Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/27d0808d-3c7f-3f06-833c-3377f5153f1d.roa
File:                     27d0808d-3c7f-3f06-833c-3377f5153f1d.roa (raw, json)
Hash identifier:          M6jJ/fnYz5r2tQsEL9zrokahCe+u623ab5Ea8peepVY=
Subject key identifier:   82:9D:87:CA:5A:F5:EE:56:3A:E9:FE:34:8D:67:BA:72:03:F6:6B:9C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584E2E327868615D2776C1A07340
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/27d0808d-3c7f-3f06-833c-3377f5153f1d.roa
Signing time:             Mon 15 Jun 2026 13:57:23 +0000
ROA not before:           Mon 15 Jun 2026 13:57:23 +0000
ROA not after:            Sun 13 Sep 2026 13:57:23 +0000
asID:                     212238
IP address blocks:        23.230.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2e:32:78:68:61:5d:27:76:c1:a0:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 15 13:57:23 2026 GMT
            Not After : Sep 13 13:57:23 2026 GMT
        Subject: CN=9000abef-ff30-43ca-9a90-0d01f7873701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:df:24:2f:5b:6e:cf:b7:be:28:6e:f5:3a:18:
                    ea:5c:f2:ba:e4:90:67:18:33:14:4d:77:33:e1:70:
                    54:0f:dd:cc:32:0a:36:b7:d6:e0:4a:77:e6:71:33:
                    0c:6c:94:56:2c:17:36:28:72:cf:a9:6d:ea:c1:c7:
                    e5:ea:25:40:7d:c7:d7:f6:85:79:b8:5a:65:a4:7b:
                    2a:40:29:70:29:b1:57:e9:4d:43:10:b0:91:08:c5:
                    42:b1:f8:32:90:d6:c9:be:56:98:9f:97:19:ba:e9:
                    80:98:5d:e7:9b:f2:a2:d4:fa:20:ae:84:a8:81:2d:
                    53:9f:6a:14:d6:91:c5:9b:d2:85:a2:23:dc:1c:d4:
                    91:f1:df:37:52:e5:a1:28:23:90:26:d0:35:bd:b6:
                    de:26:b3:51:5e:ae:63:6a:86:55:86:aa:e9:8a:07:
                    b0:f1:41:5e:d9:da:24:1b:25:92:41:dd:a5:25:2e:
                    91:44:fb:f2:79:2e:88:9b:5e:98:96:28:95:b7:d4:
                    10:a7:d9:41:d7:62:71:8e:b2:66:08:f0:ed:f5:08:
                    aa:b0:dd:ab:a7:22:23:29:15:31:cc:85:c1:e5:cb:
                    1a:ec:13:4e:80:c0:f6:d9:2a:6d:be:fb:d9:fb:3d:
                    f6:fb:64:97:9f:99:51:3b:c0:30:4e:75:d3:53:d9:
                    68:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9D:87:CA:5A:F5:EE:56:3A:E9:FE:34:8D:67:BA:72:03:F6:6B:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/27d0808d-3c7f-3f06-833c-3377f5153f1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:fa:50:3b:31:45:e9:77:e9:b7:f7:b8:d1:c0:fe:e9:8d:a3:
         dc:90:9b:63:75:af:d0:4c:6f:87:88:5c:e1:92:1f:02:00:18:
         4f:1c:74:97:53:73:8c:62:39:ae:8f:f3:1a:b5:c4:06:9d:ee:
         df:db:0c:ec:28:2c:3e:05:ee:e1:a9:07:fa:70:6c:3a:69:80:
         04:70:88:be:b1:08:70:34:68:d2:68:a8:22:df:b9:bc:86:42:
         4f:f9:fd:da:e8:25:b9:5b:ae:94:4d:aa:84:d0:c6:bd:70:2f:
         23:c9:cb:ab:48:e4:1a:7a:a3:c0:7d:4f:ae:27:2b:12:ad:9b:
         a9:af:26:0d:67:fb:5d:6a:6e:27:f5:30:83:a0:fd:28:7c:2b:
         30:14:3a:0d:b4:13:b8:ca:d0:20:f4:32:90:3a:7c:01:d3:c8:
         91:8a:6e:72:d5:c1:ac:d2:be:48:c9:f9:5c:bd:c6:1c:2e:7d:
         87:a9:c4:29:25:00:fb:e9:52:8a:f3:cd:3a:7f:27:ea:cb:04:
         49:3b:e1:00:64:9b:5b:b5:96:48:73:02:b2:b6:8b:29:2e:00:
         fa:b5:af:85:d9:c2:59:ee:b9:44:29:39:c8:28:78:e7:d3:c0:
         66:17:37:a5:33:50:d2:ce:25:7f:6d:29:d7:e0:c5:50:55:cc:
         40:82:01:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 02:17:37 2026 by rpki-client