Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/51cc637a-e30c-323c-88a1-981315dde4da.roa
File:                     51cc637a-e30c-323c-88a1-981315dde4da.roa (raw, json)
Hash identifier:          BCwp8tidghfh0ekocgU2KhmxmFjdiBC0dWYD9PYx6MI=
Subject key identifier:   D4:DE:9F:B3:FA:0C:24:C3:8C:3F:3D:F8:CB:9F:72:5A:37:A8:31:B3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F119D1CFFF46B162CA1AF2080
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/51cc637a-e30c-323c-88a1-981315dde4da.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     397032
IP address blocks:        23.230.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:1c:ff:f4:6b:16:2c:a1:af:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=3af6babc-2f4e-422d-9cf4-d2cdbc495804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a2:ff:66:b8:73:5c:e2:d6:d5:d3:6f:99:5b:
                    b6:0f:3c:1e:c7:d0:1d:b8:c7:aa:da:3b:9c:1d:8f:
                    39:be:0d:8f:56:b6:06:ad:d4:ed:ce:fa:29:11:91:
                    28:96:df:1c:ff:3d:ab:d8:01:26:8c:0e:c0:5b:2b:
                    20:ea:d1:5d:20:21:02:ae:5e:af:dc:6b:15:27:06:
                    f9:eb:1c:e1:78:12:f9:aa:42:8b:52:bc:6e:5d:5a:
                    c4:1c:e2:a1:3e:5d:a7:28:0f:0f:7a:d7:03:dc:c2:
                    90:21:97:7a:5e:16:54:89:dc:d7:7e:2e:a7:f7:b0:
                    0c:42:21:c1:2a:a0:43:0d:da:47:36:52:81:81:2d:
                    f0:e5:61:20:c6:6a:5f:89:e8:38:4a:f7:17:af:ce:
                    04:d4:08:32:0f:59:c3:ee:2c:5f:92:2b:32:c1:c5:
                    f2:9c:98:60:19:28:ac:f1:80:f4:da:f2:d0:ad:13:
                    a2:d5:45:af:f6:24:59:f6:dc:dc:ed:32:8e:cc:fb:
                    77:2a:81:07:f0:a5:cf:eb:48:a6:e1:12:d3:7f:d9:
                    ed:a3:e1:f2:a8:a5:01:42:30:ce:00:bb:af:3c:2a:
                    a3:3c:e0:2c:bd:46:67:50:48:48:2d:de:17:12:ab:
                    42:6f:ab:27:d2:82:08:ec:94:f9:8f:a0:18:77:36:
                    07:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:DE:9F:B3:FA:0C:24:C3:8C:3F:3D:F8:CB:9F:72:5A:37:A8:31:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/51cc637a-e30c-323c-88a1-981315dde4da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:5b:78:c7:b6:12:52:ae:ae:36:a4:00:2e:23:d6:e3:e1:26:
         c7:6f:65:94:db:90:3c:25:3d:48:1a:9e:f7:18:da:fb:52:a2:
         51:3a:41:77:be:75:83:ee:4b:d8:36:b7:9c:42:ef:5f:d9:57:
         04:6f:ce:a9:29:48:ec:03:a1:af:d2:d5:e9:e1:c5:aa:c1:32:
         0f:be:54:03:cc:ac:03:a5:d5:f9:89:95:07:4c:f4:6c:5f:97:
         e5:0e:42:85:72:f0:a3:c8:fd:d7:17:16:a1:53:8f:32:02:12:
         ae:53:e7:42:77:c9:bc:10:c3:46:df:0d:49:08:cc:89:2e:62:
         2b:78:fe:dc:8a:42:28:2c:73:db:81:5b:e5:06:f5:1c:8d:89:
         11:2e:cb:c9:07:c6:d3:3f:ce:48:80:4e:e1:37:d6:16:f1:b4:
         df:61:03:98:c6:89:c4:c3:36:b8:12:6e:a8:74:23:7d:dc:b0:
         6e:27:93:5f:0d:7b:3c:87:be:b3:f1:af:5c:df:01:4b:0c:85:
         2b:49:0b:a5:0e:c4:d2:c5:7a:70:2d:3d:2b:62:11:4e:67:19:
         ff:b2:08:39:2e:33:b7:74:35:ad:bd:c6:11:65:19:42:33:17:
         78:18:d2:36:95:7d:b8:28:21:57:53:0f:a1:4c:07:44:5c:0d:
         88:e7:6c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:23:16 2026 by rpki-client