Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3219225c-6b15-3cd0-9a28-48f98175e72a.roa
File:                     3219225c-6b15-3cd0-9a28-48f98175e72a.roa (raw, json)
Hash identifier:          Xlel02QVvxKNhy1KVtZZEfjUOj3tkwOa73Q3NYJSHoU=
Subject key identifier:   87:0A:B9:C3:8C:AF:0C:84:26:4A:8F:3C:0F:19:63:6C:25:E4:49:B7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D24E119836F00C40161550C00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3219225c-6b15-3cd0-9a28-48f98175e72a.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     44559
IP address blocks:        23.230.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:19:83:6f:00:c4:01:61:55:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=8d41eaf5-bdef-41cd-8132-ba23a931b608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8f:2d:0e:dc:b7:fa:42:62:aa:1f:fe:61:a7:
                    ff:47:c2:b4:ac:07:d5:04:1f:42:21:1d:7c:2c:ff:
                    48:6a:63:2a:65:4b:f5:cf:2e:28:6c:0f:bd:bf:e7:
                    80:6c:c3:82:4f:24:5f:df:ee:1b:89:a0:6c:d4:e8:
                    d0:4f:72:46:c3:66:85:2a:24:49:00:97:48:1e:06:
                    96:4a:28:b7:f4:03:df:51:a5:f0:53:46:96:8a:1b:
                    0c:b6:06:72:72:32:5a:14:f5:5c:96:5d:54:76:d5:
                    03:4c:06:cc:77:82:8c:b2:d8:28:7e:eb:ed:19:b6:
                    c8:65:d9:94:1d:a2:94:f8:9e:2f:aa:bf:f7:ec:2f:
                    d9:2c:75:2b:a3:5d:9d:75:d4:ad:64:98:51:97:0d:
                    88:3d:50:4d:c9:9e:87:fa:96:a8:02:d8:32:3f:45:
                    c8:57:e4:a5:73:53:ba:b3:2c:26:cd:4d:88:84:d0:
                    2d:3e:82:20:d2:f2:2b:af:23:7a:a0:5e:2d:22:06:
                    f1:92:b4:9c:b1:c3:01:3c:2d:c2:a1:14:05:dd:59:
                    9c:9b:37:d7:73:62:7f:b4:20:9a:57:36:98:88:0e:
                    d0:f5:f8:3f:48:99:a9:28:bf:e4:db:72:b3:e1:6c:
                    22:9e:88:ff:09:90:d4:7d:1a:45:41:36:ca:5f:88:
                    23:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0A:B9:C3:8C:AF:0C:84:26:4A:8F:3C:0F:19:63:6C:25:E4:49:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3219225c-6b15-3cd0-9a28-48f98175e72a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e6:0d:0a:16:95:f1:60:0f:0f:db:87:be:90:eb:cd:40:7c:
         ab:e4:8d:8c:c5:37:0e:cd:b2:f1:84:d8:47:e6:bd:c3:13:fe:
         9c:56:64:c0:ca:fc:24:f0:fd:d9:1f:bb:16:9a:7b:87:34:12:
         d6:9d:94:61:d7:a6:97:a1:bd:0d:d2:ca:6f:da:ea:00:c4:87:
         9d:85:d0:dd:85:ee:eb:c0:f7:2b:eb:e1:12:3c:d7:1a:02:ef:
         55:b4:95:bd:9f:f8:45:67:e2:ce:0b:6b:34:a1:2f:48:73:41:
         7e:dd:c4:63:d8:8d:3b:0b:fe:10:4a:50:ff:5f:55:b7:4d:d3:
         43:bb:82:72:70:9d:57:8a:4f:71:36:a7:cc:ae:c2:4e:93:01:
         0b:bd:cf:84:2b:a9:ae:4f:65:06:3f:3b:d9:bd:3f:6c:09:12:
         89:9c:49:e6:30:f0:ec:30:37:da:b1:9d:20:16:52:cf:e9:9c:
         8d:91:03:97:9e:15:8d:d0:3a:31:3b:18:c5:b4:5c:91:77:6c:
         c3:14:9e:7e:70:c7:97:b4:b9:ca:5d:19:92:ad:ba:c0:f2:b3:
         47:e8:3c:16:8b:b3:d0:fe:7f:86:ab:b6:4c:01:23:a7:dd:3a:
         17:99:f7:ad:d5:3d:cf:3a:ec:09:42:e6:53:6b:07:cd:a2:8b:
         9f:e8:88:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:51:08 2026 by rpki-client