Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0b326700-9d5b-34d5-947b-fd7575afb672.roa
File:                     0b326700-9d5b-34d5-947b-fd7575afb672.roa (raw, json)
Hash identifier:          HHhGG0KDMSgN6b3jY5zBa6moNXSz2JkAevvwjMLl+dA=
Subject key identifier:   D2:99:F4:80:6C:2E:D4:EB:E9:24:9E:CE:31:CC:39:DC:6F:73:15:90
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584CFDEAAA16E8ED42AA213E5A00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0b326700-9d5b-34d5-947b-fd7575afb672.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     18779
IP address blocks:        23.230.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:ea:aa:16:e8:ed:42:aa:21:3e:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=aa91d7fa-3c47-4778-8e71-e2e5bcf7e31a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f3:6c:96:59:f1:a1:62:bc:f9:3b:f0:70:97:
                    d5:5c:5a:14:a1:1e:77:34:fb:81:a5:24:1a:03:5b:
                    89:32:43:6d:1f:22:a4:20:fb:a0:50:43:24:ae:75:
                    04:22:69:3c:5c:c7:3d:45:6d:b7:94:01:c2:df:e0:
                    96:85:e6:1d:be:dd:99:51:39:da:f4:dd:a6:21:b6:
                    5e:e0:46:95:f3:1a:86:6b:25:61:84:11:a7:c0:83:
                    a7:8f:76:5e:26:a0:55:df:c7:53:ea:fc:d1:fc:be:
                    88:aa:6f:4b:06:dd:37:8f:52:14:d1:e8:ca:26:d2:
                    97:d4:95:f0:22:98:ee:ab:f9:a6:39:5b:32:c0:75:
                    7b:3b:de:8c:05:07:0b:62:4c:48:bd:8d:6a:b1:83:
                    96:aa:e5:4b:35:0e:14:d8:32:bf:a8:e5:0a:d6:be:
                    ab:8f:52:54:01:55:14:1e:39:28:90:e8:42:dc:93:
                    01:19:f4:29:dd:1b:65:ce:9b:4e:82:c5:64:03:2d:
                    3c:40:b2:fb:36:b4:56:59:cd:ea:73:2f:cb:a9:c6:
                    b8:6e:ed:d0:d9:74:92:e3:df:f9:66:d8:06:df:22:
                    f9:5e:3e:af:77:ea:80:c6:cb:8e:ba:c5:dd:9f:f7:
                    2c:45:9f:72:a1:8d:dc:cf:c1:b3:0a:b5:df:2a:20:
                    c0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:99:F4:80:6C:2E:D4:EB:E9:24:9E:CE:31:CC:39:DC:6F:73:15:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0b326700-9d5b-34d5-947b-fd7575afb672.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:71:08:e7:e1:34:14:18:95:13:1b:10:f4:51:9a:92:69:72:
         26:7f:5f:a1:31:e7:71:e4:68:51:a5:22:81:c8:d2:47:1a:9c:
         ad:95:b0:30:ba:c0:18:2a:17:1a:b1:5f:4e:1a:d5:53:05:8d:
         2d:3c:0e:25:9f:42:6f:2b:3a:56:b5:19:64:d5:b2:00:38:f9:
         71:72:64:9f:28:76:ba:ca:28:4c:4d:03:3a:18:e7:ba:51:7b:
         7c:2d:4a:75:12:cc:7c:09:e7:69:04:9b:91:c3:01:0c:0b:f5:
         f9:b0:bb:c6:2a:cd:b4:4b:b6:4b:58:e8:0c:d6:a5:6f:11:3e:
         45:be:d7:2b:59:00:bc:eb:1d:db:2f:44:26:c3:a0:3b:58:cd:
         98:4f:d0:c2:81:81:54:45:2d:33:c8:a1:28:5c:91:f4:06:58:
         ff:25:a0:ba:38:ef:e7:4e:b3:10:df:37:16:d5:10:bb:b9:11:
         be:45:91:5a:d2:5b:98:98:65:ff:70:05:2a:19:79:37:f5:6c:
         27:5a:db:49:92:01:32:f7:21:ef:3e:0e:a7:43:bb:90:6c:f5:
         69:59:1c:c1:ce:c6:a0:11:f8:5d:a9:7c:3c:bb:c7:04:20:c6:
         9f:97:f1:46:83:0e:28:b3:0b:63:fb:3a:27:65:44:01:38:18:
         55:04:98:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:13:53 2026 by rpki-client