Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/386cdaf6-6110-3382-af0e-702c71bea87a.roa
File:                     386cdaf6-6110-3382-af0e-702c71bea87a.roa (raw, json)
Hash identifier:          dIvLv8JzL0Pfm7OOHp30viWJiJ24bk28R0x3ccbyLQ4=
Subject key identifier:   AA:0C:D5:F5:65:34:F6:D2:92:E1:5A:D5:A4:47:83:83:34:F0:64:E7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D24E10E293941F968B5794E40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/386cdaf6-6110-3382-af0e-702c71bea87a.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     44559
IP address blocks:        23.230.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:0e:29:39:41:f9:68:b5:79:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=efcad1a6-00c6-408e-b1ee-2cb1ae476c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:99:92:bb:28:ec:0c:2b:2d:1a:d2:ab:a3:ed:
                    77:a2:7c:a7:7a:db:69:68:af:ae:70:1e:19:77:ba:
                    8d:c9:eb:0d:53:88:4d:ec:7e:b9:e0:f5:db:64:ce:
                    2b:d7:4f:b7:a5:1f:72:cb:60:90:3e:d4:af:a6:de:
                    14:d7:74:ed:dd:e6:37:79:04:b5:65:a5:fc:31:3e:
                    8f:dc:db:75:ef:d6:13:2f:bb:9d:dd:36:35:52:45:
                    21:3c:e7:43:23:c3:71:1d:a2:ef:9e:45:51:ea:ab:
                    c8:ab:58:60:33:92:b3:d2:d4:1d:79:a7:60:d6:26:
                    e8:38:41:f1:54:0f:b0:4f:63:0f:6d:e0:42:1b:b4:
                    e8:50:cb:78:cf:ef:c9:c1:09:25:1d:62:6a:d9:4f:
                    29:ce:cb:81:4a:c6:23:1b:52:dd:34:8f:58:c6:37:
                    1a:00:56:fa:10:dc:f2:af:bd:0c:e6:ef:e3:34:5b:
                    9f:53:4e:20:82:c0:fd:33:86:3b:4d:fc:ae:38:a3:
                    27:00:12:d4:1d:7b:ec:ed:49:c8:eb:bd:4a:45:c9:
                    54:d1:79:7e:45:4e:9f:46:1d:d7:5f:0a:9f:cc:13:
                    f2:b7:97:96:7d:02:df:4f:a9:ca:f8:2f:21:0e:dd:
                    af:43:8e:48:d5:0b:f7:ce:f4:08:1a:34:81:72:c2:
                    f0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:0C:D5:F5:65:34:F6:D2:92:E1:5A:D5:A4:47:83:83:34:F0:64:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/386cdaf6-6110-3382-af0e-702c71bea87a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:df:27:d4:b0:54:f0:cd:09:b7:d7:e2:9d:95:f4:0e:25:79:
         5c:aa:f1:56:f3:5f:cf:c3:2d:cb:81:b4:49:c9:36:08:aa:56:
         45:66:7f:74:f2:76:8d:6a:19:aa:ef:89:75:8f:ef:7c:7e:e8:
         7e:a6:77:04:1c:7c:75:0f:93:9b:ef:4e:28:3e:ba:91:ac:fe:
         71:dd:bf:59:d4:4f:32:a1:9a:1c:d5:b2:8c:1b:9d:48:af:94:
         8d:bf:6f:ca:c7:54:84:4a:1f:7f:43:c5:57:b4:03:01:25:e4:
         fb:3c:8b:6f:92:fc:2d:75:a7:84:df:a9:12:eb:c0:fc:01:5f:
         2b:a1:94:47:d1:cf:e4:fe:66:bb:05:b0:1b:6d:5b:a4:0b:07:
         34:b0:f7:77:c6:6e:f9:c6:2a:e0:50:58:90:0b:fe:ad:44:90:
         c2:53:7f:d7:04:a8:c1:44:fc:9a:48:d4:59:0f:1a:40:b3:9c:
         b2:4f:a5:80:c9:1d:3e:d1:3a:37:8c:55:1f:e9:60:01:06:55:
         d7:39:a0:d7:59:aa:ec:63:39:47:89:e6:a9:a6:13:e5:1a:7e:
         02:1f:70:0c:3a:f0:cb:77:b5:75:d4:78:74:2a:c4:9b:5a:26:
         4b:4b:86:98:23:7d:4c:1b:9f:1a:7c:3f:57:3c:2f:55:e8:70:
         a1:bb:e4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:47:46 2026 by rpki-client