Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2539bcf4-3d8c-3d56-98b8-3f9ef08f6154.roa
File:                     2539bcf4-3d8c-3d56-98b8-3f9ef08f6154.roa (raw, json)
Hash identifier:          zIIvvOMsWQ6yrY3zl9z/wqIld83zmg1UBjvv8ePdNJM=
Subject key identifier:   62:41:F4:EB:65:25:59:C0:4E:F6:17:83:EE:3B:BA:2E:54:04:51:F8
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D465F913212A8E49B1371D080
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2539bcf4-3d8c-3d56-98b8-3f9ef08f6154.roa
Signing time:             Tue 24 Mar 2026 13:00:41 +0000
ROA not before:           Tue 24 Mar 2026 13:00:41 +0000
ROA not after:            Mon 22 Jun 2026 13:00:41 +0000
asID:                     18779
IP address blocks:        23.230.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:5f:91:32:12:a8:e4:9b:13:71:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 24 13:00:41 2026 GMT
            Not After : Jun 22 13:00:41 2026 GMT
        Subject: CN=2ef9153c-d69a-4794-a58a-58f62d9de284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8b:15:25:40:f8:1d:00:f1:21:db:1f:ff:b4:
                    da:0d:fc:5a:93:60:69:5c:bf:7d:a1:22:4c:74:e2:
                    9e:9c:18:56:8f:7a:cb:e6:79:4a:21:26:6e:a8:bb:
                    52:fb:b0:de:fd:47:74:3f:17:fd:84:52:80:0f:e7:
                    02:37:cc:cf:7d:66:5a:02:b2:4b:e2:28:d1:ad:f6:
                    76:b6:98:c1:da:d2:a3:ea:ea:4f:94:47:a8:56:03:
                    0c:a3:d6:71:69:5d:7b:ad:ad:f8:57:97:25:2e:ee:
                    51:2f:3f:5b:d5:74:f2:50:ca:33:e0:49:0e:f5:06:
                    4e:c0:9c:64:f2:a9:27:ed:75:dc:8a:96:49:3a:a0:
                    9f:67:1d:1b:ec:9b:1b:cf:6f:c5:fd:87:d8:6c:c5:
                    69:f5:d9:db:1a:fb:00:94:20:4a:3b:71:45:cc:54:
                    6b:2f:49:b1:fa:a5:4d:32:67:d4:14:84:56:0a:86:
                    0e:9b:0e:69:b2:93:b1:6e:02:44:77:a6:73:42:a6:
                    5d:49:27:e3:5b:e6:94:5b:d2:d0:d2:58:72:2c:8f:
                    f7:a4:76:59:d8:06:90:5f:49:24:3a:27:82:3e:5e:
                    d4:00:9a:9b:5d:ac:54:45:43:88:c8:06:2c:e9:fd:
                    0e:3f:ac:39:84:36:bc:25:db:e8:b0:8f:5e:47:17:
                    5c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:41:F4:EB:65:25:59:C0:4E:F6:17:83:EE:3B:BA:2E:54:04:51:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2539bcf4-3d8c-3d56-98b8-3f9ef08f6154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:b4:4a:52:e5:3a:43:28:85:99:25:d3:57:8a:33:3c:ae:1b:
         82:c6:06:60:70:af:78:cc:5a:a1:69:1e:96:83:bc:7d:8d:1a:
         86:a5:29:49:b5:25:b9:83:ef:88:ad:94:5b:bc:04:66:5d:5f:
         34:e5:42:4e:40:25:e2:d2:ff:f4:d4:2f:21:ae:e6:20:cd:30:
         bb:d3:73:5b:ec:9b:c0:b2:11:ed:0f:b0:90:3c:03:86:68:48:
         89:ef:e3:06:e7:d7:af:db:3d:bd:70:62:d5:68:79:e0:16:5c:
         a9:e9:90:f5:19:2a:77:27:3a:c4:3b:7e:50:8b:a8:98:36:0f:
         83:83:82:27:6d:ed:2d:f2:29:4b:8a:23:48:84:86:4d:89:33:
         f9:aa:ae:74:7e:b7:17:19:18:0e:51:c5:3b:e2:a9:80:d4:0c:
         e9:12:67:76:59:ba:99:46:10:cb:67:a7:d0:c2:e4:4f:6e:0f:
         07:2c:51:68:9d:78:4c:55:82:72:11:23:62:66:d3:24:26:0b:
         b9:91:3a:68:4a:3b:eb:3b:0c:28:d4:5c:e8:2a:61:17:6e:9d:
         1b:95:24:cf:f0:aa:7d:6a:be:8a:b6:7e:9f:99:c4:40:bc:a2:
         35:0a:dd:a7:22:51:43:df:f3:d7:48:7c:e7:d4:79:8a:1b:1b:
         45:d3:0d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:05:04 2026 by rpki-client