Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c5e892e6-de82-3a16-a7dc-9c885acafd06.roa
File:                     c5e892e6-de82-3a16-a7dc-9c885acafd06.roa (raw, json)
Hash identifier:          2eGKOCLfuKz2dQxJCxjg+AxvS4fpMHGLQIHToX5sInI=
Subject key identifier:   9C:84:4D:BD:6E:EC:DD:7C:8E:FC:49:D3:07:4D:2C:B2:2D:E1:C7:8D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B5571E49BC30C613D1567B000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c5e892e6-de82-3a16-a7dc-9c885acafd06.roa
Signing time:             Sat 27 Sep 2025 13:00:41 +0000
ROA not before:           Sat 27 Sep 2025 13:00:41 +0000
ROA not after:            Fri 26 Dec 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        23.26.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:55:71:e4:9b:c3:0c:61:3d:15:67:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 27 13:00:41 2025 GMT
            Not After : Dec 26 14:00:41 2025 GMT
        Subject: CN=2328c335-9fc0-425d-9003-926921b9b2e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b7:c5:c6:4b:01:16:26:1b:a8:bf:bf:3a:5c:
                    4c:e1:11:c2:15:61:6e:09:74:09:6c:0e:d5:b3:2f:
                    00:88:cc:62:87:15:13:82:c5:51:f2:04:78:ac:c5:
                    ea:12:a0:7a:fb:45:79:bc:80:dc:82:29:ba:e2:6d:
                    4b:ed:9e:0b:f0:79:ee:93:c2:a2:5c:a2:12:0f:b8:
                    35:de:11:26:21:d3:89:04:94:59:76:85:b9:93:82:
                    1f:fa:4e:4b:53:ba:9e:5c:6d:3f:24:b2:c1:e9:60:
                    97:07:29:73:45:7a:f9:7d:f9:8a:01:63:f3:ae:1f:
                    4c:58:1b:f2:14:ae:79:2b:42:a9:5b:9c:3e:dc:45:
                    23:96:eb:d0:43:09:71:9c:a4:6c:2e:cc:7e:62:77:
                    63:87:f9:1e:a2:8b:82:05:14:63:ec:8b:a5:a9:4e:
                    36:d0:b5:e8:af:4f:93:e2:ee:62:70:85:bd:81:51:
                    64:d4:c9:17:ca:92:b3:ba:49:3a:19:c3:7d:dc:64:
                    ee:0c:4b:42:75:8e:79:0a:2c:09:57:81:87:c3:b6:
                    80:15:42:63:60:1c:c1:ef:f1:9c:62:f3:e5:50:7a:
                    5d:ce:2e:f1:de:25:6d:3f:ca:fc:bd:5b:7f:30:33:
                    9f:e5:e4:a9:90:e2:ca:91:63:91:61:40:c4:a4:54:
                    6f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:84:4D:BD:6E:EC:DD:7C:8E:FC:49:D3:07:4D:2C:B2:2D:E1:C7:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c5e892e6-de82-3a16-a7dc-9c885acafd06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ad:b4:bb:fb:77:b5:f8:39:07:9e:3c:ea:a6:87:dc:5c:6c:
         23:8f:10:5b:0e:66:cd:dc:3a:aa:e3:80:43:69:0f:cd:51:a0:
         4d:cd:26:c6:ec:c3:81:b3:db:ba:b3:07:d3:17:66:8e:39:12:
         bf:98:1e:c9:fb:2c:0c:b7:57:6d:e1:58:39:d0:f4:17:21:88:
         75:cf:1a:22:69:91:59:30:30:97:fe:d2:0c:23:65:67:3c:94:
         5a:e3:b6:28:9d:c1:d8:72:65:aa:b4:48:06:b0:ba:3c:35:32:
         97:dc:f5:f5:4c:01:7d:87:62:91:27:51:ad:07:91:90:d1:56:
         7f:c5:d9:94:7c:f3:bd:19:23:17:ab:cb:81:58:2e:b4:24:5c:
         19:3d:3d:d9:ca:8d:a8:e9:18:73:06:a7:2b:3b:90:d9:b5:ec:
         21:a4:9c:f3:51:76:48:f2:14:88:9d:76:3f:7e:05:27:2b:69:
         0b:2c:9c:78:b4:35:c3:05:5e:13:fc:15:ca:b8:d2:3c:96:ce:
         0c:28:d1:0d:8c:a4:bd:79:8b:16:df:64:39:23:ce:c6:c9:6f:
         b6:04:c8:b6:51:1d:39:c4:fd:fb:3d:6c:9f:91:78:98:7b:d3:
         a3:13:bd:5b:95:1b:86:ea:28:53:50:2e:ac:2f:58:03:79:1a:
         ad:8c:11:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:42:35 2025 by rpki-client