Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bf453f1a-aec3-3f6e-98e5-eda6c13021f8.roa
File:                     bf453f1a-aec3-3f6e-98e5-eda6c13021f8.roa (raw, json)
Hash identifier:          UH2jyutm+bZItZUfRc4mWL5vsrn7WxchQtl2WUzDcY8=
Subject key identifier:   8D:93:6E:94:15:CE:D3:DB:C0:D1:73:4D:E4:16:9A:CA:83:78:39:83
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F6C581CA5D81B4F3016B8F800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bf453f1a-aec3-3f6e-98e5-eda6c13021f8.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     3356
IP address blocks:        23.230.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:1c:a5:d8:1b:4f:30:16:b8:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=bb9f77b3-fc27-4deb-8394-6c717dadd2ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:98:e2:53:9b:39:c7:2b:7d:15:2b:a8:8b:6a:
                    4f:4e:9e:70:eb:7a:b0:ea:e4:dc:6f:99:8a:e4:62:
                    d4:db:28:5d:a8:67:77:88:d0:01:a0:d2:cd:28:92:
                    c2:7b:f5:78:aa:46:da:3f:52:37:04:e8:55:42:c6:
                    e2:02:1e:6e:27:d4:58:a1:07:c2:80:f5:cb:2c:46:
                    6f:27:d7:98:60:75:74:39:45:09:27:43:34:6d:43:
                    9e:1b:67:c4:11:87:09:a3:34:d8:13:3d:28:fd:87:
                    72:1a:e2:70:29:28:b2:38:36:a0:78:67:71:32:22:
                    a7:67:fc:af:51:fb:05:6a:44:4c:50:be:59:8f:24:
                    58:09:19:4d:62:28:83:34:7f:0a:82:01:a8:88:64:
                    e9:35:6a:7c:3c:ca:61:0a:a7:46:d7:ba:be:f8:6f:
                    79:00:ba:30:d2:92:e7:6d:f9:33:e2:82:c7:9b:b7:
                    cf:5b:24:33:d1:24:ab:53:90:1f:b8:57:6e:34:ce:
                    ae:e3:1f:d1:53:16:58:03:48:f8:26:fa:bd:a0:83:
                    1e:c2:9e:4b:5b:8d:c2:30:fc:d0:70:b2:ab:6a:dd:
                    c9:28:59:42:67:e7:dd:23:ec:b8:ae:f9:34:92:a4:
                    42:35:28:2c:76:c5:13:01:86:e1:c6:0f:e8:f1:a0:
                    36:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:93:6E:94:15:CE:D3:DB:C0:D1:73:4D:E4:16:9A:CA:83:78:39:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bf453f1a-aec3-3f6e-98e5-eda6c13021f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:03:d1:fd:c9:08:be:09:15:00:62:66:3b:b9:e2:16:24:62:
         c9:69:64:71:e2:aa:8d:5d:3e:42:75:24:6e:42:f2:ae:12:8c:
         77:11:a6:cd:9a:1c:b8:be:36:cd:39:23:72:63:9c:29:66:8c:
         70:63:ba:57:d1:0c:8f:5e:64:18:fb:bd:12:36:33:6b:03:31:
         83:76:b4:5a:82:17:40:3b:02:40:9c:c5:07:7d:5a:65:93:da:
         2e:59:2b:91:76:c5:a3:d1:a4:ce:95:00:86:43:af:a9:5c:06:
         10:d6:da:ca:32:bd:84:1f:3d:2b:d3:b6:5e:ee:a4:e4:15:83:
         4d:16:d3:cb:dc:e7:81:66:1e:6c:3a:e5:32:43:ef:09:31:d9:
         45:d4:21:0f:fb:7e:9f:3e:f0:81:af:63:ea:10:99:14:df:4f:
         a4:90:4d:5f:4c:03:f4:b3:27:9c:05:51:36:6e:6e:0c:93:65:
         9a:9b:1b:dd:34:e6:7c:d4:fc:6b:89:d6:20:82:07:f8:01:52:
         f2:04:c4:c8:01:39:d1:bc:6f:f7:9d:d1:a4:42:53:df:ab:dd:
         78:ef:15:4e:85:b5:dc:2b:c6:c4:07:d0:b7:59:6c:21:b6:e0:
         ae:57:90:bf:d3:4e:ae:69:06:12:10:7c:4c:55:34:7b:ea:4a:
         95:87:2e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:57:46 2026 by rpki-client