Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/26f05110-70c0-3df2-b479-1d53a72176e2.roa
File:                     26f05110-70c0-3df2-b479-1d53a72176e2.roa (raw, json)
Hash identifier:          JWTjflYOtasuWqTUExKMHFR0M3G2wpH+cxn5ktt+tK4=
Subject key identifier:   E8:14:96:8C:C4:FF:ED:23:88:F8:2F:7C:ED:E1:CB:A0:EA:42:FB:AD
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584ED1671AFC9056FE2320AFF300
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/26f05110-70c0-3df2-b479-1d53a72176e2.roa
Signing time:             Thu 13 Aug 2026 01:00:11 +0000
ROA not before:           Thu 13 Aug 2026 01:00:11 +0000
ROA not after:            Wed 11 Nov 2026 02:00:11 +0000
asID:                     212238
IP address blocks:        23.230.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d1:67:1a:fc:90:56:fe:23:20:af:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 13 01:00:11 2026 GMT
            Not After : Nov 11 02:00:11 2026 GMT
        Subject: CN=f37ea609-07e0-4c16-b778-ef1d4ab929f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:be:f3:eb:9f:34:8b:ca:4d:62:00:38:5e:68:
                    7f:81:c0:51:ff:9a:67:4d:20:ee:ca:2b:a7:b3:45:
                    1c:bd:24:0d:0a:99:a3:de:35:01:71:11:05:93:11:
                    a9:3a:65:f1:a9:1a:ed:4b:91:62:d8:fa:9e:22:b8:
                    b8:1e:86:91:4e:c0:23:90:ba:ad:cb:3f:a3:01:a5:
                    38:ab:73:67:6f:27:2c:3e:7a:05:79:2a:81:61:21:
                    b9:31:8d:ae:94:fe:a3:41:13:2f:8b:a9:12:9f:3a:
                    1a:f8:22:5b:70:97:ba:b1:b9:81:62:0b:c8:ba:96:
                    02:48:7e:03:ff:1a:30:23:51:71:b0:9f:7c:0a:ff:
                    70:d8:8a:8f:92:fc:5c:69:f8:0c:c7:dc:2c:d8:d6:
                    9b:46:12:40:80:03:2c:35:a0:e9:b1:f0:6b:07:95:
                    59:f8:61:c3:e9:49:ca:66:de:6d:95:d2:af:63:3e:
                    28:a7:76:14:ec:60:6d:26:29:7c:13:71:a8:99:e9:
                    5a:8a:6f:76:24:60:a3:a2:56:7f:c8:36:64:6e:d7:
                    b4:c4:c9:c5:2c:f6:64:6c:fc:38:86:d2:5b:22:3f:
                    19:e3:19:62:c1:7e:f2:f4:42:9b:ca:ea:87:cc:18:
                    ae:76:01:9f:35:70:2a:ff:6b:94:62:dc:de:9f:dd:
                    08:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:14:96:8C:C4:FF:ED:23:88:F8:2F:7C:ED:E1:CB:A0:EA:42:FB:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/26f05110-70c0-3df2-b479-1d53a72176e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:df:cc:77:f6:2c:89:5a:15:78:28:4c:cd:02:af:9b:63:9b:
         cd:f2:87:88:8a:7e:e0:21:c3:f9:3e:63:ab:4c:cb:07:3c:ea:
         74:39:95:bc:f8:a9:b0:d7:53:6d:05:8f:5a:34:b5:89:30:c7:
         bc:e2:f5:10:d7:46:cf:95:ed:3b:e0:5d:69:7c:62:c2:bd:16:
         fb:f7:bf:ed:4a:28:8b:74:b8:fa:c4:19:f6:ae:41:03:03:63:
         a5:b4:3d:48:f5:82:10:09:c9:17:1f:1d:a0:8d:85:f1:02:82:
         67:8d:92:a9:69:b8:c0:47:8d:e1:ff:0b:e3:59:72:54:db:cf:
         24:74:f8:ef:cd:51:9d:49:a7:ca:6b:12:73:c2:06:cd:87:79:
         c0:0d:0f:4f:78:75:e1:86:b6:f5:e0:0c:18:f2:64:12:14:d0:
         f1:7d:76:1d:67:59:87:35:28:bc:6f:80:ec:44:a9:ce:8d:d1:
         8d:d0:e9:f0:38:46:31:dc:03:94:30:62:19:f5:12:b9:52:dd:
         3f:3c:aa:ee:ca:6c:1d:f0:eb:76:eb:08:eb:92:5a:87:9d:b8:
         d7:b4:b6:5e:9d:ae:cc:7d:41:82:26:0e:b0:47:ee:89:35:77:
         9b:8c:f5:a3:27:c9:e1:2d:42:d4:f3:22:28:93:c4:b7:b5:65:
         a9:e2:0b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 15:19:11 2026 by rpki-client