Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f8ddbe6b-4803-37e2-b51e-d72f07dd310d.roa
File:                     f8ddbe6b-4803-37e2-b51e-d72f07dd310d.roa (raw, json)
Hash identifier:          sCdr/hUdAI+/l6Er6lJ1rD7FXx8auiZfCiV+bIoG+ls=
Subject key identifier:   68:E0:FB:93:4C:82:1A:1D:D0:58:C0:4B:20:11:EB:13:27:2E:BF:94
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F51D2B5DCC32A1A1E6FA24300
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f8ddbe6b-4803-37e2-b51e-d72f07dd310d.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     11404
IP address blocks:        23.230.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:b5:dc:c3:2a:1a:1e:6f:a2:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=d1089885-a0b4-4968-9cb6-6801ddc1c645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:77:9a:0b:8c:07:b5:1b:a7:b9:3b:cf:18:73:
                    73:7c:54:df:bc:6f:9f:62:52:5d:4c:b0:0a:5f:ec:
                    d0:1c:9d:58:dc:34:00:5b:5d:4f:ff:21:cd:96:91:
                    65:03:3e:2a:93:74:a3:a1:e3:e3:63:be:b9:77:c2:
                    c2:41:b9:44:4e:7d:01:5f:82:82:85:fc:86:1c:14:
                    fc:ae:28:ce:14:67:dc:9f:bb:5a:40:46:e6:48:71:
                    e7:b4:05:a2:c5:f4:a2:5f:73:cc:51:b8:c2:b4:ba:
                    85:68:44:f1:e2:37:89:c7:7f:c0:fc:06:30:27:23:
                    ec:c6:ae:74:b0:86:b6:32:80:69:38:e2:db:bc:7b:
                    ab:22:02:35:12:44:5c:c4:e4:2b:a4:2f:fb:14:4b:
                    b7:88:a2:27:f9:2c:99:e1:a9:92:4c:4f:1d:d7:f3:
                    49:94:24:bc:06:b1:c9:82:bf:6a:e0:15:23:51:c8:
                    e4:74:2e:67:f4:4c:97:d8:dd:02:06:a0:a5:dd:ae:
                    23:46:70:4f:66:5b:16:ac:cf:77:4b:4a:89:24:b7:
                    5a:ef:7a:70:c6:9a:ac:3d:d5:2b:72:93:40:ce:4a:
                    8c:44:29:72:bb:31:79:36:18:a7:50:90:2c:9e:bc:
                    51:2f:6f:42:0d:05:8e:ec:1e:06:98:dc:80:17:7c:
                    7e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E0:FB:93:4C:82:1A:1D:D0:58:C0:4B:20:11:EB:13:27:2E:BF:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f8ddbe6b-4803-37e2-b51e-d72f07dd310d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ad:8d:53:de:f5:e7:de:d9:d0:55:0c:9d:5e:e7:d7:83:c0:
         ad:eb:30:e5:fc:3d:d8:5b:f9:02:43:91:cb:ea:e8:37:67:2c:
         ad:23:5f:e4:2d:fd:0c:68:7e:fe:7d:72:29:46:d1:66:d5:53:
         6b:24:3d:d5:74:60:9b:43:1d:05:31:34:49:98:f3:b6:c2:e0:
         6c:5e:82:18:06:d0:96:6f:8a:a0:fd:c6:ce:52:92:78:18:3a:
         ab:b2:62:eb:94:d3:71:3b:88:66:c5:a1:d4:cf:46:4d:6a:cd:
         37:de:c8:f6:4c:a6:77:28:93:e6:22:0f:52:7b:dc:90:f9:7d:
         f6:71:08:b8:d8:57:3a:81:06:65:82:7e:21:52:2a:ac:67:c6:
         64:ae:38:30:a9:ac:ea:94:de:d0:fc:ed:af:89:b8:d8:ba:36:
         43:0c:c8:e1:d9:31:a7:3c:92:2d:90:fc:f5:f3:28:35:43:ce:
         bf:24:05:f1:35:4d:fd:4c:56:70:fe:39:59:59:87:db:ed:70:
         0d:d1:7d:25:0b:8a:4f:e9:85:53:37:10:c3:a3:bb:55:6f:84:
         f0:00:9d:1d:d8:77:95:49:1f:3e:77:a3:71:fc:cb:c6:90:b8:
         5d:fb:ee:6a:95:56:40:2b:6e:46:df:17:18:87:83:e2:af:a9:
         58:ee:5e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:38:47 2026 by rpki-client