Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d2cdbe64-1d96-3386-8448-287e8591c613.roa
File:                     d2cdbe64-1d96-3386-8448-287e8591c613.roa (raw, json)
Hash identifier:          9HeaBoErk7FbafU0C1NjF838qA+8OM2+Yvts66sTHxU=
Subject key identifier:   92:37:47:EB:78:53:31:60:91:43:5E:C9:4C:46:A8:2A:94:5B:0F:B7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584DCF2B0A30428DDCB8A90E3000
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d2cdbe64-1d96-3386-8448-287e8591c613.roa
Signing time:             Tue 12 May 2026 13:00:30 +0000
ROA not before:           Tue 12 May 2026 13:00:30 +0000
ROA not after:            Mon 10 Aug 2026 13:00:30 +0000
asID:                     214238
IP address blocks:        23.230.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2b:0a:30:42:8d:dc:b8:a9:0e:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 12 13:00:30 2026 GMT
            Not After : Aug 10 13:00:30 2026 GMT
        Subject: CN=14c5f514-9bd2-45ef-a9c8-845ae1e0816d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a5:75:88:96:15:0e:e6:ed:7b:28:2b:15:95:
                    8e:4b:23:a3:83:34:f1:ef:8b:f9:c1:9c:1a:6b:bd:
                    a7:f8:4f:ed:d0:ba:fc:bb:65:1e:74:77:e2:3a:8d:
                    1e:7f:e8:70:13:12:5d:2a:b9:e9:dc:88:04:02:0a:
                    01:8f:b5:e2:11:c3:75:04:03:62:4a:88:c9:47:3f:
                    7d:d6:ca:7d:91:33:77:a2:d4:4c:76:fa:e1:27:43:
                    54:cc:85:4e:ae:9a:9f:7d:0c:40:a7:5a:77:25:3a:
                    04:0c:40:61:9b:b3:e9:47:90:e0:da:56:48:2d:88:
                    72:81:97:74:ea:3a:42:de:60:a2:56:a4:5d:a7:73:
                    bf:c5:c0:6f:6b:6a:fa:72:16:71:5c:15:1b:cb:fb:
                    1c:df:a6:25:cf:ae:03:df:21:36:ba:24:ff:44:e6:
                    96:e8:aa:d6:22:09:1f:f6:b0:ec:d5:cd:40:dd:0d:
                    52:b3:0d:c8:d1:f4:99:fd:be:37:a9:65:4d:cc:50:
                    76:bd:89:82:5e:0e:6c:b0:55:e5:26:0f:38:53:57:
                    20:f4:8c:50:68:dd:e4:4f:7b:25:9d:a9:eb:56:4d:
                    68:25:85:a6:b5:7e:84:c5:2e:e0:93:a2:87:e3:78:
                    ec:ce:44:10:28:0c:5e:1f:ba:a0:67:28:3e:db:b0:
                    e7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:37:47:EB:78:53:31:60:91:43:5E:C9:4C:46:A8:2A:94:5B:0F:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d2cdbe64-1d96-3386-8448-287e8591c613.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:e7:a5:58:75:9a:2d:d0:6c:90:5b:f5:ae:d0:0e:c2:eb:6a:
         87:49:1a:e2:3f:69:e2:47:38:bf:ef:95:a8:d1:a8:2a:4f:73:
         55:dd:aa:d9:8e:c2:74:1b:3f:c0:9f:c9:39:c3:60:b1:ec:5d:
         85:64:f8:3f:39:01:fc:41:d5:be:d8:3a:76:2b:61:83:70:2f:
         ec:a7:62:e2:4d:8b:f2:84:1f:e7:51:65:28:eb:4b:71:5f:ac:
         d9:86:bb:70:fe:63:4d:b5:9e:fc:3d:21:6c:f2:f2:fd:32:b2:
         31:33:fe:42:db:dc:98:a2:18:93:9f:1d:38:b0:c3:b4:c5:d9:
         ea:4e:e4:5d:2c:4b:bf:30:c1:96:69:f3:ec:16:a9:c3:95:2f:
         b2:c8:aa:f1:85:b5:a7:d1:34:9a:80:f2:ac:29:20:0d:8e:0c:
         9a:2a:90:c3:ee:97:6d:da:d7:a1:0f:d8:67:35:41:3c:37:10:
         1a:45:61:49:be:f9:4e:f9:35:ef:08:be:24:cc:d2:58:3e:92:
         e8:e3:a9:fb:cd:57:25:b8:af:ba:3c:70:e6:31:1c:b0:94:75:
         37:b1:30:fb:22:30:53:f3:c8:ee:63:50:1b:89:ab:3d:41:e1:
         c0:b2:fc:ab:3a:2f:e0:02:3c:6e:0a:da:2d:63:3e:c6:65:52:
         f8:7c:5d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:54:36 2026 by rpki-client