Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d09d3bbf-979e-3ce3-a8f4-780b4dd08007.roa
File:                     d09d3bbf-979e-3ce3-a8f4-780b4dd08007.roa (raw, json)
Hash identifier:          /aKX2MTQaRhfygsKa9zovqqFWfuU/6r/pwpdAeR6vEo=
Subject key identifier:   21:9D:84:51:C7:B1:39:B5:43:DC:30:B7:CB:1A:C5:32:85:23:14:ED
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EC90711CEEBF0EAE4F8A41F80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d09d3bbf-979e-3ce3-a8f4-780b4dd08007.roa
Signing time:             Mon 10 Aug 2026 01:00:12 +0000
ROA not before:           Mon 10 Aug 2026 01:00:12 +0000
ROA not after:            Sun 08 Nov 2026 02:00:12 +0000
asID:                     3356
IP address blocks:        23.230.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c9:07:11:ce:eb:f0:ea:e4:f8:a4:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 10 01:00:12 2026 GMT
            Not After : Nov  8 02:00:12 2026 GMT
        Subject: CN=58a7fc7b-72c0-4db1-81b5-2b93b3b81fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f0:e6:3f:8c:a7:7f:44:49:b9:9a:a8:6f:91:
                    58:6b:a7:48:e7:c1:47:23:ce:b1:51:1a:e8:3f:70:
                    18:1e:f1:54:5c:d3:a5:fd:e9:f9:58:8c:8f:1a:77:
                    71:fd:a4:42:03:6f:21:ed:5b:46:4d:e3:5d:ea:c9:
                    45:3d:07:bb:a1:e5:a8:2a:c4:8f:89:40:b9:ed:e1:
                    0f:61:05:ac:b2:e3:41:dc:f8:c8:62:8f:f9:7a:bb:
                    ba:46:ed:36:bf:bc:94:9a:e3:33:a3:ba:84:57:ea:
                    ec:54:db:b7:bb:5e:01:97:a9:01:75:ce:89:19:5c:
                    60:25:57:a4:0f:1e:c3:29:e9:62:ff:0b:84:d0:64:
                    11:33:2c:c1:91:fd:9e:d1:3e:5b:6b:dc:0b:51:93:
                    3a:b1:5c:25:f0:1d:31:b4:82:d7:79:95:6c:0e:d5:
                    be:15:92:06:8b:be:ad:0d:e9:5d:6b:9c:26:9d:0b:
                    93:41:a7:67:b7:f2:eb:61:23:9c:ff:4f:c0:8e:b1:
                    ef:5f:9a:46:75:fb:2e:f2:14:12:69:44:3a:b3:74:
                    1b:db:11:14:98:4c:02:c4:f6:68:c0:56:70:ca:64:
                    66:3c:d2:47:68:9b:bc:df:7a:0a:e2:8a:0e:8c:b2:
                    98:14:cf:0c:2d:b0:6e:ff:f8:b8:41:84:a8:78:63:
                    5a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:9D:84:51:C7:B1:39:B5:43:DC:30:B7:CB:1A:C5:32:85:23:14:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d09d3bbf-979e-3ce3-a8f4-780b4dd08007.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:33:1a:b2:24:f6:db:ef:41:a3:97:c3:f3:ae:6c:ea:c2:55:
         cc:de:fa:f1:9b:6b:aa:fd:cf:5b:12:19:7f:44:c4:f6:b7:17:
         0e:c9:22:b0:9a:68:a7:45:bf:4e:2e:20:fb:7d:c8:38:82:f7:
         fa:6e:cd:41:8d:92:88:6a:b3:79:35:7e:40:a8:99:50:7f:cf:
         a2:45:d2:8d:bf:c5:c5:fc:78:5b:5c:6d:b1:ae:cb:a0:07:9b:
         9d:c6:dd:42:10:71:17:d9:45:8f:2b:a5:05:3a:b4:40:e9:f2:
         08:0a:eb:4e:4f:a7:18:8a:cb:c5:4b:b5:f6:b6:83:ec:6c:a5:
         6a:99:f4:31:3b:74:55:13:b5:1d:5d:23:19:e9:df:11:c2:7b:
         27:6c:d7:bd:b3:7a:7b:21:86:f2:10:3c:08:92:e7:a8:e8:43:
         3b:59:ec:36:09:c9:86:5b:6c:c8:13:d3:2c:36:cf:11:a5:bb:
         1d:93:3e:45:7a:1c:b3:fa:68:a7:a9:40:f2:69:5e:69:d3:79:
         13:7e:a0:56:8a:4c:d2:80:e1:53:97:c9:a8:b3:c7:bf:b7:59:
         60:97:75:05:4d:da:75:0a:c3:0f:98:6d:80:64:20:83:4d:bd:
         6d:6c:ce:f1:8a:a8:e7:42:e5:bd:a6:96:8a:9b:ed:30:e2:d5:
         33:9b:a6:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7JBxHO6/Dq5PikH4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDgxMDAxMDAxMloXDTI2MTEwODAyMDAxMlowLzEtMCsGA1UEAxMk
NThhN2ZjN2ItNzJjMC00ZGIxLTgxYjUtMmI5M2IzYjgxZmUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvDmP4ynf0RJuZqob5FYa6dI58FHI86xURro
P3AYHvFUXNOl/en5WIyPGndx/aRCA28h7VtGTeNd6slFPQe7oeWoKsSPiUC57eEP
YQWssuNB3PjIYo/5eru6Ru02v7yUmuMzo7qEV+rsVNu3u14Bl6kBdc6JGVxgJVek
Dx7DKeli/wuE0GQRMyzBkf2e0T5ba9wLUZM6sVwl8B0xtILXeZVsDtW+FZIGi76t
Delda5wmnQuTQadnt/LrYSOc/0/AjrHvX5pGdfsu8hQSaUQ6s3Qb2xEUmEwCxPZo
wFZwymRmPNJHaJu833oK4ooOjLKYFM8MLbBu//i4QYSoeGNa1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCGdhFHHsTm1Q9wwt8saxTKFIxTtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZDA5ZDNiYmYtOTc5ZS0z
Y2UzLWE4ZjQtNzgwYjRkZDA4MDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+aYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADczGrIk9tvvQaOXw/OubOrCVcze+vGba6r9z1sSGX9ExPa3Fw7JIrCa
aKdFv04uIPt9yDiC9/puzUGNkohqs3k1fkComVB/z6JF0o2/xcX8eFtcbbGuy6AH
m53G3UIQcRfZRY8rpQU6tEDp8ggK605PpxiKy8VLtfa2g+xspWqZ9DE7dFUTtR1d
Ixnp3xHCeyds172zenshhvIQPAiS56joQztZ7DYJyYZbbMgT0yw2zxGlux2TPkV6
HLP6aKepQPJpXmnTeRN+oFaKTNKA4VOXyaizx7+3WWCXdQVN2nUKww+YbYBkIINN
vW1szvGKqOdC5b2mloqb7TDi1TObpvY=
-----END CERTIFICATE-----
Generated at Wed Aug 26 18:04:58 2026 by rpki-client