Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cbb17b7a-03ff-313e-acfe-bac966c575ba.roa
File:                     cbb17b7a-03ff-313e-acfe-bac966c575ba.roa (raw, json)
Hash identifier:          5AUJg9yjq0u4YN8Q+IOnTNuXWv819cNWxo6elQl0KZ4=
Subject key identifier:   09:A0:1D:4F:38:39:14:71:ED:0D:FB:04:DB:A2:B6:DA:AA:7C:13:78
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D465F926EA9D49A1CF42E2700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cbb17b7a-03ff-313e-acfe-bac966c575ba.roa
Signing time:             Tue 24 Mar 2026 13:00:41 +0000
ROA not before:           Tue 24 Mar 2026 13:00:41 +0000
ROA not after:            Mon 22 Jun 2026 13:00:41 +0000
asID:                     18779
IP address blocks:        23.230.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:5f:92:6e:a9:d4:9a:1c:f4:2e:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 24 13:00:41 2026 GMT
            Not After : Jun 22 13:00:41 2026 GMT
        Subject: CN=c1915d8f-1fd5-4f25-8fcf-c96a0999155e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:48:2b:47:f1:85:0f:70:e1:cc:ce:20:37:a0:
                    2f:90:39:3d:b8:5b:cd:38:ae:a3:8c:b9:48:3e:ab:
                    f0:54:fb:30:99:55:b4:21:2c:b2:92:bc:3b:6d:e3:
                    29:e1:e4:a6:c0:c8:2d:19:88:74:d7:28:fb:25:10:
                    d8:fd:a6:35:7f:70:81:74:c4:02:66:9d:e4:08:ae:
                    f5:92:10:0c:f2:ce:7e:bc:53:06:e6:82:3f:e4:de:
                    b1:db:02:ce:bb:7d:83:35:35:35:d5:d5:89:c5:3f:
                    ad:ea:24:27:a6:d6:7a:b7:5f:b3:54:55:47:44:0e:
                    e0:45:c9:f1:e1:77:c4:83:fc:7d:36:5e:d7:e4:b6:
                    97:83:d2:23:30:b1:23:23:4a:6d:d8:9b:76:18:e3:
                    c3:63:9b:13:aa:9f:27:bb:f6:e1:d7:7e:e3:3d:dc:
                    ac:86:0f:af:df:df:5d:f3:c6:1d:34:46:3d:ae:c6:
                    e0:3c:99:5c:52:34:fd:12:a1:5a:3b:34:33:49:99:
                    d2:d2:1a:bb:61:46:f0:d9:f3:ae:b3:f8:03:5b:9f:
                    8d:dc:e1:ae:9e:45:85:92:c8:0a:23:6e:5f:1b:56:
                    f5:93:32:11:a3:45:c3:71:98:08:7d:fe:f2:f2:8b:
                    b6:8e:d5:b4:09:e4:f9:df:eb:4a:13:e0:64:8e:48:
                    77:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A0:1D:4F:38:39:14:71:ED:0D:FB:04:DB:A2:B6:DA:AA:7C:13:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cbb17b7a-03ff-313e-acfe-bac966c575ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:5a:01:ef:cb:df:19:41:79:44:51:c8:e1:8f:d4:16:c5:a4:
         45:ae:49:6b:93:9f:08:72:ea:9d:6f:e8:b8:a4:17:2f:11:2d:
         71:85:33:2d:1c:4b:85:6b:dd:72:a7:90:59:4e:0e:ac:1b:75:
         66:44:e4:92:94:32:4c:a5:71:99:28:b1:f1:0b:fe:73:d7:f5:
         52:5d:2f:4b:be:4e:a6:77:5b:1b:fe:88:bf:35:36:1a:8d:08:
         fa:5d:ef:21:03:ef:d8:80:05:1c:cd:3b:aa:89:b7:3a:1b:5b:
         3a:82:7a:b5:ac:02:7a:14:75:85:9b:2a:96:f3:de:93:68:35:
         7d:ac:10:66:de:31:57:d2:f0:23:bb:0b:aa:25:5c:d4:bc:90:
         ba:f1:c1:52:b0:5f:e6:c6:98:e5:71:07:2d:0a:3a:ad:33:56:
         87:c2:b9:8c:a7:c8:3f:60:cd:a1:a7:4f:5c:a0:f1:9f:69:35:
         ad:ab:b7:a3:18:37:5e:48:c2:5f:e1:08:9d:c6:49:09:a4:13:
         2d:70:00:33:20:87:8b:25:a4:66:74:90:30:c1:b4:87:8f:41:
         5a:cd:dc:84:d5:2e:a5:41:04:fa:cd:12:ea:d5:79:64:e9:01:
         df:43:27:fc:7f:51:60:50:c7:02:c5:7c:57:1b:b5:8b:4b:1e:
         16:fe:41:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:47:43 2026 by rpki-client