Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/17cc51d9-74bd-3bd2-873c-f68847c1bc77.roa
File:                     17cc51d9-74bd-3bd2-873c-f68847c1bc77.roa (raw, json)
Hash identifier:          8vcC//nk0nCqQifseNjHZ2UBgiErgCpgNN4AHFUxog8=
Subject key identifier:   10:D9:0C:45:85:1B:30:03:46:E6:A7:A4:4E:CC:00:1F:04:B2:E5:33
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F4C3D5AAD1C83DB870249E358
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/17cc51d9-74bd-3bd2-873c-f68847c1bc77.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     20473
IP address blocks:        23.230.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:5a:ad:1c:83:db:87:02:49:e3:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=5765f33d-6fdf-4d00-ae88-ebcb6e7a8c4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d1:e7:41:f2:10:1a:bb:cf:77:d1:d8:e9:ed:
                    35:27:ff:f2:0b:5c:73:e7:c5:74:46:51:3b:d0:50:
                    81:9f:16:d6:88:f5:ca:66:b8:47:6e:87:79:d4:bf:
                    25:35:c8:74:a2:dd:bb:0a:85:a8:84:92:c1:37:f4:
                    41:ad:55:34:3d:35:5f:cc:aa:2a:4a:bd:93:d8:94:
                    72:55:72:99:c5:3c:24:2e:d9:e0:55:68:ee:42:13:
                    01:77:76:f6:73:73:95:92:84:ad:92:ed:a3:7c:f0:
                    34:f3:25:5e:80:16:bc:01:8f:df:3a:f8:7e:fe:ad:
                    4d:3c:b7:44:6e:5f:81:02:2b:86:6e:df:4e:31:e7:
                    14:53:73:c2:07:3d:25:aa:32:ac:40:f5:76:01:c7:
                    a5:3a:0c:01:90:a0:01:31:b3:6b:3f:8a:06:1b:5a:
                    59:ae:a3:7f:3e:1c:97:69:64:15:b6:b9:a8:61:74:
                    c9:64:35:f8:05:d8:ee:da:ba:82:fe:00:ee:52:59:
                    9b:8c:40:da:59:98:2e:c1:e7:29:59:75:a1:c5:18:
                    e8:aa:6d:05:fc:67:73:5e:d0:c8:b7:48:ae:fe:f6:
                    1d:dc:31:08:d8:dc:8f:7f:78:f7:7c:76:63:93:69:
                    64:b0:be:44:dd:91:af:e6:e2:91:a6:76:1e:1d:24:
                    5d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D9:0C:45:85:1B:30:03:46:E6:A7:A4:4E:CC:00:1F:04:B2:E5:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/17cc51d9-74bd-3bd2-873c-f68847c1bc77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:e3:45:89:53:8e:32:60:c6:ed:57:70:7b:8c:57:1d:09:b7:
         15:60:68:7d:fd:3b:c5:5d:6b:19:42:9e:8f:94:52:71:84:2b:
         01:6b:cd:2c:7d:80:09:fa:04:83:e3:1f:d6:f3:62:b5:0f:fc:
         cc:5a:0d:6b:82:f6:b0:c0:4f:9d:be:e8:ab:9c:78:65:31:f4:
         5d:32:18:8e:73:5f:cd:65:5f:da:49:78:cb:0d:f9:f8:c8:74:
         d7:69:41:32:ae:18:ee:da:8c:49:d2:47:91:c3:7f:e3:b9:f7:
         28:6d:92:d6:2f:48:09:e9:59:12:c1:c7:52:d4:14:89:31:88:
         08:a7:08:64:c7:f8:fc:b6:82:e4:da:f0:5c:5e:4a:dd:d8:ce:
         0f:f0:ff:9e:19:55:84:24:f0:34:43:c6:7a:ad:34:fc:4c:98:
         a2:6e:61:57:70:32:93:0b:04:dd:51:45:b3:bf:6c:49:04:5d:
         fe:25:1c:5b:77:a5:4f:34:bf:bf:4e:9d:2c:2f:2b:41:95:9a:
         3e:3d:9f:cf:98:54:23:f9:f6:cd:0a:ae:0b:83:08:cc:b6:94:
         41:68:55:28:27:57:32:c8:a9:c9:8d:de:b8:f7:ee:db:59:8c:
         c5:23:e8:8d:99:06:5c:b7:7c:ef:9e:28:0d:2a:4f:db:0e:0f:
         77:56:f9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:45:44 2026 by rpki-client