Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ca0309a2-2056-3a38-9c9a-520c49973c41.roa
File:                     ca0309a2-2056-3a38-9c9a-520c49973c41.roa (raw, json)
Hash identifier:          9LrD3eJFEcQnoHDrkkkJuYB1qPINMfYhHDokNtFRimc=
Subject key identifier:   4B:57:18:3E:D5:73:B3:84:F1:82:B7:EB:24:15:63:15:57:D4:1F:D3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584CEE8CDFBDCE102C225703F280
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ca0309a2-2056-3a38-9c9a-520c49973c41.roa
Signing time:             Sat 21 Feb 2026 02:00:32 +0000
ROA not before:           Sat 21 Feb 2026 02:00:32 +0000
ROA not after:            Fri 22 May 2026 01:00:32 +0000
asID:                     214238
IP address blocks:        23.230.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ee:8c:df:bd:ce:10:2c:22:57:03:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 21 02:00:32 2026 GMT
            Not After : May 22 01:00:32 2026 GMT
        Subject: CN=3fd6ee79-ba8d-4d05-b0d2-2ff6ab36cfaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:18:6c:a5:0a:38:7d:f2:29:ea:9f:9d:7b:16:
                    86:5e:4a:b1:eb:fe:72:40:9f:8b:aa:0b:e3:2c:af:
                    53:fd:a3:8e:3f:cc:e0:25:ac:6b:36:d4:fb:f0:0c:
                    a4:3e:b6:09:75:95:ba:15:b8:a1:57:0d:c4:31:a3:
                    2b:3d:39:56:4e:6a:2b:f9:83:e9:44:32:ca:09:ae:
                    d2:41:ad:6d:16:8e:7b:90:db:7e:a9:87:4f:f0:85:
                    bc:30:3d:ec:76:49:91:73:f5:02:84:f1:4e:b8:cd:
                    ea:7d:9d:fb:9a:19:20:66:7f:2f:af:96:ca:b3:27:
                    09:24:b0:39:38:0b:97:94:ac:35:9e:41:58:4e:82:
                    e8:ea:ca:50:49:82:31:3f:bd:41:c8:6f:e8:5b:90:
                    e2:58:f8:12:0a:5f:4a:a8:ab:2c:6d:fc:6c:f0:56:
                    25:ed:ed:4e:8f:3a:c6:08:cb:c0:6b:12:c6:66:6a:
                    fc:14:4c:5e:fa:82:cc:dd:3a:12:8d:01:8d:95:a8:
                    87:d7:76:61:97:79:b1:d9:7e:81:4d:61:b8:09:87:
                    42:ee:5e:3f:63:3e:b4:4c:18:7e:6a:8e:f0:08:10:
                    3d:44:11:d7:a0:78:d9:96:71:52:f4:9c:9a:5f:ac:
                    0e:03:0e:64:f9:c3:4c:04:57:bb:8a:2d:83:2f:de:
                    72:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:57:18:3E:D5:73:B3:84:F1:82:B7:EB:24:15:63:15:57:D4:1F:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ca0309a2-2056-3a38-9c9a-520c49973c41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:78:e0:15:5d:c9:6b:a5:79:3c:30:fc:e2:dc:ec:30:9d:7d:
         79:33:fb:20:f7:b2:82:83:e0:41:46:93:d5:b7:8d:84:93:03:
         3f:25:a0:0a:44:3a:a0:22:4d:51:67:b3:6c:b3:54:47:7e:be:
         67:a8:02:1f:47:03:d2:18:e4:08:d1:80:d2:e1:2f:ca:a7:b8:
         a0:44:0b:f4:15:c4:df:f5:c8:a3:5b:32:1d:35:a3:e5:c8:d7:
         4b:42:de:f9:f0:f2:7d:80:5a:84:41:76:b6:d4:60:45:bc:c1:
         87:03:6d:a8:3b:73:5f:e5:32:09:50:86:a3:34:5e:b4:8f:77:
         66:6b:5b:fd:5e:6f:4f:11:6d:1f:b9:e2:2d:a8:1d:7c:0e:4a:
         92:a3:9e:54:0d:06:39:3e:d6:23:8f:d0:7a:2a:f7:b2:e7:90:
         dc:32:28:08:c7:8c:19:bd:55:73:b6:7b:1d:d2:ec:e8:3c:3f:
         85:b6:05:58:d3:e3:ec:c9:e7:0c:1c:ac:cc:6f:ee:4a:88:f3:
         47:fb:a5:94:22:3d:f3:8c:66:80:2d:74:18:0a:10:cd:05:d4:
         9d:8d:18:b0:04:68:2d:90:2f:c1:3b:4d:65:f0:24:95:4e:89:
         d1:62:42:b5:5c:f9:77:fa:f1:9f:41:38:0d:46:1f:70:51:2f:
         ed:59:55:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzujN+9zhAsIlcD8oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDIyMTAyMDAzMloXDTI2MDUyMjAxMDAzMlowLzEtMCsGA1UEAxMk
M2ZkNmVlNzktYmE4ZC00ZDA1LWIwZDItMmZmNmFiMzZjZmFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxhspQo4ffIp6p+dexaGXkqx6/5yQJ+Lqgvj
LK9T/aOOP8zgJaxrNtT78AykPrYJdZW6FbihVw3EMaMrPTlWTmor+YPpRDLKCa7S
Qa1tFo57kNt+qYdP8IW8MD3sdkmRc/UChPFOuM3qfZ37mhkgZn8vr5bKsycJJLA5
OAuXlKw1nkFYToLo6spQSYIxP71ByG/oW5DiWPgSCl9KqKssbfxs8FYl7e1OjzrG
CMvAaxLGZmr8FExe+oLM3ToSjQGNlaiH13Zhl3mx2X6BTWG4CYdC7l4/Yz60TBh+
ao7wCBA9RBHXoHjZlnFS9JyaX6wOAw5k+cNMBFe7ii2DL95yFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEtXGD7Vc7OE8YK36yQVYxVX1B/TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvY2EwMzA5YTItMjA1Ni0z
YTM4LTljOWEtNTIwYzQ5OTczYzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+ZIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIt44BVdyWuleTww/OLc7DCdfXkz+yD3soKD4EFGk9W3jYSTAz8loApE
OqAiTVFns2yzVEd+vmeoAh9HA9IY5AjRgNLhL8qnuKBEC/QVxN/1yKNbMh01o+XI
10tC3vnw8n2AWoRBdrbUYEW8wYcDbag7c1/lMglQhqM0XrSPd2ZrW/1eb08RbR+5
4i2oHXwOSpKjnlQNBjk+1iOP0Hoq97LnkNwyKAjHjBm9VXO2ex3S7Og8P4W2BVjT
4+zJ5wwcrMxv7kqI80f7pZQiPfOMZoAtdBgKEM0F1J2NGLAEaC2QL8E7TWXwJJVO
idFiQrVc+Xf68Z9BOA1GH3BRL+1ZVUM=
-----END CERTIFICATE-----
Generated at Sun Mar 1 19:24:55 2026 by rpki-client