Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a2376e5e-a044-3442-b4e0-5c237f5d6100.roa
File:                     a2376e5e-a044-3442-b4e0-5c237f5d6100.roa (raw, json)
Hash identifier:          ifZZSQCrOyIaBESnB1XNaegiKwH8N6I835t4BfVzMpI=
Subject key identifier:   E4:3A:9C:28:65:DE:86:66:4F:17:76:BF:AE:8D:6A:42:5F:95:85:EF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584E5D004B69CCA38F9BBA3313C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a2376e5e-a044-3442-b4e0-5c237f5d6100.roa
Signing time:             Thu 02 Jul 2026 08:19:17 +0000
ROA not before:           Thu 02 Jul 2026 08:19:17 +0000
ROA not after:            Wed 30 Sep 2026 08:19:17 +0000
asID:                     212238
IP address blocks:        23.230.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:00:4b:69:cc:a3:8f:9b:ba:33:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul  2 08:19:17 2026 GMT
            Not After : Sep 30 08:19:17 2026 GMT
        Subject: CN=116934cc-a484-4ab8-9585-03e7c8c2d519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ee:8e:3f:ae:de:cc:7a:54:70:97:86:94:d5:
                    e8:d2:fc:76:5a:8a:3f:15:e0:2e:51:f2:0f:96:6a:
                    95:9b:7e:3b:ef:15:19:a0:ce:7e:a3:ce:8d:c2:47:
                    82:45:7c:6c:4c:f0:d1:46:21:65:be:99:06:dd:bd:
                    6f:a0:50:81:5d:d6:1a:69:1b:d8:dd:63:f4:ff:bd:
                    01:9c:21:41:ee:55:65:3a:fb:58:fb:1f:2b:aa:bf:
                    c5:0d:08:2e:b8:93:b6:1a:5b:12:a7:48:9f:97:cc:
                    60:c3:9c:40:bf:ed:3b:ed:e7:86:1b:b7:86:93:16:
                    5d:ac:a7:ce:ac:b6:ea:e1:82:88:d0:80:10:96:06:
                    a3:d4:b8:e6:1e:49:bb:c7:e8:db:b7:da:01:4f:e6:
                    0b:e7:8f:65:f6:7c:76:db:6d:97:a8:57:20:65:ea:
                    f9:a5:85:c0:7f:e0:be:8d:f0:51:8c:dd:f2:9d:73:
                    06:ec:28:81:a2:4e:c9:51:31:41:83:b9:90:21:c0:
                    9f:fc:09:4f:81:cf:71:3a:63:ae:a4:b0:e3:d8:9e:
                    bd:11:c2:c7:a0:51:15:1c:bd:c9:65:2d:d4:63:d0:
                    77:60:44:d9:0c:2e:a7:26:7a:9d:40:73:ea:1d:63:
                    cf:ad:e3:db:79:65:ad:2a:51:34:e9:b9:e1:78:fb:
                    1a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3A:9C:28:65:DE:86:66:4F:17:76:BF:AE:8D:6A:42:5F:95:85:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a2376e5e-a044-3442-b4e0-5c237f5d6100.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:56:12:5f:d3:ca:a9:df:9b:23:d6:37:31:ff:f9:30:6f:48:
         25:eb:22:53:19:e6:5f:ec:66:be:aa:60:1f:7b:ed:59:cc:a9:
         52:21:e5:e1:d7:84:17:eb:25:01:a7:b3:ac:d5:4d:cf:84:52:
         20:f9:5a:43:5b:22:f8:78:8a:82:97:df:e8:ea:dc:8e:5c:eb:
         28:8a:a1:b4:57:9d:cf:c8:b0:fa:4f:e3:a0:8b:d4:6a:95:6d:
         2b:b8:d0:9b:71:44:4d:40:b8:82:f5:e0:40:b3:3b:be:2f:b0:
         26:44:c5:75:2d:90:31:40:5b:76:c0:2b:34:ea:28:69:04:22:
         a2:4f:84:0f:1f:f4:e6:f4:2c:bc:8a:04:20:f9:5f:ce:e2:be:
         6a:c5:1c:d2:8a:7d:4d:63:d7:0d:db:ab:5e:f3:73:90:83:c4:
         ff:32:ad:5a:dd:f5:5f:f5:b6:b3:fc:e1:e3:e5:76:a6:2c:93:
         e9:21:76:4c:7a:e0:6f:f1:d0:69:9a:70:f3:3b:d8:4b:65:3a:
         26:1c:c3:62:2a:3d:2a:c4:3d:6b:f1:89:ad:ec:e1:ea:0e:7c:
         30:94:34:c2:d0:cd:b9:87:57:0c:3b:d5:5b:f7:ce:dc:fb:51:
         0b:65:68:6b:99:36:3b:42:8d:cd:5f:76:78:d3:bd:b5:c3:c5:
         71:72:e3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 17:21:07 2026 by rpki-client