Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/41ee0527-0c2b-3ed4-91c7-ca679a1ded90.roa
File:                     41ee0527-0c2b-3ed4-91c7-ca679a1ded90.roa (raw, json)
Hash identifier:          cdbq66EhCQLwNNRQjEwnjNBwNKG2MvSgbvNwkVjXx+8=
Subject key identifier:   93:AC:E0:9B:DB:4A:C1:AB:C8:25:08:6D:27:E7:6A:ED:A5:A5:95:2D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F4986C2FDD41DABB1C5615B80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/41ee0527-0c2b-3ed4-91c7-ca679a1ded90.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     3257
IP address blocks:        23.230.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:c2:fd:d4:1d:ab:b1:c5:61:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=520d2196-f664-4525-b881-f97129029487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:78:9b:48:e6:5c:7b:5c:3d:c6:58:48:22:7b:
                    bd:b4:88:bf:e9:fe:fe:2b:03:f1:74:5f:6f:4c:e7:
                    7c:05:d7:64:ff:7c:29:ce:72:5c:aa:61:b6:92:91:
                    a8:66:52:49:80:2d:2a:26:33:e1:39:c7:42:90:60:
                    9d:31:39:ee:6e:50:43:48:8b:7f:c1:61:dd:b3:e8:
                    d0:ce:59:48:32:31:c1:33:e1:86:57:bb:c8:22:df:
                    82:be:ec:77:f5:a7:b1:61:e5:c6:ad:f6:b0:12:30:
                    b1:3d:0c:e6:38:92:1f:f3:eb:de:1f:06:ae:cf:b3:
                    6e:7f:19:40:11:11:7f:16:82:2d:73:a7:b8:51:e4:
                    38:f0:67:fe:09:74:1d:51:58:7c:79:62:17:b7:4c:
                    df:ba:ce:8f:8d:c9:52:b7:bd:80:8d:45:71:3f:df:
                    e3:a7:6b:4a:79:a7:1d:cd:06:bb:6b:d7:c0:f0:cf:
                    04:a7:db:98:05:82:08:55:d6:ad:76:5a:0e:bb:1c:
                    9d:db:af:4a:a1:72:8f:a7:2a:9e:a6:ef:72:6e:d0:
                    c8:47:eb:09:da:dd:53:cc:df:de:9c:cb:16:aa:98:
                    7e:34:6b:3a:b9:6a:e2:7b:26:06:f0:e5:40:23:8b:
                    42:d5:6b:34:24:f8:d7:d4:bc:18:00:00:be:28:d0:
                    44:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AC:E0:9B:DB:4A:C1:AB:C8:25:08:6D:27:E7:6A:ED:A5:A5:95:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/41ee0527-0c2b-3ed4-91c7-ca679a1ded90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:aa:03:5b:b4:ef:57:50:2f:68:f1:68:9d:e6:2f:27:cd:b9:
         c7:cc:f4:36:c1:ef:2a:e5:77:24:c5:f3:3f:11:55:30:d7:28:
         3e:96:9d:fd:7e:21:d9:80:9f:5e:c4:59:d5:0b:b6:07:d1:97:
         75:05:91:dd:5f:34:61:ae:b4:54:23:c7:7f:f2:09:e9:76:e8:
         d2:88:40:54:df:0d:4d:53:1e:36:12:7a:0c:f2:1c:9d:06:c9:
         8c:1e:11:3d:d8:fd:f2:5a:06:88:08:6d:b5:f8:8c:76:19:20:
         d6:75:c1:50:14:02:1e:d7:5b:9e:c9:4c:f1:47:f5:7a:9c:9f:
         ec:69:9a:b7:e8:c2:6c:02:a8:db:4b:b2:6a:a7:93:12:e4:2d:
         0f:f3:48:e2:b7:2b:fc:0f:86:bb:60:00:13:d4:9d:22:fc:0b:
         fa:dc:b3:2e:9e:c3:4b:dc:f4:b9:cf:68:5b:13:a6:da:ff:df:
         85:f8:02:91:66:09:21:25:28:91:58:4e:01:92:f5:09:14:bd:
         f8:7e:1a:d9:3e:cd:14:30:2e:b4:fe:88:4d:02:d2:91:7e:b4:
         ab:cc:7a:f5:6d:1f:6e:13:17:18:35:53:ff:06:e5:bc:d1:87:
         17:05:b1:c0:5e:89:be:db:82:5f:1b:d5:b6:27:02:a9:c4:80:
         2e:41:8b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:40:14 2026 by rpki-client