Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ef0e4a12-a213-341c-9534-303d288ec611.roa
File:                     ef0e4a12-a213-341c-9534-303d288ec611.roa (raw, json)
Hash identifier:          7742Yd7heOIqfsHiMsdcW7ISSDh/3JAlfJC1DStL6XA=
Subject key identifier:   0B:7F:17:34:CF:3C:64:66:A8:B9:3A:C1:33:7B:99:04:B9:0A:7E:50
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F69ED47762A98BD6A889F0340
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ef0e4a12-a213-341c-9534-303d288ec611.roa
Signing time:             Tue 06 Oct 2026 16:13:25 +0000
ROA not before:           Tue 06 Oct 2026 16:13:25 +0000
ROA not after:            Mon 04 Jan 2027 17:13:25 +0000
asID:                     58291
IP address blocks:        23.230.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:ed:47:76:2a:98:bd:6a:88:9f:03:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  6 16:13:25 2026 GMT
            Not After : Jan  4 17:13:25 2027 GMT
        Subject: CN=3d651ba9-2e07-4a01-9176-51a8536e3b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:02:2f:d7:89:0e:bd:36:78:e2:12:0a:f3:57:
                    02:57:eb:35:ff:ad:48:3f:b7:72:42:6f:34:38:2c:
                    8e:fe:66:27:3f:ca:1f:10:d4:57:b6:9d:c7:d3:42:
                    e4:a5:e5:5d:e9:3e:a3:64:74:ed:46:bd:a6:3c:e1:
                    77:d6:86:c7:c8:0d:5b:cd:c9:2c:23:64:25:af:0e:
                    89:16:87:65:2b:a5:cc:4f:d1:c3:19:d7:83:f3:63:
                    e2:a1:84:43:5d:72:2d:a3:76:ec:9e:f7:51:46:99:
                    38:9e:65:b1:42:69:2b:df:d5:ed:79:49:79:d9:e0:
                    32:33:7d:da:e9:d7:62:a6:f7:7f:04:98:0f:79:de:
                    cd:ca:06:09:b7:ec:15:97:f4:21:e0:e3:d7:f2:1b:
                    da:46:1d:d0:47:91:22:29:cd:a0:26:cb:ee:37:b5:
                    a2:e9:cf:ae:83:d0:aa:32:0f:28:ec:91:79:13:b2:
                    f1:7e:52:1d:bf:1b:07:5d:d6:2c:58:49:ec:2f:95:
                    78:73:62:95:20:04:22:9b:12:2a:c7:ed:97:dc:70:
                    21:7b:f2:20:35:aa:26:90:74:ec:31:51:a7:81:4a:
                    eb:aa:1d:4e:74:ed:51:6f:06:b0:03:28:82:87:04:
                    71:33:34:4e:e0:bf:e2:78:1a:ea:7e:46:5e:d5:98:
                    71:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:7F:17:34:CF:3C:64:66:A8:B9:3A:C1:33:7B:99:04:B9:0A:7E:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ef0e4a12-a213-341c-9534-303d288ec611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:ac:85:8e:d4:84:27:b3:02:49:32:33:28:72:e5:ae:79:65:
         24:24:84:43:1b:6a:f9:4b:1e:04:8f:1f:a5:61:fe:67:b9:75:
         f8:c3:fe:27:7f:28:3f:90:58:24:7f:04:49:ae:2c:a9:19:a4:
         fa:a8:5a:3a:df:3c:56:45:3c:99:c7:97:83:92:fe:ec:af:4c:
         8a:a7:05:b9:25:66:d0:63:d0:b4:99:d7:c6:93:4d:11:ac:65:
         ca:29:d1:9b:82:39:f2:2d:c1:e6:0a:ef:e8:29:d6:3b:b3:b6:
         78:6a:21:86:42:b4:80:81:11:0b:74:b8:be:aa:98:3c:90:aa:
         98:34:cd:d5:cc:28:fe:77:34:85:26:25:70:c7:be:51:d6:c5:
         76:d9:a0:11:19:ff:cd:6a:18:ce:32:9f:58:d0:bf:5c:56:e5:
         ac:3d:21:1f:c6:39:c5:d4:b4:47:da:ec:97:c4:9d:3b:37:fd:
         2d:da:fa:22:4f:06:15:62:29:4d:3a:fb:e0:de:4e:c8:b4:92:
         40:81:a5:66:bf:61:41:a5:85:fb:53:ea:d9:ee:57:5f:b9:15:
         26:64:6b:64:a7:31:57:83:ba:fd:74:80:3f:8c:ad:3f:3e:51:
         42:96:0c:f0:2c:81:b9:ce:8d:a3:74:5e:a4:5d:e6:ac:6b:1d:
         90:bd:1f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:52:47 2026 by rpki-client