Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/19892251-533e-39f7-9f25-79f4849a9018.roa
File:                     19892251-533e-39f7-9f25-79f4849a9018.roa (raw, json)
Hash identifier:          QsJ5YpiHAIyZDD3JXu65oJXxKrvuT9zYNRhwHo2mLPU=
Subject key identifier:   40:32:89:90:03:47:E6:BB:96:5F:B0:A9:91:B0:74:B8:3F:88:13:A4
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584E0D84325C101E6E69FF75F400
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/19892251-533e-39f7-9f25-79f4849a9018.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     11404
IP address blocks:        23.230.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:32:5c:10:1e:6e:69:ff:75:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=fb8df34d-86af-489b-8321-34f24bb3f19a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:68:88:17:8d:02:a9:7b:84:59:f7:ef:bf:48:
                    4f:ce:1a:36:75:d8:3f:ae:fd:8b:8c:1b:c6:74:71:
                    e9:a9:81:e3:35:85:11:f0:08:ed:12:cb:82:5e:00:
                    3c:c3:39:60:f0:d6:4d:95:f4:d9:0f:fe:a8:d4:1a:
                    47:d6:70:a2:85:39:17:1a:aa:a1:4f:f9:9a:fb:ee:
                    6d:45:63:66:59:56:e9:e9:9c:e5:5c:5f:64:2b:f2:
                    de:1f:3e:31:a3:cd:01:f6:67:42:7d:c0:23:60:97:
                    10:6c:46:af:46:52:59:3c:d8:be:da:55:02:d7:5d:
                    54:05:25:5f:a0:7c:61:36:75:17:d9:16:7e:95:d5:
                    fe:d0:10:74:a0:25:7e:07:5f:3c:f5:f8:08:99:2a:
                    e4:ba:ea:45:cb:eb:28:23:de:f4:14:24:4c:4f:45:
                    1a:85:f9:6b:1a:5d:50:4d:47:7c:18:10:bd:72:ab:
                    19:8f:5d:50:37:f0:d3:6e:4b:0a:00:6d:8f:31:4d:
                    75:e0:54:e7:72:8f:b3:d6:6c:f6:85:a6:60:38:ba:
                    42:cf:b1:cd:f1:6e:95:f4:93:6f:44:7b:02:86:2e:
                    d2:93:7a:fc:71:15:b7:bf:0f:f1:fe:5c:10:af:61:
                    81:6f:ac:18:a9:fa:d6:68:4d:83:b0:50:67:67:72:
                    cd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:32:89:90:03:47:E6:BB:96:5F:B0:A9:91:B0:74:B8:3F:88:13:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/19892251-533e-39f7-9f25-79f4849a9018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:fb:1e:e4:09:74:7f:13:8e:33:a2:46:67:82:ec:98:9e:38:
         e0:d6:a4:ff:30:c7:b5:ef:82:10:4f:40:51:70:ba:b3:f5:e8:
         e0:e8:67:22:c0:e0:96:98:d6:ec:ea:30:0b:73:be:a4:40:d2:
         34:70:8a:92:4c:a6:ff:7e:cf:b5:16:36:f0:0c:e6:dd:b0:87:
         47:39:12:82:40:48:68:33:de:d7:84:c2:ba:ad:e9:b1:14:20:
         7b:98:d3:47:0f:a4:39:50:ec:55:6e:93:ad:34:c5:82:54:6e:
         05:6a:de:58:71:5f:b7:75:d8:9f:26:29:a6:f7:72:0d:52:e2:
         9a:64:3c:97:bf:91:c4:13:f0:c9:a1:b8:ec:c6:7a:95:ee:80:
         10:c8:72:f8:ce:27:14:f1:01:42:d1:75:f9:fc:64:d0:20:49:
         92:5e:bb:43:19:ab:8a:b1:ad:00:00:fd:00:c5:f3:5a:5a:b6:
         ae:3c:da:00:5c:75:9e:56:7d:ae:bb:4d:9a:e7:2a:d7:12:01:
         d1:ea:a3:4c:f5:5b:ab:af:a3:15:e3:7b:e0:b6:1d:e4:e6:4b:
         c0:3c:61:e3:1c:20:57:7b:7e:29:9c:0a:4d:b2:bf:0e:3f:ed:
         45:7b:0a:a4:8e:27:2b:06:96:0b:e2:0e:99:7e:c9:78:85:df:
         a4:9a:66:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:18:23 2026 by rpki-client