Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aa4df39f-11b3-31d7-ad69-dc7aac99a91a.roa
File:                     aa4df39f-11b3-31d7-ad69-dc7aac99a91a.roa (raw, json)
Hash identifier:          sv+wnZtaRWv9ppc+WzyxiboIMtr5+CMpIq/xpgSPUuE=
Subject key identifier:   10:4A:74:95:C9:83:71:3B:53:D0:D7:B4:84:C5:F0:08:16:73:3E:68
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584E043604BEC82439B606691600
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aa4df39f-11b3-31d7-ad69-dc7aac99a91a.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     834
IP address blocks:        23.230.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:04:be:c8:24:39:b6:06:69:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=fb2d899c-545a-4ec0-af38-964a28ea87cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cd:74:36:9d:05:04:99:55:e9:02:42:4f:16:
                    09:ed:9f:1e:cd:72:31:66:ca:e8:f6:4d:15:f2:09:
                    80:6b:18:39:4c:3b:d7:0e:61:64:0d:fb:0c:81:d6:
                    50:d1:7b:5b:16:60:54:e8:77:07:1b:d6:3b:93:90:
                    7d:68:5f:73:df:11:78:07:d0:1f:75:90:32:2f:15:
                    67:ce:03:eb:02:89:10:88:4b:42:f7:71:6b:4b:95:
                    ed:15:00:bc:d2:fc:b0:ff:fc:59:27:96:c8:c8:32:
                    01:bc:86:71:e0:d1:29:16:8d:a8:c9:30:c9:53:27:
                    2e:c4:24:16:e2:f3:e3:a7:67:9e:bd:7a:6a:55:52:
                    51:35:b5:7a:bf:e0:66:80:00:d4:cd:ab:90:d4:c6:
                    02:55:8e:fe:61:c1:b0:be:0a:e6:6e:22:4a:8c:b3:
                    b8:d9:d9:d9:a3:81:bb:52:10:d6:3f:b4:00:b9:0b:
                    00:92:43:23:02:04:42:3a:9d:b9:df:1f:93:ba:1a:
                    cb:d4:3a:7e:78:8d:12:c8:48:3d:33:f0:71:b8:7c:
                    0b:b0:25:02:52:ec:e8:80:90:8f:93:0c:ad:e6:5b:
                    73:42:43:e5:6e:e4:d5:7a:c1:50:09:53:61:c4:1f:
                    53:34:f7:22:3d:e0:49:36:78:3c:8b:d7:55:b0:41:
                    f4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4A:74:95:C9:83:71:3B:53:D0:D7:B4:84:C5:F0:08:16:73:3E:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aa4df39f-11b3-31d7-ad69-dc7aac99a91a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:4f:b0:c4:fe:25:9c:ca:85:21:25:14:b0:bd:02:40:d7:e2:
         39:3e:58:1e:ed:60:e3:70:97:29:bb:e4:74:3d:2e:d6:ce:36:
         39:72:2f:3e:d7:19:5c:1c:6e:30:0e:81:db:ce:79:3d:34:1f:
         c0:98:7a:c5:d1:87:08:87:b2:1a:fc:e6:47:d5:e0:a8:bb:22:
         27:b6:1e:8f:25:da:bd:32:03:17:f1:eb:72:46:e4:ce:c8:03:
         25:f1:ca:1d:4c:e1:7b:5d:00:1e:52:39:ba:46:93:03:89:a6:
         30:e6:39:50:f2:33:d3:9a:6e:e9:c5:8d:7a:dd:61:ad:a2:ef:
         c1:d4:e7:ed:90:de:be:2a:b7:09:c9:7d:e0:be:56:b8:03:8f:
         40:0c:5c:d0:12:87:37:b9:91:67:e5:83:b3:b9:6d:6f:33:c1:
         fb:36:5a:9f:35:0d:db:7b:2a:5a:07:b5:a0:93:da:68:80:61:
         65:ea:a4:5f:b7:38:ae:c0:d0:5d:7e:58:27:b3:b0:f9:66:01:
         3f:c1:3e:ab:9e:14:0b:b6:13:af:c7:72:f6:58:87:5e:69:72:
         28:5c:20:85:0e:21:b1:34:47:ab:2a:89:2e:7a:66:94:07:e0:
         f3:f3:40:d1:9c:a3:60:37:3c:d8:2f:8e:1d:a0:91:21:f9:d3:
         24:94:a8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:24:40 2026 by rpki-client