Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/61d42ade-3b49-3258-b6b1-ce336905641c.roa
File:                     61d42ade-3b49-3258-b6b1-ce336905641c.roa (raw, json)
Hash identifier:          6jwc2w5OU4NNI5tfqsr74lNVBtAVOL01+VQftSokhqo=
Subject key identifier:   42:DC:BA:FC:8B:25:AA:0E:8E:40:EC:A4:A5:C0:23:BD:5B:C9:0D:5A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584DCC60733285DC0F34B8B7A0D0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/61d42ade-3b49-3258-b6b1-ce336905641c.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     834
IP address blocks:        23.230.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:73:32:85:dc:0f:34:b8:b7:a0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=a4de2f06-d4e9-43eb-a37e-e2c8fce9ba4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:10:1c:10:f6:45:3c:4e:94:48:a6:d5:bc:ef:
                    a5:3a:fd:1c:5a:e1:62:e1:f6:e4:e0:47:ca:e3:16:
                    5f:31:de:0d:a5:8f:b3:e2:e7:2c:0c:64:83:ea:af:
                    d4:4c:a1:48:2f:66:69:9c:04:96:1f:9e:c1:12:68:
                    f4:34:f3:bd:a6:cd:09:43:12:43:8d:b3:b5:a8:7f:
                    27:2f:f1:29:d9:c8:20:e2:e4:dc:97:c0:1c:de:5e:
                    68:cd:e8:45:a4:5c:b7:73:01:d7:de:f3:5a:84:5c:
                    02:74:3b:9f:55:ba:61:d1:e8:e4:31:c9:74:9e:18:
                    d4:ef:e6:1d:c3:cf:c8:2b:a1:29:b7:94:c9:e9:95:
                    a3:eb:de:4c:5e:9c:b9:bc:33:37:7b:ed:73:d0:63:
                    3c:0a:bf:a4:f7:40:e2:73:6b:04:74:2c:37:c6:e1:
                    88:53:cf:a4:68:c2:c5:1f:16:73:78:1f:f3:98:95:
                    3d:24:23:84:0c:b6:75:0d:42:4c:d7:fd:48:40:19:
                    49:e8:a7:bd:23:3c:ba:e7:2a:be:f3:80:7e:11:5d:
                    a1:d2:3e:9f:a6:e1:4d:82:2b:99:aa:ad:79:d7:87:
                    45:a4:fc:ed:7f:c8:bc:7a:b7:3f:79:87:3f:10:5f:
                    13:3b:8e:23:89:e3:ff:77:d3:61:e8:2d:13:67:cd:
                    a4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DC:BA:FC:8B:25:AA:0E:8E:40:EC:A4:A5:C0:23:BD:5B:C9:0D:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/61d42ade-3b49-3258-b6b1-ce336905641c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:98:82:76:75:f4:0e:e7:95:01:fd:25:bd:ec:bd:ac:f4:53:
         08:66:08:3f:23:ad:44:6a:aa:c0:f1:5c:f7:89:34:1c:95:7d:
         c9:2a:a7:b2:82:0f:a6:7f:d9:23:a4:9c:20:96:c0:c6:3d:82:
         b7:38:ad:ee:7c:f8:4c:09:14:8e:13:52:40:62:90:d3:f6:82:
         c5:0e:b8:03:6e:e4:52:60:87:28:74:f2:ba:72:75:b5:76:58:
         23:c9:ec:81:0d:64:e2:4b:df:4a:08:6b:15:20:2b:00:42:cb:
         cd:54:6a:fa:6b:3e:47:55:00:9f:d1:ef:8a:29:3d:9f:5d:ce:
         93:59:fa:cb:6d:d8:4a:9c:0f:69:c7:9c:13:d9:72:48:8d:b7:
         e3:03:52:ae:21:77:5d:04:69:8b:a0:69:6b:81:3d:be:df:28:
         c6:a6:77:34:92:04:a9:7f:c0:6c:9b:5d:8f:21:93:07:a9:2b:
         7d:c2:3c:07:24:ec:87:e9:00:86:99:f7:1e:ea:57:59:ce:e0:
         f2:38:ee:4c:58:a3:0e:4a:af:a2:76:51:b0:fb:f9:25:1c:3e:
         39:59:c2:9b:d1:b2:3f:af:2b:95:23:88:ec:33:6d:d7:d5:2a:
         4a:4b:f2:12:59:2e:3c:7b:a0:22:68:18:d1:d8:78:98:f9:10:
         94:40:e4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:28:49 2026 by rpki-client