Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/048d353c-f077-3d08-8b04-0b0c569f4fb1.roa
File:                     048d353c-f077-3d08-8b04-0b0c569f4fb1.roa (raw, json)
Hash identifier:          fXEsQ+ByaHH4rXOPGb1jrk3PKEugoi5E27NtOjqjIiw=
Subject key identifier:   0D:3A:40:DC:3F:CE:C6:7F:BC:27:FF:E5:9E:74:93:37:7C:E9:3B:69
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584E059C6E0FFD9A4C86ACEAA460
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/048d353c-f077-3d08-8b04-0b0c569f4fb1.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     44559
IP address blocks:        23.230.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:6e:0f:fd:9a:4c:86:ac:ea:a4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=b2226383-9ab4-4960-b939-54967a4b01c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9a:29:b8:8a:fd:8a:7a:d6:6e:2c:58:ee:fe:
                    43:b6:1a:d6:d3:9d:8d:70:d3:96:31:29:22:de:70:
                    c5:17:86:df:01:cc:c3:04:46:21:87:4d:45:07:7a:
                    35:d1:f6:28:e4:47:57:10:49:c0:38:1c:f2:92:b0:
                    af:4c:ee:92:b4:f8:0b:a3:31:a3:44:0e:bb:9c:c1:
                    78:22:1c:d9:dd:4e:66:28:41:08:f3:a9:72:bc:13:
                    75:12:0e:9d:b0:7e:12:f0:14:1f:ec:5c:00:49:8c:
                    c2:20:6b:fa:97:6a:d9:e9:82:69:e2:3f:4d:b3:40:
                    e2:b8:ff:c3:73:6b:43:e3:fc:5f:44:b1:83:b1:cc:
                    9f:48:9b:45:55:ed:29:8d:47:cc:10:97:0c:f5:57:
                    e0:82:9b:6e:13:66:e4:87:e2:b7:af:1f:13:85:76:
                    30:35:97:a6:55:9e:dc:8a:e0:a9:8a:8b:f5:b4:86:
                    8b:07:d7:70:c4:4b:64:61:6e:77:44:ee:dc:07:9b:
                    90:cd:bc:39:ec:10:80:81:81:5d:56:ea:ff:f6:94:
                    97:95:6f:3f:75:2a:f3:64:35:17:16:54:a6:bf:81:
                    33:3e:01:2f:da:ec:0c:46:39:2f:f1:00:fe:99:e5:
                    2e:de:0d:d3:b7:3b:0b:b5:dd:0e:01:aa:39:0e:b2:
                    ad:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3A:40:DC:3F:CE:C6:7F:BC:27:FF:E5:9E:74:93:37:7C:E9:3B:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/048d353c-f077-3d08-8b04-0b0c569f4fb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:a1:6a:3e:a7:48:d9:e7:4d:c0:84:8e:9f:50:69:3e:ec:26:
         14:27:01:6c:db:4b:91:8b:40:66:1e:d2:b3:58:b4:1e:06:57:
         5e:c5:30:12:2b:71:71:7e:0d:c3:1e:1f:cd:1f:c9:b2:4a:f3:
         3b:ee:e8:7c:56:ab:11:fe:35:1d:df:fd:e3:bb:ae:1f:40:dc:
         d1:53:67:fd:da:7f:8e:69:6a:60:5d:64:4b:dd:b8:51:48:69:
         b1:31:2b:b8:ca:95:6a:7f:62:cc:ff:8b:7c:5b:f9:33:ee:3a:
         10:0f:5a:30:e1:79:bd:35:e4:6b:76:f1:c2:c8:e7:1e:6b:ec:
         04:31:64:c5:63:7d:4d:bd:05:4e:ac:76:dd:db:72:97:6a:db:
         10:a2:b7:37:a4:29:43:8d:1b:51:69:da:b0:93:90:b6:12:5a:
         c9:3f:32:fb:69:41:fe:82:2f:ed:f3:55:9a:6b:f7:49:7f:d0:
         56:a0:dc:61:d9:ce:16:93:07:d6:98:21:88:7a:d6:a9:c4:33:
         b8:9b:4b:a0:9f:36:b8:a8:c3:96:9b:51:d8:5e:6a:6e:fe:65:
         47:10:7e:fb:75:23:f7:08:d8:fd:5c:53:9e:f7:64:ba:fa:29:
         9a:39:52:7b:7c:2c:9a:10:75:c2:55:ad:f7:2c:11:f9:b3:1e:
         ad:57:72:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:40:17 2026 by rpki-client