Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/87ced2e8-80b0-386f-bbc4-78f4e790f653.roa
File:                     87ced2e8-80b0-386f-bbc4-78f4e790f653.roa (raw, json)
Hash identifier:          0aanbY+guLehhm2RexLHT5Cfn5yz3UKvAcNZtEWGdkA=
Subject key identifier:   66:32:91:56:0C:D7:48:A3:98:EB:C5:22:A8:9F:7E:66:BC:E2:09:57
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F63F80A4B45E4306ABA68F0C8
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/87ced2e8-80b0-386f-bbc4-78f4e790f653.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     5511
IP address blocks:        23.230.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:0a:4b:45:e4:30:6a:ba:68:f0:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=135d0aea-2274-44c0-ba6d-16a87cfb704e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c0:64:8d:4f:f2:f2:65:97:18:bb:d9:72:7b:
                    9a:74:6a:d7:31:92:5f:7e:d3:02:cc:ee:69:5a:13:
                    a0:f8:ba:e7:fe:50:08:ac:cf:69:15:ee:58:7f:13:
                    ac:c2:c7:ec:28:34:e4:71:f5:f3:2d:c9:e0:8f:57:
                    00:62:3e:27:f7:c3:bd:fa:13:b1:cf:dc:0e:43:06:
                    f7:80:63:0d:2d:ca:9f:38:d8:a3:6c:03:4d:98:50:
                    c1:4c:31:32:ab:16:d7:a7:62:95:31:6e:4c:2b:8e:
                    18:e7:82:d1:b7:16:3b:03:af:20:8b:5b:3b:af:a6:
                    e7:9e:31:20:d6:fe:7f:2f:6c:c5:99:08:2f:16:e2:
                    06:f1:16:31:65:82:73:cf:84:13:1b:0a:dd:4b:13:
                    79:20:ae:f1:b4:15:d6:53:f9:f1:b3:8e:0b:f9:63:
                    d7:b0:a3:4a:73:77:42:41:42:93:d0:22:19:aa:9d:
                    68:99:8b:05:ec:0a:1a:91:90:e7:96:db:35:7c:df:
                    7f:72:69:d0:47:74:0d:bc:bb:98:5c:79:8d:66:f0:
                    c1:a0:5f:e1:b4:98:e5:67:08:4e:3a:39:e9:36:27:
                    d8:a2:48:ff:20:5e:4a:c1:a0:4d:04:de:7f:69:32:
                    d4:e2:96:b0:9c:42:e1:7a:2e:ae:18:33:11:c8:20:
                    52:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:32:91:56:0C:D7:48:A3:98:EB:C5:22:A8:9F:7E:66:BC:E2:09:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/87ced2e8-80b0-386f-bbc4-78f4e790f653.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:61:b0:59:9a:ab:d4:1d:4f:6c:a7:74:77:93:b6:0f:86:dd:
         c5:8c:a0:ab:0c:0c:5d:81:ae:e5:82:e8:a2:9b:5e:1e:56:8d:
         fe:78:29:b9:f6:c4:75:82:79:15:36:60:85:29:f7:de:03:f7:
         3f:92:74:31:9c:d9:db:98:af:b4:49:be:b1:4f:f8:8d:e0:25:
         b7:92:85:6a:7a:d6:be:a6:c9:3f:5b:4c:d9:5f:2b:20:57:43:
         17:87:07:7f:22:d8:a0:c6:1e:88:b9:cb:20:9e:36:50:4e:19:
         54:3d:a0:a7:9e:20:74:a1:28:64:b9:52:5b:ed:a2:1d:d2:13:
         ea:ed:89:e2:64:ba:4b:7a:5e:f8:b5:d3:ed:d8:2d:57:1a:3c:
         70:38:b0:dd:c1:3e:3e:89:97:9d:91:ca:6d:c7:81:db:cf:09:
         cd:76:b3:d5:dd:61:b5:b4:e1:c9:c2:d2:4a:cb:c3:d8:d9:da:
         52:04:90:e4:ac:4b:40:e6:bb:1c:70:a2:81:c4:1b:9e:8f:f3:
         2a:1c:4b:fb:5e:de:61:89:45:b4:b7:13:4c:11:79:4d:99:e3:
         b0:7b:cf:38:4b:ca:0a:c5:f3:95:02:b0:96:95:e6:9d:c7:89:
         de:78:1b:14:02:a4:4d:b2:66:ba:81:ce:d6:86:ce:2d:08:6f:
         72:21:b4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:26:44 2026 by rpki-client