Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a532e83d-a890-3fcd-a6fd-0fedf7f8b5e7.roa
File:                     a532e83d-a890-3fcd-a6fd-0fedf7f8b5e7.roa (raw, json)
Hash identifier:          KOtQSqtuNCXKHJ6DuNUTZlcptOGGdxKxJe0hk/0FMoA=
Subject key identifier:   DE:82:54:51:D0:4A:89:FE:F4:41:AD:F2:3C:5B:89:17:B1:8E:CC:C6
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584E0436081CC0097657CF927200
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a532e83d-a890-3fcd-a6fd-0fedf7f8b5e7.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     834
IP address blocks:        23.230.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:08:1c:c0:09:76:57:cf:92:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=696e1cd3-adbb-4036-b8c0-9a5f0b3773a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:78:fe:48:5e:56:89:b3:7e:7f:f4:96:78:e7:
                    0f:0e:96:65:57:2f:26:73:80:91:44:3b:6d:72:fd:
                    ad:40:53:a1:e7:9c:f4:79:ba:0d:88:1c:c8:25:5d:
                    d9:b1:bb:07:b9:4f:97:7d:a2:41:d3:71:e5:87:76:
                    2e:7b:e8:41:e9:0f:9f:87:fb:e5:a5:81:ea:05:f3:
                    75:b9:de:55:15:dc:c1:5d:02:c2:3b:ac:72:d4:66:
                    b8:40:78:3c:23:1b:bb:58:fe:16:c7:25:c7:02:e1:
                    51:35:46:33:76:62:74:f9:39:c9:9b:7f:5d:d7:10:
                    9e:b5:cc:94:4a:f2:ff:a2:87:49:89:20:eb:c8:55:
                    a0:dc:d8:bc:95:83:a0:55:8f:ce:5d:2b:39:c2:b8:
                    91:d5:ec:c2:83:ca:eb:d0:e3:5c:0e:6d:5f:d6:46:
                    f2:ca:5c:0e:fa:db:7c:04:9c:16:d6:45:8c:22:85:
                    ec:60:76:25:8d:c0:d1:90:d5:20:bf:87:55:c0:71:
                    75:5f:60:8f:5f:2e:bf:52:f4:6f:ee:92:d8:1e:09:
                    e6:fd:4c:91:0f:64:fb:ca:17:c6:0f:aa:a0:bb:c0:
                    f2:55:6e:18:7e:56:c2:2e:fb:0d:14:37:14:99:65:
                    00:c9:15:06:f1:3a:97:f2:fd:94:de:21:f4:e1:e7:
                    bf:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:82:54:51:D0:4A:89:FE:F4:41:AD:F2:3C:5B:89:17:B1:8E:CC:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a532e83d-a890-3fcd-a6fd-0fedf7f8b5e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:a2:f1:b4:0b:8b:e5:91:b2:69:33:d0:c2:8e:87:1f:f2:3d:
         05:2f:cf:19:10:71:77:2c:fb:78:3e:94:a4:f5:8d:79:62:f3:
         7d:80:fb:a6:70:fb:b4:fe:b7:5b:42:dd:4b:4c:9b:9d:68:de:
         d9:e6:20:ce:9b:ab:52:17:91:55:a4:d2:d6:c3:bd:07:ac:2a:
         48:ba:72:cb:12:41:51:61:d3:a9:0e:66:3f:e6:f0:de:24:44:
         e3:09:76:9f:01:91:39:5a:f6:2e:f8:23:d9:2c:77:b8:47:ec:
         52:49:3f:6a:57:54:36:1b:45:c6:0e:64:66:ea:ae:93:04:29:
         79:0c:63:09:af:b8:b9:c1:aa:87:10:58:2f:ba:69:18:70:95:
         6d:59:47:ba:13:2a:91:62:81:8e:80:a7:6d:6f:b2:c5:b0:15:
         c8:02:90:73:a2:d8:5c:01:90:53:d5:b0:e6:e4:3f:16:95:64:
         fc:7a:a5:41:30:98:5e:fa:59:16:a2:50:8f:e0:e0:77:e0:dc:
         ec:f9:90:cd:5f:56:ba:49:e1:35:87:f2:58:fa:36:41:5c:e9:
         28:79:64:b8:f2:2d:45:b1:15:c3:68:76:6b:91:b0:3a:f2:03:
         28:11:9b:ed:0b:e9:86:41:d0:90:8f:d1:3c:46:6b:61:8b:24:
         09:b5:e3:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENggcwAl2V8+ScgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk
Njk2ZTFjZDMtYWRiYi00MDM2LWI4YzAtOWE1ZjBiMzc3M2E1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHj+SF5WibN+f/SWeOcPDpZlVy8mc4CRRDtt
cv2tQFOh55z0eboNiBzIJV3ZsbsHuU+XfaJB03Hlh3Yue+hB6Q+fh/vlpYHqBfN1
ud5VFdzBXQLCO6xy1Ga4QHg8Ixu7WP4WxyXHAuFRNUYzdmJ0+TnJm39d1xCetcyU
SvL/oodJiSDryFWg3Ni8lYOgVY/OXSs5wriR1ezCg8rr0ONcDm1f1kbyylwO+tt8
BJwW1kWMIoXsYHYljcDRkNUgv4dVwHF1X2CPXy6/UvRv7pLYHgnm/UyRD2T7yhfG
D6qgu8DyVW4YflbCLvsNFDcUmWUAyRUG8TqX8v2U3iH04ee/9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN6CVFHQSon+9EGt8jxbiRexjszGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTUzMmU4M2QtYTg5MC0z
ZmNkLWE2ZmQtMGZlZGY3ZjhiNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+afMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADii8bQLi+WRsmkz0MKOhx/yPQUvzxkQcXcs+3g+lKT1jXli832A+6Zw
+7T+t1tC3UtMm51o3tnmIM6bq1IXkVWk0tbDvQesKki6cssSQVFh06kOZj/m8N4k
ROMJdp8BkTla9i74I9ksd7hH7FJJP2pXVDYbRcYOZGbqrpMEKXkMYwmvuLnBqocQ
WC+6aRhwlW1ZR7oTKpFigY6Ap21vssWwFcgCkHOi2FwBkFPVsObkPxaVZPx6pUEw
mF76WRaiUI/g4Hfg3Oz5kM1fVrpJ4TWH8lj6NkFc6Sh5ZLjyLUWxFcNodmuRsDry
AygRm+0L6YZB0JCP0TxGa2GLJAm141w=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:28:30 2026 by rpki-client