Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fe75d306-ddd9-3f9a-b88c-330daf649259.roa
File:                     fe75d306-ddd9-3f9a-b88c-330daf649259.roa (raw, json)
Hash identifier:          69ZRK6QKrHTH4Ki6BAUFcK4mQzOD7T8YOUc86pITQmY=
Subject key identifier:   C1:8D:B5:23:40:F3:4B:15:CC:8F:A8:D7:9B:EF:9E:10:37:D7:87:39
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EC90714F1C87184916193B060
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fe75d306-ddd9-3f9a-b88c-330daf649259.roa
Signing time:             Mon 10 Aug 2026 01:00:12 +0000
ROA not before:           Mon 10 Aug 2026 01:00:12 +0000
ROA not after:            Sun 08 Nov 2026 02:00:12 +0000
asID:                     18779
IP address blocks:        23.230.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c9:07:14:f1:c8:71:84:91:61:93:b0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 10 01:00:12 2026 GMT
            Not After : Nov  8 02:00:12 2026 GMT
        Subject: CN=ddce8d6f-dea7-4dc2-86ec-b610f2415519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:91:b3:f5:69:5b:e8:59:e7:23:d7:e4:16:35:
                    79:ce:bc:c3:f8:1b:e0:ff:14:c3:dc:2c:8d:35:4a:
                    1e:ca:2a:e9:f7:3d:93:46:b8:5e:90:d0:d8:97:c5:
                    b3:4b:d0:38:a2:b5:0a:5d:b0:95:73:6c:ce:7e:02:
                    0c:f8:92:47:a2:f3:5e:9d:a2:a1:2f:0c:ce:77:b9:
                    a9:d8:39:64:04:65:05:6d:0b:6f:d3:7f:37:50:e5:
                    98:a4:23:58:df:b0:30:2c:38:3e:8f:e2:4f:d1:70:
                    ee:2a:50:a3:57:7a:cd:1f:7b:b0:a1:7a:31:ab:5b:
                    98:e1:e9:cc:41:10:db:46:88:67:68:b0:15:b3:5a:
                    68:98:03:be:64:35:7c:93:d3:fb:e9:f8:f5:8c:44:
                    a4:49:31:ad:7d:10:73:cb:22:64:6f:b9:0c:7f:e7:
                    ca:e4:71:f8:5e:eb:da:63:09:fc:35:26:97:c0:b1:
                    a8:ee:ff:36:d1:c0:0e:28:a8:f0:0a:2c:00:19:77:
                    45:85:54:02:03:ce:5a:4a:00:59:a1:89:fb:52:b0:
                    dd:06:bd:99:d1:dc:8e:43:97:57:15:84:74:bc:75:
                    d1:a4:81:d7:0e:04:ee:83:75:d2:01:c9:b5:5d:b4:
                    f0:3f:fc:de:df:d5:85:78:6c:5b:77:67:d0:fa:f7:
                    d6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8D:B5:23:40:F3:4B:15:CC:8F:A8:D7:9B:EF:9E:10:37:D7:87:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fe75d306-ddd9-3f9a-b88c-330daf649259.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:e4:a8:a1:dc:1c:50:30:5b:df:ce:97:13:3e:3a:32:15:b6:
         bc:ab:68:ad:38:c1:58:3a:64:05:dd:9f:92:e7:a8:82:bc:d6:
         78:94:25:51:02:4f:6a:3a:80:a1:68:4e:c9:6c:53:0a:db:7e:
         67:7a:40:4f:56:de:06:da:d4:be:f6:f0:b0:3c:65:2d:03:40:
         07:34:99:10:9a:f9:e4:4d:3d:80:d6:1e:dd:a4:a6:78:ad:7b:
         a0:0b:6c:85:d3:37:7d:2b:a4:e0:6b:fc:30:b2:1c:36:26:52:
         a9:ce:7e:43:6c:b4:7e:b5:50:8d:85:a3:f5:c3:8c:46:14:ea:
         ad:b6:a3:77:df:39:0d:6d:f0:be:09:42:df:cb:e7:d9:17:59:
         e9:1c:ba:c5:a4:2d:18:a6:ca:34:a5:95:ba:3e:fe:ad:58:37:
         0c:9e:99:08:94:5f:65:8e:d2:d9:9c:cf:99:f4:ec:e4:95:f4:
         77:ea:13:1a:9f:60:df:bf:d3:7e:e4:65:bb:c5:f9:05:e0:3f:
         73:b4:b2:00:0c:19:e8:d1:c0:6d:2f:3c:e8:c3:7b:47:b1:ef:
         4c:35:00:fd:09:a2:8b:71:59:8f:5c:cf:3f:ef:01:0d:c6:82:
         6b:14:9f:df:ef:1f:8b:7b:54:48:14:b6:99:72:d8:33:97:e9:
         04:69:4e:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7JBxTxyHGEkWGTsGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDgxMDAxMDAxMloXDTI2MTEwODAyMDAxMlowLzEtMCsGA1UEAxMk
ZGRjZThkNmYtZGVhNy00ZGMyLTg2ZWMtYjYxMGYyNDE1NTE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopGz9Wlb6FnnI9fkFjV5zrzD+Bvg/xTD3CyN
NUoeyirp9z2TRrhekNDYl8WzS9A4orUKXbCVc2zOfgIM+JJHovNenaKhLwzOd7mp
2DlkBGUFbQtv0383UOWYpCNY37AwLDg+j+JP0XDuKlCjV3rNH3uwoXoxq1uY4enM
QRDbRohnaLAVs1pomAO+ZDV8k9P76fj1jESkSTGtfRBzyyJkb7kMf+fK5HH4Xuva
Ywn8NSaXwLGo7v820cAOKKjwCiwAGXdFhVQCA85aSgBZoYn7UrDdBr2Z0dyOQ5dX
FYR0vHXRpIHXDgTug3XSAcm1XbTwP/ze39WFeGxbd2fQ+vfWzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMGNtSNA80sVzI+o15vvnhA314c5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZmU3NWQzMDYtZGRkOS0z
ZjlhLWI4OGMtMzMwZGFmNjQ5MjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+YmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEbkqKHcHFAwW9/OlxM+OjIVtryraK04wVg6ZAXdn5LnqIK81niUJVEC
T2o6gKFoTslsUwrbfmd6QE9W3gba1L728LA8ZS0DQAc0mRCa+eRNPYDWHt2kpnit
e6ALbIXTN30rpOBr/DCyHDYmUqnOfkNstH61UI2Fo/XDjEYU6q22o3ffOQ1t8L4J
Qt/L59kXWekcusWkLRimyjSllbo+/q1YNwyemQiUX2WO0tmcz5n07OSV9HfqExqf
YN+/037kZbvF+QXgP3O0sgAMGejRwG0vPOjDe0ex70w1AP0JootxWY9czz/vAQ3G
gmsUn9/vH4t7VEgUtply2DOX6QRpTgA=
-----END CERTIFICATE-----
Generated at Sun Sep 13 08:52:30 2026 by rpki-client