Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/22863ef1-bbda-3b34-8214-882ff4a1a32e.roa
File:                     22863ef1-bbda-3b34-8214-882ff4a1a32e.roa (raw, json)
Hash identifier:          xzicU6YlPB6nCzKyxokNVwD9oCiWSJ4DqamOixNuyeA=
Subject key identifier:   D8:9E:51:93:DB:8A:DF:24:04:2F:96:4C:19:4D:48:C7:2B:A4:4B:72
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F4988E6626D0C448929574280
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/22863ef1-bbda-3b34-8214-882ff4a1a32e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     18779
IP address blocks:        23.230.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:e6:62:6d:0c:44:89:29:57:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6f471d52-436a-453d-8498-99a5398cb474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:61:36:19:05:8f:e7:ae:11:77:3d:a5:88:b1:
                    36:04:00:94:43:e8:b9:f4:03:af:4d:a9:a1:7f:04:
                    10:12:ef:fd:47:fd:21:8b:fe:58:25:00:2a:84:99:
                    40:3c:9f:10:97:b4:1f:90:86:35:56:4e:a4:7a:2e:
                    0b:72:02:f5:4c:33:9b:64:a2:6a:fe:45:f1:0d:7d:
                    ed:27:d1:88:3f:47:a6:13:45:82:e2:66:56:88:8e:
                    22:62:99:15:74:11:c7:c3:10:5a:93:13:16:17:a5:
                    0c:df:3e:e3:15:d8:e5:61:f2:52:db:d2:29:76:f7:
                    19:ff:ee:e2:a5:e5:06:e2:32:c6:7a:18:87:dd:9e:
                    e0:9d:38:e8:90:c9:de:9b:fc:99:a4:30:25:73:2b:
                    43:dc:20:45:6c:04:b5:88:92:b1:60:a0:ef:d7:b1:
                    5b:31:60:fb:31:35:21:2b:8b:e0:5e:5c:61:94:30:
                    ba:3a:ef:ca:62:90:65:b5:7c:bb:64:e2:ec:38:9f:
                    86:f4:d0:7f:ac:1c:4e:cd:fe:02:f2:dd:6f:df:74:
                    f4:98:5f:46:f2:1e:bf:e7:b8:39:50:9b:d7:c0:2c:
                    fd:05:6d:73:2e:46:8b:ca:cc:0b:01:ca:8a:d9:f5:
                    0a:2a:b3:49:9a:81:cd:1b:37:38:28:99:0a:9d:42:
                    df:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:9E:51:93:DB:8A:DF:24:04:2F:96:4C:19:4D:48:C7:2B:A4:4B:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/22863ef1-bbda-3b34-8214-882ff4a1a32e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:ef:db:38:be:f4:31:f0:d0:34:7a:cd:0f:4f:91:2e:5a:a2:
         48:75:11:c6:cc:2e:b6:7c:d0:78:74:e0:2a:5e:02:27:fa:6b:
         7b:a7:0a:b1:99:36:ca:30:74:b5:a8:14:4a:3a:63:93:39:db:
         42:0f:c5:ab:23:b3:e3:64:91:f2:d9:1d:a4:9c:dd:a2:a4:b0:
         7d:00:b3:0d:15:c5:7f:b9:66:65:8c:c0:6e:0a:da:86:13:7b:
         ca:d3:97:58:87:9d:a7:e1:9f:d9:88:31:68:71:62:b3:c9:e1:
         9c:31:b7:5a:dd:e3:fa:7a:76:e3:ed:7d:1e:7a:d3:6f:27:43:
         c6:70:5c:3e:d3:f1:04:53:a1:ba:7c:ac:35:8e:ed:a9:00:d6:
         dc:23:d2:1a:a7:a9:49:c1:30:a5:63:76:b0:13:a2:39:07:df:
         06:bd:0a:b7:1e:3f:9c:74:f4:2c:e6:78:1e:15:b3:df:d6:11:
         fb:8e:73:eb:68:6a:89:4e:30:59:c1:c2:ed:4f:06:98:76:85:
         cc:fb:dc:47:46:9e:02:1f:0d:f0:34:49:39:22:36:fc:78:5d:
         34:cd:df:b6:08:28:c9:52:b3:7f:1d:db:bf:e7:f9:43:bc:ef:
         7e:9e:87:ee:16:f1:ff:1b:b6:f1:4f:54:40:c9:b1:4d:18:2a:
         71:98:69:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:56:51 2026 by rpki-client