Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42dc4bf8-3013-3e66-afb1-0c0639e036ee.roa
File:                     42dc4bf8-3013-3e66-afb1-0c0639e036ee.roa (raw, json)
Hash identifier:          AR2w7OpYYBv98lMurozhMSWOfZ4IyQvsoH7CYgV5nfk=
Subject key identifier:   82:CE:52:44:A6:F0:14:C4:B7:2A:CC:DA:0C:CB:E5:34:C6:68:38:CD
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B64CE6F8BF9BCDC2DB7671C00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42dc4bf8-3013-3e66-afb1-0c0639e036ee.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     44559
IP address blocks:        23.230.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:6f:8b:f9:bc:dc:2d:b7:67:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=90167143-c4a0-4afd-bab3-1597dc499eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fc:ff:3b:be:c1:84:28:bc:cb:22:71:fb:f1:
                    bb:f4:78:84:0c:ec:41:d3:17:3e:02:db:0a:c4:fd:
                    7a:53:e3:42:a8:1f:48:6e:a4:f3:66:88:b8:08:c8:
                    db:4b:b2:25:cc:50:48:b3:a9:65:f8:25:f1:bd:31:
                    11:13:33:d3:11:ad:a7:84:36:33:f7:b8:f3:2c:c7:
                    3d:4b:34:2d:2b:05:47:1a:09:e5:e8:41:7c:c3:b3:
                    1a:34:93:da:8c:25:7b:b9:57:70:f7:67:81:91:03:
                    64:25:cc:a2:30:2a:65:8e:e4:98:4b:b3:06:bd:df:
                    74:41:84:47:f6:d6:30:1b:e9:55:98:8b:67:be:33:
                    fc:2d:58:28:39:61:ae:49:13:51:5c:78:b5:eb:16:
                    28:85:c5:67:4e:25:78:7c:ad:5d:25:5a:0b:86:88:
                    29:ce:ab:61:53:c9:5f:61:b1:75:5b:ec:11:08:e1:
                    91:bb:87:32:34:f0:9a:9e:e0:ef:c9:1c:a7:c7:3c:
                    75:28:0f:b7:8e:e8:d9:34:d6:f8:25:36:55:ec:bd:
                    ca:1a:9d:0a:41:b6:c9:be:a3:58:77:14:9c:d2:58:
                    1c:31:ad:bc:23:a9:1e:64:48:2e:55:77:73:84:46:
                    5e:07:8a:4f:d8:54:25:d6:1b:21:cf:bd:03:02:09:
                    6d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CE:52:44:A6:F0:14:C4:B7:2A:CC:DA:0C:CB:E5:34:C6:68:38:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42dc4bf8-3013-3e66-afb1-0c0639e036ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:52:b5:c5:6a:66:99:cb:7f:79:79:b7:47:cf:09:40:32:fb:
         0d:16:66:cd:a7:26:10:c1:a5:e4:9e:62:8d:df:9b:35:51:14:
         aa:bc:93:c3:44:34:4f:fd:7f:7c:08:8d:6c:a0:d1:c1:63:6a:
         28:a6:15:37:17:34:2c:95:f1:72:df:8d:08:89:f2:85:25:08:
         0b:a8:45:48:52:59:c7:e9:07:24:4e:b3:b0:0f:77:64:50:56:
         3d:ff:19:a7:1d:65:45:04:0c:84:59:b1:fd:e8:a6:8a:b9:fd:
         b1:c1:ae:e4:31:be:a1:40:19:ca:f3:b4:27:d5:b9:b2:fb:ed:
         dd:23:58:75:68:a5:54:b3:7e:f1:c2:b3:f9:59:5d:64:73:0a:
         7f:6b:56:2c:2d:e4:5c:ba:4e:0e:0d:cf:be:72:32:6b:dc:a4:
         c2:cd:57:55:3d:02:27:32:27:a0:54:23:ee:a3:c2:10:1a:81:
         db:04:5a:e6:01:c1:b9:29:dd:8e:2d:b8:5b:05:5f:48:4a:5e:
         72:98:a6:c0:48:e7:d2:e4:72:51:d9:59:60:2c:34:4d:d4:ab:
         9e:6b:d3:bf:2a:0b:4c:98:c0:04:9f:49:05:61:b5:48:b2:99:
         0e:f4:e9:f7:b9:a7:b7:5d:e9:85:0c:19:fb:2d:88:01:98:b8:
         4b:e7:d9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:19:27 2025 by rpki-client