Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e870243e-2bab-3b14-90c6-3b50ee649216.roa
File:                     e870243e-2bab-3b14-90c6-3b50ee649216.roa (raw, json)
Hash identifier:          ImHnL3vm0im9kpuUmAGpPAH+8LVeZItpcy9hdhI9omo=
Subject key identifier:   EF:70:60:16:FC:9A:F0:E6:54:B4:AD:83:B8:34:2C:C1:CA:01:DA:C5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584CFDEAA8EE57D2B50B902B42C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e870243e-2bab-3b14-90c6-3b50ee649216.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     18779
IP address blocks:        23.230.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:ea:a8:ee:57:d2:b5:0b:90:2b:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=8428cd5d-08c3-4bee-a7f1-a0bfa31ea6a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f3:85:c6:83:92:64:c4:3c:70:4e:3a:6b:75:
                    6f:84:ad:a7:80:d8:bf:f2:76:a0:b3:7c:65:e7:8f:
                    71:24:a3:9a:f9:32:44:74:5d:cd:e7:cc:61:36:a7:
                    1d:89:63:6e:ce:af:c0:42:bc:de:a1:d0:a4:9c:08:
                    85:9c:0e:92:b1:46:65:49:09:5e:8d:91:f5:13:9d:
                    f0:8a:e4:15:44:24:49:79:f3:0c:a4:84:ce:86:a3:
                    6b:0c:b7:66:76:d7:b4:e3:3d:95:8f:6f:e9:87:bd:
                    5d:83:ac:a0:e4:f3:64:ad:0c:fd:38:1f:ab:c7:85:
                    04:2f:fd:54:71:bf:31:89:32:27:d8:c5:69:22:8f:
                    e9:a2:89:e8:83:9e:e0:41:59:e8:97:86:4f:4f:70:
                    2a:48:2f:b8:f4:27:e8:3c:40:c2:e4:c8:de:b3:9f:
                    d3:e5:e3:21:55:be:f4:1f:ac:08:7e:29:92:0f:20:
                    1b:5d:33:5a:97:1a:ad:a8:ee:5a:5e:d5:f0:3f:a3:
                    3d:9d:06:ff:e9:02:00:6a:86:b7:b1:77:70:79:4d:
                    5f:77:97:96:03:63:1b:f6:f1:7e:ff:37:03:78:4e:
                    a1:b8:83:54:cf:0e:bf:66:8c:93:b9:cb:01:d6:db:
                    95:74:dd:c5:94:21:a9:f0:23:87:28:8d:a8:6a:4e:
                    e0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:70:60:16:FC:9A:F0:E6:54:B4:AD:83:B8:34:2C:C1:CA:01:DA:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e870243e-2bab-3b14-90c6-3b50ee649216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:c5:1a:3c:88:3d:4f:58:e8:ab:07:0c:d6:a0:4c:4c:9b:e8:
         d7:79:65:25:a7:67:7c:fa:cd:04:ee:a1:3e:55:f0:64:fb:d1:
         1a:27:c6:5a:cf:aa:7c:1d:2c:55:bc:b7:7a:00:f6:70:f2:63:
         d7:32:99:a5:0c:3b:db:3c:18:20:c4:36:d6:4b:a5:6d:0a:9b:
         f1:8a:e9:5f:25:dd:50:c6:9e:1e:bd:98:88:7c:f7:f1:0c:68:
         88:58:cb:36:fb:9b:fd:65:6e:f8:1b:8d:7a:f6:4c:84:b8:8d:
         28:3a:e1:4b:f6:95:ec:45:4c:aa:bc:1b:ee:ef:b6:28:75:75:
         75:73:75:ee:21:a1:d1:64:ba:dd:a0:0d:4f:d0:ca:10:e1:7d:
         9b:1a:39:bb:4f:95:09:f5:7f:39:3f:b3:c0:7e:c8:3e:80:33:
         d8:bf:cb:14:d6:1f:8b:34:fe:71:90:68:59:fc:fe:27:13:11:
         1a:fb:81:4a:e4:24:04:fb:cc:50:2f:dc:d1:2f:b3:eb:6d:34:
         56:ff:bd:c4:f7:a6:a0:2c:54:e3:44:00:ae:aa:74:6e:57:b4:
         1f:74:19:91:5d:58:7e:7d:4a:0b:45:59:82:ed:af:50:56:ee:
         34:3d:5a:05:1d:76:bf:a8:06:e7:af:b6:77:cc:e3:27:10:0b:
         ff:25:53:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:22:22 2026 by rpki-client