Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aa4df39f-11b3-31d7-ad69-dc7aac99a91a.roa
File:                     aa4df39f-11b3-31d7-ad69-dc7aac99a91a.roa (raw, json)
Hash identifier:          9H+jMEikKeAQRfsd93naaxef6mwY771o9hCLpenbbz8=
Subject key identifier:   D5:A5:05:79:3A:77:0C:04:A1:DB:2B:C8:8C:D6:A7:48:FA:76:53:CB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F497540AF937E98F8263536C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aa4df39f-11b3-31d7-ad69-dc7aac99a91a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     834
IP address blocks:        23.230.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:40:af:93:7e:98:f8:26:35:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a77734b0-cb57-473a-a965-b74bbc03b33e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6b:ba:68:0f:42:de:42:50:00:72:1a:0f:50:
                    73:54:64:76:6b:8e:7a:1c:ab:d3:51:17:c0:15:d9:
                    6b:58:b4:3d:7d:73:68:3b:a9:cc:0e:18:11:15:f5:
                    31:0b:e9:6e:a5:71:66:98:1b:60:e7:54:2f:44:8b:
                    7a:eb:eb:c9:de:4e:fe:f7:0f:0a:89:56:c5:67:9d:
                    99:5e:1e:80:47:40:82:14:36:9a:b5:73:da:89:a0:
                    30:81:2a:e2:44:41:74:b5:70:c7:ac:4a:f0:ba:2c:
                    5d:f1:46:60:5d:3e:3f:0c:27:c6:e8:bf:e3:5b:84:
                    c9:04:1d:e4:c0:b6:3f:0a:3d:23:cd:3a:15:c0:7b:
                    8f:b2:d1:15:6a:43:4b:24:65:bf:07:d0:0d:bf:0c:
                    b7:8e:ac:75:af:3a:d6:c2:eb:bf:d9:6c:f4:d8:5d:
                    fc:82:70:be:52:78:31:8d:e3:1d:3c:86:4b:8f:93:
                    ed:25:08:f1:79:ec:e5:6e:13:ea:81:b5:c7:fe:5d:
                    23:80:b0:71:a6:38:ba:0a:a8:ea:2a:d9:09:99:e3:
                    67:8d:8c:67:4c:51:64:03:71:90:aa:14:3e:fc:69:
                    f0:a9:5d:b3:e9:c4:5d:80:c7:d9:b4:71:90:81:1a:
                    65:0f:e8:81:bc:68:a3:6a:77:90:5e:69:9c:29:f4:
                    0e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A5:05:79:3A:77:0C:04:A1:DB:2B:C8:8C:D6:A7:48:FA:76:53:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aa4df39f-11b3-31d7-ad69-dc7aac99a91a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:4d:4e:2b:45:19:71:71:59:94:58:63:80:9f:16:e1:26:5f:
         74:b1:f2:82:cf:ef:22:d9:5b:9f:69:16:8c:69:1a:44:27:c6:
         58:47:e4:01:a8:92:ca:87:2e:44:dd:7e:61:8d:48:f4:d8:f8:
         64:2f:1b:d1:48:61:6d:2f:75:d7:ca:15:25:37:f2:e0:8f:5b:
         f7:17:d1:35:6d:d5:f7:1e:20:f0:3d:32:0b:30:67:44:c1:14:
         73:f4:9e:f4:fe:2c:a9:a2:c6:a6:2e:20:d2:1d:22:f5:3f:7e:
         83:b5:05:f4:a3:28:d0:ab:ed:a3:91:c3:bc:c6:49:4a:81:d1:
         08:25:8b:11:36:ec:95:d8:27:ac:9f:1c:e1:82:3a:fc:79:bd:
         f6:d6:9b:9a:59:a0:d9:4b:b6:1d:07:14:99:cf:df:b2:cb:f8:
         d4:39:84:03:46:10:bd:89:7e:87:eb:5b:c6:50:95:94:bc:e9:
         da:1b:3a:af:95:8c:86:29:1d:c5:b2:c3:67:eb:71:7a:46:cd:
         08:b3:43:b5:5a:4f:80:52:17:1f:98:43:96:ac:b8:6c:fb:b8:
         a9:c0:25:ed:2e:bf:b7:54:f7:3d:3d:33:0c:11:fa:06:da:30:
         cc:0c:c0:b0:44:23:14:dd:12:0d:ec:b6:9d:8d:4d:2d:34:31:
         c8:00:da:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:34:11 2026 by rpki-client