Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0d661fde-4620-3b2d-a598-5cbe54155895.roa
File:                     0d661fde-4620-3b2d-a598-5cbe54155895.roa (raw, json)
Hash identifier:          hj/EIQcu4ES6WSV58nb4cOJBsAiu+R0OiVqt3DSLTUE=
Subject key identifier:   67:33:CB:C7:1A:2E:78:36:8D:0B:33:EA:CC:AA:DE:E8:E8:1B:34:BD
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584ED1671B71208C9773A4476D80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0d661fde-4620-3b2d-a598-5cbe54155895.roa
Signing time:             Thu 13 Aug 2026 01:00:11 +0000
ROA not before:           Thu 13 Aug 2026 01:00:11 +0000
ROA not after:            Wed 11 Nov 2026 02:00:11 +0000
asID:                     212238
IP address blocks:        23.230.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d1:67:1b:71:20:8c:97:73:a4:47:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 13 01:00:11 2026 GMT
            Not After : Nov 11 02:00:11 2026 GMT
        Subject: CN=3c1286be-c46f-41cc-87c0-418544f3a8f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:da:95:d7:75:b5:ec:f2:35:80:5d:2a:fb:f0:
                    4f:89:69:db:54:21:1f:cc:d5:c6:bd:88:13:8c:29:
                    3b:3c:2c:22:5a:8c:be:eb:2c:88:3b:d8:eb:91:7b:
                    53:96:d3:36:1f:6d:26:0f:d0:d5:77:0b:ff:4f:ae:
                    89:1f:da:b8:4a:d4:54:98:a9:bc:9e:ff:16:c4:3d:
                    80:15:6d:fb:3f:83:3b:fd:97:6b:aa:cc:8b:f2:ad:
                    b1:e9:84:ca:ac:05:9f:2d:3c:b3:36:af:fb:84:43:
                    ee:53:05:22:b1:21:cc:bb:2b:30:54:4e:05:97:7d:
                    24:9e:b1:38:0f:6d:e5:3a:0e:56:5d:17:01:d6:2b:
                    de:13:86:16:f8:99:ef:cc:6e:1e:12:dc:d2:6c:bf:
                    4e:7b:f0:88:d8:c4:5e:e8:ef:6b:81:4f:44:75:07:
                    39:b4:99:c8:f2:44:3e:f4:7a:8c:c0:34:e0:b4:41:
                    81:8d:6d:c3:a6:21:82:66:ed:93:8b:4d:31:82:79:
                    ba:c7:ab:36:44:ab:d5:85:5c:58:97:7d:3a:05:ad:
                    c4:d1:cf:18:0c:ee:0c:13:55:a5:73:e2:6c:ee:76:
                    e8:f9:e3:a6:b3:5d:d4:f4:99:06:0c:cc:83:a6:e9:
                    8b:a4:bf:34:61:dd:95:3c:18:19:86:c6:b8:0b:c4:
                    a0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:33:CB:C7:1A:2E:78:36:8D:0B:33:EA:CC:AA:DE:E8:E8:1B:34:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0d661fde-4620-3b2d-a598-5cbe54155895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:c8:a7:ab:1d:20:15:89:3b:82:3e:56:33:8d:fd:64:b5:64:
         35:98:ac:33:61:11:76:7a:51:c8:32:f0:3a:d3:7b:49:ea:a2:
         14:d3:16:ad:f5:12:14:f2:cd:40:87:9f:1c:11:31:0d:e0:58:
         68:7d:02:45:1a:a2:5d:45:fb:83:fa:aa:e8:f4:26:a0:dd:06:
         e5:b3:60:98:31:d0:a2:f2:f2:bc:88:02:ba:1b:ab:d4:cb:08:
         ab:d9:ce:3a:ed:ba:87:88:6b:2d:52:37:88:ce:2c:6d:86:87:
         24:58:1d:2c:d1:70:d6:a7:a1:d0:36:9e:1b:0a:11:14:4b:5e:
         c7:28:7e:e3:5d:a6:a2:bc:5e:bd:b7:fb:03:89:fb:22:46:c3:
         81:8b:04:fe:b3:f4:99:5b:24:b7:52:22:82:17:04:7d:6a:55:
         8a:1d:8a:de:f0:ef:bd:df:ae:12:91:69:b9:bf:90:99:83:1b:
         9d:e1:df:2f:dd:23:fc:81:2b:ae:da:6b:f3:67:62:0b:55:c0:
         13:e1:f4:43:23:9c:42:1d:35:d6:5b:5c:ac:a0:52:74:55:e8:
         56:fa:af:84:81:c3:1a:2e:ce:24:f5:0c:4e:92:e0:b6:c7:23:
         26:ef:df:52:88:0d:05:f4:cf:6a:71:89:c6:48:57:e6:98:40:
         0b:f9:4f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 15:19:13 2026 by rpki-client