Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/97d890ff-2612-3755-a0aa-97f10d23ecfb.roa
File:                     97d890ff-2612-3755-a0aa-97f10d23ecfb.roa (raw, json)
Hash identifier:          CAX+722D+qq3l3HTrDwY+ym8v7rWU/bCCanTiX1JR+M=
Subject key identifier:   D8:10:CE:91:58:39:1E:3D:22:BD:C7:E7:29:BC:52:2D:4C:7F:D5:A3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F7352D47ED1C8E242AFA145C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/97d890ff-2612-3755-a0aa-97f10d23ecfb.roa
Signing time:             Sat 10 Oct 2026 01:00:13 +0000
ROA not before:           Sat 10 Oct 2026 01:00:13 +0000
ROA not after:            Fri 08 Jan 2027 02:00:13 +0000
asID:                     212238
IP address blocks:        23.230.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:73:52:d4:7e:d1:c8:e2:42:af:a1:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 10 01:00:13 2026 GMT
            Not After : Jan  8 02:00:13 2027 GMT
        Subject: CN=075c3414-a1d0-401c-b4d7-e4ec95b368ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1b:f8:bb:a0:43:ed:e7:4a:a0:64:25:aa:a8:
                    19:33:aa:9b:6c:61:e9:b5:92:1e:b2:0f:26:07:e7:
                    b0:c4:f1:71:79:6b:4d:6c:13:4f:a0:e0:7f:8a:e3:
                    95:7c:ea:1b:b5:04:27:fa:c5:1c:96:72:c6:fa:42:
                    7a:5f:18:3e:25:92:b7:9f:a5:91:ea:d4:da:5a:99:
                    42:90:92:3f:7d:da:08:a6:db:07:fa:7c:67:c0:a6:
                    dc:23:12:eb:fc:03:da:ae:9a:cc:ea:b3:c3:29:4b:
                    0d:5e:c4:d2:01:e3:8b:a1:37:31:1a:6b:0f:18:4f:
                    7b:c5:44:35:24:12:95:bc:d7:47:49:b1:63:07:1f:
                    da:a5:37:15:4a:69:c2:cd:2f:ca:a3:5c:01:f2:c2:
                    5b:86:0f:55:38:95:be:de:70:f8:cf:ff:c1:8a:01:
                    a8:4f:16:dc:54:9d:52:fa:51:10:66:32:6d:47:a4:
                    4c:6b:af:dd:d5:7d:b5:e9:09:0c:36:5a:b8:48:c6:
                    11:ef:61:06:38:8d:74:3e:2f:7c:b9:df:60:54:56:
                    fe:be:23:d1:75:58:d4:0c:bf:fa:18:69:0b:82:4c:
                    02:f6:7d:a0:55:9e:20:e4:34:f2:c1:32:78:4e:2c:
                    87:b8:02:bf:55:fa:2f:e5:9c:28:76:66:14:8a:4e:
                    05:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:10:CE:91:58:39:1E:3D:22:BD:C7:E7:29:BC:52:2D:4C:7F:D5:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/97d890ff-2612-3755-a0aa-97f10d23ecfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:d0:fe:ba:9f:50:c3:3f:92:bf:4b:c1:d7:e1:fc:07:3f:03:
         c2:a8:ad:f5:f0:f5:b2:0b:88:58:fb:8f:9f:28:03:5f:88:86:
         7b:80:bf:c4:9d:73:9d:8d:a2:47:7b:9e:67:28:0f:92:0f:f4:
         e7:97:46:04:d6:b4:4a:d9:3d:87:89:02:6f:22:12:f3:08:bc:
         a9:c0:f4:41:1b:5a:af:b2:c3:3e:2d:7a:10:9c:e3:e4:82:ae:
         ec:39:c7:4c:97:c4:ec:71:ad:62:af:87:16:ef:99:ae:66:4a:
         49:1b:ec:cf:f9:2d:91:a4:e1:f0:dc:ea:93:3d:20:e8:ee:dd:
         db:83:fd:e9:35:a1:3e:13:49:2a:fc:2c:e0:d1:40:d4:ca:5d:
         39:bb:3a:08:60:aa:32:b5:44:1c:36:1c:0e:4d:85:24:a0:f4:
         70:a0:a0:77:dc:5b:d9:43:9e:34:35:fb:6d:24:2d:79:d6:c1:
         71:57:98:68:3a:3f:8b:7e:dc:1c:d4:40:d3:01:64:26:0a:6b:
         98:84:e1:74:32:f8:74:9a:8b:7b:b6:64:f8:93:3d:d6:0e:62:
         03:58:22:3f:0e:31:67:ef:7f:b5:ec:01:5e:42:60:47:71:7e:
         36:10:29:d1:ec:9a:75:0a:5b:d7:6d:88:87:a3:38:8e:05:f6:
         30:08:89:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zUtR+0cjiQq+hRcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk
MDc1YzM0MTQtYTFkMC00MDFjLWI0ZDctZTRlYzk1YjM2OGNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxv4u6BD7edKoGQlqqgZM6qbbGHptZIesg8m
B+ewxPFxeWtNbBNPoOB/iuOVfOobtQQn+sUclnLG+kJ6Xxg+JZK3n6WR6tTaWplC
kJI/fdoIptsH+nxnwKbcIxLr/AParprM6rPDKUsNXsTSAeOLoTcxGmsPGE97xUQ1
JBKVvNdHSbFjBx/apTcVSmnCzS/Ko1wB8sJbhg9VOJW+3nD4z//BigGoTxbcVJ1S
+lEQZjJtR6RMa6/d1X216QkMNlq4SMYR72EGOI10Pi98ud9gVFb+viPRdVjUDL/6
GGkLgkwC9n2gVZ4g5DTywTJ4TiyHuAK/Vfov5ZwodmYUik4FtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNgQzpFYOR49Ir3H5ym8Ui1Mf9WjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOTdkODkwZmYtMjYxMi0z
NzU1LWEwYWEtOTdmMTBkMjNlY2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+b4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJDQ/rqfUMM/kr9Lwdfh/Ac/A8KorfXw9bILiFj7j58oA1+IhnuAv8Sd
c52Nokd7nmcoD5IP9OeXRgTWtErZPYeJAm8iEvMIvKnA9EEbWq+ywz4tehCc4+SC
ruw5x0yXxOxxrWKvhxbvma5mSkkb7M/5LZGk4fDc6pM9IOju3duD/ek1oT4TSSr8
LODRQNTKXTm7OghgqjK1RBw2HA5NhSSg9HCgoHfcW9lDnjQ1+20kLXnWwXFXmGg6
P4t+3BzUQNMBZCYKa5iE4XQy+HSai3u2ZPiTPdYOYgNYIj8OMWfvf7XsAV5CYEdx
fjYQKdHsmnUKW9dtiIejOI4F9jAIicg=
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:41:35 2026 by rpki-client