Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b67caaf4-8bda-3eb3-a1c4-be53442ce925.roa
File:                     b67caaf4-8bda-3eb3-a1c4-be53442ce925.roa (raw, json)
Hash identifier:          hQ7u5zzyG4X+PEcDHZ44dGXgPP9460vz6zti+nR/h0o=
Subject key identifier:   02:14:10:44:B9:DA:7B:7D:9C:E2:38:44:BC:13:09:63:27:33:87:B8
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D465F936D71A6A8206162D700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b67caaf4-8bda-3eb3-a1c4-be53442ce925.roa
Signing time:             Tue 24 Mar 2026 13:00:41 +0000
ROA not before:           Tue 24 Mar 2026 13:00:41 +0000
ROA not after:            Mon 22 Jun 2026 13:00:41 +0000
asID:                     18779
IP address blocks:        23.230.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:5f:93:6d:71:a6:a8:20:61:62:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 24 13:00:41 2026 GMT
            Not After : Jun 22 13:00:41 2026 GMT
        Subject: CN=186ff5c5-1b73-42d2-978a-6241f90b11ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:12:ee:0f:23:c2:c2:2b:9f:55:d6:10:89:90:
                    eb:81:22:96:f7:93:b1:29:f2:2d:7f:1b:54:49:82:
                    b0:e3:48:80:9a:36:7e:06:02:cd:5a:a9:44:6e:a2:
                    dd:27:f0:20:18:27:9d:52:1c:66:54:4b:a3:da:03:
                    99:5b:00:a4:81:9c:d9:00:fe:fb:7f:ad:df:57:d9:
                    64:42:16:16:79:fa:de:fa:1b:fc:e0:d8:43:5a:d1:
                    6e:39:fa:e7:b1:6a:19:75:0b:e8:77:49:eb:3e:3c:
                    21:1c:bf:95:9f:0d:f4:c5:83:ee:f3:bb:c0:b2:b9:
                    dd:3f:82:ed:0b:0f:1e:33:06:89:07:e9:15:f7:0d:
                    e8:19:41:46:b2:a5:f8:d3:af:44:1f:68:95:34:5c:
                    80:49:ce:26:39:d9:9a:a8:47:7e:95:a9:99:48:c3:
                    a7:85:3c:99:bd:6c:cd:b5:7f:71:60:5a:28:04:9d:
                    9a:8c:3d:79:41:16:a9:a1:aa:05:30:37:1e:4b:42:
                    9f:67:16:4c:4f:de:05:f4:28:29:c4:80:dd:93:18:
                    21:cb:2d:19:06:e5:a7:a3:ed:b1:7b:f1:71:0a:c6:
                    3f:e1:2b:a3:07:d6:20:7e:6b:00:12:21:84:19:8c:
                    13:f1:c0:be:8d:e0:94:1d:85:eb:a5:3f:98:2d:c1:
                    d0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:14:10:44:B9:DA:7B:7D:9C:E2:38:44:BC:13:09:63:27:33:87:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b67caaf4-8bda-3eb3-a1c4-be53442ce925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:90:b2:c5:83:b7:2a:74:39:df:a9:88:79:05:46:77:f4:45:
         8c:a8:97:c4:a9:1f:a6:23:f0:20:01:d9:37:29:30:98:02:f0:
         d3:7d:ce:1b:1c:ea:4c:5d:96:31:ec:a1:0a:0b:e9:a8:88:51:
         06:99:ed:84:81:17:ea:8a:88:6d:54:9b:d0:49:42:55:e8:f1:
         09:f6:6f:17:6d:2f:ed:08:27:fe:24:42:90:70:5d:2f:54:d3:
         92:d0:c2:5f:9c:5d:f1:8c:1f:08:0d:8e:31:e2:e1:98:80:2f:
         2a:a7:c8:ed:16:72:4f:8b:09:df:c2:d6:98:1f:77:c7:86:bb:
         53:76:d3:54:a8:d8:3a:d6:b8:6e:29:eb:66:3c:5a:d5:a4:60:
         16:18:6c:6d:46:0c:a6:e8:33:c8:8d:5e:a0:65:56:92:f0:14:
         50:69:f6:61:ce:af:07:07:b1:f4:8b:fb:96:0b:e9:ac:e4:6b:
         bf:4e:e9:98:79:7a:87:c0:f6:c0:05:6c:85:fb:c1:a5:9b:c7:
         46:a7:3b:ad:38:6c:be:e3:33:2c:71:a1:84:ee:74:c7:90:4b:
         75:c8:89:60:6b:1d:0f:80:d4:b1:0b:42:32:ee:95:e7:3e:a4:
         ce:a6:1b:05:37:65:e9:04:e6:80:bc:11:02:2f:8f:18:3a:33:
         3f:7b:a6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:36:13 2026 by rpki-client