Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ba8745fb-c8aa-376b-883e-8bb94db26966.roa
File:                     ba8745fb-c8aa-376b-883e-8bb94db26966.roa (raw, json)
Hash identifier:          B1IDcLF9UuBg14ah+k0arAGbIFeIoM8pXMmUg4TvdbQ=
Subject key identifier:   D7:AF:47:FE:51:B5:22:FA:12:45:65:6B:CA:EE:43:89:3A:AF:AB:BF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F612D6E1322494144F6361870
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ba8745fb-c8aa-376b-883e-8bb94db26966.roa
Signing time:             Sat 03 Oct 2026 13:00:13 +0000
ROA not before:           Sat 03 Oct 2026 13:00:13 +0000
ROA not after:            Fri 01 Jan 2027 14:00:13 +0000
asID:                     10753
IP address blocks:        23.230.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:61:2d:6e:13:22:49:41:44:f6:36:18:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 13:00:13 2026 GMT
            Not After : Jan  1 14:00:13 2027 GMT
        Subject: CN=817caecb-1d8c-4ffc-b174-1de7cd2b3830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:52:33:d7:74:f5:75:62:fe:48:ea:55:1f:e4:
                    01:c5:15:89:85:54:34:cc:0f:61:2e:d3:38:5e:72:
                    dc:50:1c:e5:e7:b7:e8:97:f0:ca:56:6c:e4:85:f6:
                    51:ed:cc:da:c3:e5:e3:cd:7a:c7:f0:3e:d5:84:ab:
                    84:e4:88:30:37:eb:ac:65:58:8b:e5:73:16:31:f2:
                    0d:d2:b4:ab:85:04:ac:09:b1:bb:4c:1b:bb:66:8d:
                    b0:13:cc:72:00:1d:76:82:8a:03:14:63:5f:ed:d9:
                    8d:7e:8b:0c:e8:d8:44:a5:b5:14:26:74:d2:2e:f5:
                    86:14:96:52:e5:ae:78:5f:a5:f3:ce:df:c0:70:78:
                    63:b3:e2:5f:59:b5:3f:c3:a3:43:73:ae:fb:ce:2b:
                    29:4f:ba:ea:6b:2d:df:a0:0c:5e:a8:3e:99:6e:d0:
                    2b:8d:ba:24:09:a4:3e:bf:95:ab:83:d0:5e:12:87:
                    d5:c1:87:e6:83:e0:53:ad:0f:f3:2a:fc:50:ca:d1:
                    ae:42:0d:8c:81:7d:c8:ea:c8:c2:3e:61:9f:1a:72:
                    df:79:7f:31:01:ea:8f:91:1b:b4:d9:68:44:2f:92:
                    d8:04:50:5d:38:45:a9:cb:51:6e:2f:05:28:f7:39:
                    06:d6:b2:b6:ce:4e:40:7c:4d:12:1a:91:3b:34:4c:
                    38:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AF:47:FE:51:B5:22:FA:12:45:65:6B:CA:EE:43:89:3A:AF:AB:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ba8745fb-c8aa-376b-883e-8bb94db26966.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:9d:d1:70:eb:7e:b7:fc:48:36:04:c9:fe:4e:6c:b6:da:a9:
         70:ee:73:31:b7:76:9e:76:64:07:7e:26:7a:74:fb:23:4d:e9:
         ed:3e:27:60:7d:18:3c:fb:04:0f:56:8b:cf:8b:1a:ef:b8:45:
         7b:22:65:e9:73:ca:bf:5a:d4:0d:aa:e1:d0:4a:1c:cb:32:db:
         43:e0:bb:1f:24:0d:04:81:ea:18:48:bb:f8:36:2b:2c:33:9f:
         10:b9:52:f7:88:44:63:e6:8f:e5:c1:52:49:9a:f9:13:d4:ab:
         e2:da:a7:d0:e4:f0:bb:6d:b3:07:2d:6a:9a:6d:60:58:5c:b8:
         d9:04:3c:fe:ee:ce:42:27:74:fb:f9:9e:c2:4d:eb:96:42:40:
         90:f7:46:85:43:c7:3c:10:c7:08:ce:fa:07:3b:ab:25:d0:9b:
         74:b4:77:b4:80:67:c8:e6:33:6a:86:58:5d:fd:14:f6:5a:b9:
         2a:4c:f8:04:1c:cb:89:91:65:5f:95:7d:7c:c7:56:75:18:71:
         e0:7f:c3:a7:6c:28:b0:59:95:c5:4c:3d:9b:37:21:33:af:d2:
         6e:48:c3:08:25:ef:98:74:bf:82:be:ac:71:22:e0:6b:73:90:
         1a:85:74:f7:25:ec:45:b0:37:09:b3:cf:f5:32:90:e9:5e:42:
         2a:85:ea:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:38:46 2026 by rpki-client