:b9:fc:
                    e3:80:8c:23:fc:04:0b:9f:b6:e1:a8:a5:56:47:fa:
                    db:06:23:71:42:a5:ae:77:23:bf:f4:7d:aa:62:95:
                    f3:d5:4f:20:fb:0b:37:a5:c7:63:41:37:f0:9c:cc:
                    aa:e5:b1:5b:16:80:db:85:49:bb:f9:b8:4f:3f:9f:
                    54:19:18:5f:08:64:ad:2d:0a:38:a2:c2:09:66:87:
                    ad:fb:cb:6e:71:22:1a:a0:9b:1a:4b:d9:8c:05:d0:
                    c1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B5:82:3C:90:15:3D:55:B2:E7:7B:8A:75:79:F8:95:18:BE:80:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0e5e1adf-be07-3938-951d-efb021595089.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:b2:a0:f9:c2:d9:97:2b:24:2b:b7:b5:7f:8c:5f:89:93:10:
         b0:b7:9e:86:5e:d0:a3:c4:98:33:af:bc:4a:b1:76:3d:57:3c:
         02:e2:67:ba:64:5b:fc:da:f0:dc:c7:eb:e7:9f:ff:5b:98:ce:
         09:7e:f8:36:ad:fa:41:65:52:87:67:3f:e3:4f:82:75:bf:43:
         3d:fa:df:8e:9e:1a:e0:8b:28:5c:d8:93:d3:00:56:d5:95:8f:
         48:3a:26:57:3b:86:83:15:31:86:e6:da:18:d3:2b:77:9f:84:
         2e:8d:29:2e:7d:f5:f3:b3:67:ad:fe:d1:83:d4:83:35:5c:18:
         b1:a7:ba:1e:7d:f4:9a:9b:bf:a0:d4:fa:f1:fe:97:9f:27:71:
         f8:9b:03:ec:12:f3:aa:1f:80:1b:9b:0a:cc:25:bf:d9:5c:7f:
         c3:5d:a4:9c:f9:86:59:f7:fd:b2:23:8f:62:21:90:4d:1a:50:
         f6:aa:04:6d:1c:62:53:6c:82:f7:44:67:24:31:86:ad:09:43:
         19:d7:4d:6a:c8:5d:3f:49:eb:19:68:4a:19:d7:b7:38:4a:2a:
         54:1c:09:0e:1e:59:f6:71:fd:1c:14:40:5f:08:4a:28:27:83:
         fb:74:2b:93:7e:c7:fd:46:06:59:b8:7c:c0:f9:08:85:c8:32:
         e2:ac:54:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:59:24 2026 by rpki-client