Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4a8be3cf-9a2f-3ed3-a960-767cc6f5f874.roa
File:                     4a8be3cf-9a2f-3ed3-a960-767cc6f5f874.roa (raw, json)
Hash identifier:          Nj8O72iYYxkh5m4qaaZLiUh6s1PG51k+BIlJWcOCji0=
Subject key identifier:   67:47:A8:A3:35:7A:DD:2B:66:60:E9:89:C4:6A:68:14:C5:6A:E5:92
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584E7FFA3B24619F47E0A9258880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4a8be3cf-9a2f-3ed3-a960-767cc6f5f874.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     29802
IP address blocks:        23.230.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:3b:24:61:9f:47:e0:a9:25:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=f23a2bc3-a4c8-481e-b088-31c2c34da395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:9e:bf:83:dd:69:24:cd:b5:43:75:82:ab:6a:
                    b3:8c:b6:ea:5d:34:7c:2e:c0:4e:d0:c7:44:63:77:
                    ea:76:ff:c7:9a:ae:54:5d:69:e1:67:81:6a:25:a7:
                    fb:75:d3:c3:df:60:a2:82:fe:f7:db:28:15:49:bd:
                    70:05:b0:76:95:54:13:4e:d3:01:15:e2:83:84:ee:
                    8a:4c:7f:9e:6b:e2:62:65:fd:9e:31:2d:db:b7:97:
                    3a:44:12:1d:f1:d3:1b:db:8c:16:c1:5c:52:bb:c0:
                    a6:3c:22:6b:4f:17:3c:60:fd:de:97:b8:e4:ba:2c:
                    88:bf:01:bf:2c:a0:b4:9d:9c:a8:3d:71:74:8c:22:
                    fa:68:c2:24:b4:c6:b2:0d:e3:58:fe:95:70:42:b2:
                    e3:2e:f9:79:e5:5e:c0:9c:d0:8b:11:f1:5c:39:5f:
                    2d:f1:b3:ba:ad:d5:fe:38:7a:74:26:86:55:a9:3a:
                    09:94:57:12:1d:9e:af:d3:1d:13:16:cd:71:07:f6:
                    9d:b8:9b:6d:ac:08:20:a1:c6:22:fa:bb:da:7e:ab:
                    d6:33:12:aa:43:c7:78:c0:f7:e8:2d:00:c6:66:57:
                    f5:c9:9a:aa:bf:2d:a0:de:f7:11:33:e2:d1:ab:a2:
                    98:f9:44:63:41:30:4a:ab:61:10:ee:7d:5a:1d:88:
                    ae:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:47:A8:A3:35:7A:DD:2B:66:60:E9:89:C4:6A:68:14:C5:6A:E5:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4a8be3cf-9a2f-3ed3-a960-767cc6f5f874.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:40:09:72:f3:50:ae:43:71:1a:12:c4:d7:21:ef:c2:27:da:
         5e:e7:ad:50:88:c3:7e:dd:ed:42:1f:f9:40:d1:c3:3d:e1:62:
         d6:84:ee:9a:61:89:08:5a:25:04:65:36:9d:e9:ad:47:c1:2c:
         12:43:d1:e3:86:b9:fa:73:c6:38:77:c0:a3:18:5f:41:d5:fc:
         ff:62:4f:bc:3a:99:56:aa:38:88:df:21:8e:b6:aa:41:dd:20:
         bd:76:10:4d:fe:05:54:4e:a6:95:01:e2:e3:f2:20:58:ef:5b:
         ac:3d:fd:07:aa:53:cd:f5:1c:99:82:37:59:f7:35:4c:21:5e:
         0c:26:34:42:a6:64:0b:62:b3:73:9b:fa:e9:40:41:29:b0:ce:
         90:25:12:2a:13:08:41:ef:a9:d2:4d:57:1a:2f:da:42:b6:7e:
         30:30:37:55:ea:4e:25:7a:a5:a0:fb:d4:a3:1c:3d:a9:b4:b0:
         e1:97:c3:ce:b7:2e:6f:48:08:b7:1f:60:18:60:ee:90:c1:3c:
         ba:a9:7b:70:ab:c5:02:07:fe:cb:cb:d4:6c:34:89:3a:4c:1f:
         4e:2c:56:20:77:35:03:9c:a3:57:c7:51:cd:f2:fb:33:93:95:
         dd:04:e0:5b:0c:a3:2f:91:7d:3d:57:2e:cb:0b:97:7d:47:1c:
         3a:8a:b6:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5/+jskYZ9H4KkliIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk
ZjIzYTJiYzMtYTRjOC00ODFlLWIwODgtMzFjMmMzNGRhMzk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8p6/g91pJM21Q3WCq2qzjLbqXTR8LsBO0MdE
Y3fqdv/Hmq5UXWnhZ4FqJaf7ddPD32Cigv732ygVSb1wBbB2lVQTTtMBFeKDhO6K
TH+ea+JiZf2eMS3bt5c6RBId8dMb24wWwVxSu8CmPCJrTxc8YP3el7jkuiyIvwG/
LKC0nZyoPXF0jCL6aMIktMayDeNY/pVwQrLjLvl55V7AnNCLEfFcOV8t8bO6rdX+
OHp0JoZVqToJlFcSHZ6v0x0TFs1xB/aduJttrAggocYi+rvafqvWMxKqQ8d4wPfo
LQDGZlf1yZqqvy2g3vcRM+LRq6KY+URjQTBKq2EQ7n1aHYiuhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGdHqKM1et0rZmDpicRqaBTFauWSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNGE4YmUzY2YtOWEyZi0z
ZWQzLWE5NjAtNzY3Y2M2ZjVmODc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+bpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADtACXLzUK5DcRoSxNch78In2l7nrVCIw37d7UIf+UDRwz3hYtaE7pph
iQhaJQRlNp3prUfBLBJD0eOGufpzxjh3wKMYX0HV/P9iT7w6mVaqOIjfIY62qkHd
IL12EE3+BVROppUB4uPyIFjvW6w9/QeqU831HJmCN1n3NUwhXgwmNEKmZAtis3Ob
+ulAQSmwzpAlEioTCEHvqdJNVxov2kK2fjAwN1XqTiV6paD71KMcPam0sOGXw863
Lm9ICLcfYBhg7pDBPLqpe3CrxQIH/svL1Gw0iTpMH04sViB3NQOco1fHUc3y+zOT
ld0E4FsMoy+RfT1XLssLl31HHDqKthA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:23:47 2026 by rpki-client