Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5e039366-9dd1-38ab-98cb-2fe949a2de41.roa
File:                     5e039366-9dd1-38ab-98cb-2fe949a2de41.roa (raw, json)
Hash identifier:          2VKETah2aydF4RWxwubJScjgCD4HuUxuVpFzZpdTuls=
Subject key identifier:   07:A7:22:4B:A4:A8:A1:28:90:38:7E:83:FD:CA:55:C9:12:38:ED:46
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A9E655BE249E6785C2D401580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5e039366-9dd1-38ab-98cb-2fe949a2de41.roa
Signing time:             Wed 23 Jul 2025 23:22:42 +0000
ROA not before:           Wed 23 Jul 2025 23:22:42 +0000
ROA not after:            Tue 21 Oct 2025 23:22:42 +0000
asID:                     7385
IP address blocks:        23.26.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:65:5b:e2:49:e6:78:5c:2d:40:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 23 23:22:42 2025 GMT
            Not After : Oct 21 23:22:42 2025 GMT
        Subject: CN=f846f5c5-a525-4386-909c-66d6f0e0ef86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7a:da:04:4a:f5:b0:70:d0:42:5b:0a:d6:1d:
                    3f:ed:a1:ae:ed:8e:9e:6c:1a:52:aa:7c:29:a0:78:
                    8b:7f:61:61:7c:a6:85:4b:0e:92:13:17:4a:44:f4:
                    5f:8e:a8:1b:5c:a4:cc:b5:eb:00:f7:d2:c6:a1:21:
                    47:52:5c:e9:cb:21:5a:b3:cc:79:07:2f:66:a0:a5:
                    fd:b4:7c:f0:07:d0:a8:66:1e:8a:2d:80:fd:eb:04:
                    67:bb:85:a6:fe:a8:b8:7e:8d:d5:44:d5:81:29:15:
                    5f:e0:1e:b6:d1:a0:79:a5:aa:19:41:bb:c8:1b:1d:
                    06:c7:48:7e:14:90:a1:c3:ad:88:6e:f7:88:7a:c5:
                    d0:4a:1e:ce:9c:7e:d0:db:e4:48:a1:b5:df:b9:22:
                    f8:52:50:04:24:79:65:05:e0:b2:80:9c:59:9f:7a:
                    a6:93:0a:3f:23:e2:0c:25:ba:f5:3a:ab:62:30:d4:
                    0c:e6:75:cd:fc:9b:b7:33:04:2e:1a:1b:b7:30:5a:
                    6b:fa:30:70:d6:3b:f2:31:35:e6:d1:e7:c9:7a:cb:
                    9d:dc:0b:0f:7f:67:08:89:38:e9:59:d0:91:f2:92:
                    12:3b:ee:ec:94:b3:61:09:96:05:70:16:74:0d:a0:
                    5b:dd:66:86:c3:a8:91:e2:04:75:69:04:8c:24:da:
                    16:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A7:22:4B:A4:A8:A1:28:90:38:7E:83:FD:CA:55:C9:12:38:ED:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5e039366-9dd1-38ab-98cb-2fe949a2de41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:ac:c7:18:8c:18:f9:4c:05:9b:5c:22:96:8c:0c:16:68:38:
         6a:fa:c4:1b:12:71:8a:ed:34:8b:e8:5b:b8:e6:7c:0e:2b:1b:
         d4:d4:8f:fd:f2:03:1e:59:fa:41:7e:0b:21:97:62:31:5d:2f:
         7b:a8:93:40:05:c1:f0:f6:d2:3f:a2:4a:ae:fc:e3:6d:d6:87:
         67:8f:eb:aa:2c:e0:4a:5f:5a:ac:da:1f:ec:2e:a4:d2:7a:0d:
         c8:74:0f:f3:92:a5:41:b4:d2:b4:d7:dc:33:67:0b:08:7f:c7:
         8e:7c:44:9e:63:08:b2:6b:a5:93:ae:cb:f0:42:90:fd:c3:0f:
         27:89:33:e5:e8:5e:df:81:d7:00:be:86:c0:3a:65:09:84:2a:
         ea:54:47:26:98:6a:bb:da:bf:ef:a1:b1:d5:31:03:18:82:32:
         f3:d3:fe:ac:5a:18:8b:4e:81:7c:1b:0e:4c:a9:1b:d1:a4:9a:
         3c:26:b3:7b:64:41:fd:7b:92:b3:ab:04:21:fb:1c:98:3e:17:
         88:4c:87:82:ae:c7:5b:2b:d5:e2:24:82:cf:e1:6d:e9:87:cb:
         6a:42:ef:64:fb:f7:c4:a5:6f:a3:8f:70:d7:b7:13:44:93:03:
         c9:95:1a:6e:be:77:49:72:4e:db:3e:9c:dc:65:31:47:61:93:
         81:1a:e5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 13:15:15 2025 by rpki-client