Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e78b5549-9548-3899-8b58-5fa967b10e21.roa
File:                     e78b5549-9548-3899-8b58-5fa967b10e21.roa (raw, json)
Hash identifier:          r/qJiQAym3J6qSc+YviAHGvCOvnD+jrSOpVPxXaC4NM=
Subject key identifier:   81:63:D7:09:95:B1:D8:11:E9:9D:DC:77:CD:AB:3D:D9:D6:0D:C4:7E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A9E655D2111599ED20B551300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e78b5549-9548-3899-8b58-5fa967b10e21.roa
Signing time:             Wed 23 Jul 2025 23:22:43 +0000
ROA not before:           Wed 23 Jul 2025 23:22:43 +0000
ROA not after:            Tue 21 Oct 2025 23:22:43 +0000
asID:                     7385
IP address blocks:        23.26.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:65:5d:21:11:59:9e:d2:0b:55:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 23 23:22:43 2025 GMT
            Not After : Oct 21 23:22:43 2025 GMT
        Subject: CN=67074efb-b57e-421c-8ab6-e5e849fa8780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:36:2d:5c:ba:1c:85:b8:4b:47:01:88:a7:34:
                    4a:d5:a9:4b:fb:a5:c8:f2:d0:97:43:2c:12:1e:b4:
                    d5:3d:57:23:52:b1:32:0e:6d:d7:35:9f:8d:44:45:
                    72:cf:31:14:e3:2f:90:1b:e1:01:07:a9:72:4a:9b:
                    d5:96:b5:c0:d2:17:4d:c2:83:9a:f5:63:d1:9c:8f:
                    c9:ef:67:75:65:4a:09:f5:8f:31:80:fb:f8:b9:44:
                    e3:c0:f5:b0:fa:5a:1f:98:9f:a7:6d:84:0b:8c:14:
                    1c:03:f6:86:2a:c3:1c:72:56:a6:89:f3:99:60:cc:
                    c3:eb:57:d4:a8:5b:a1:1f:bc:6a:db:81:5d:27:d6:
                    e3:20:f0:c7:29:e3:63:a7:34:f0:99:a1:c9:83:f9:
                    91:c0:20:0a:a0:f6:bf:b5:74:ab:f0:5a:9f:e6:f1:
                    91:dc:c2:fc:fc:ae:72:d5:be:2f:e7:0e:f0:74:bc:
                    a7:fc:12:9e:1e:86:92:8b:d5:aa:33:6e:55:40:cf:
                    f1:ed:99:f3:58:ba:e8:52:d3:79:6f:42:10:9a:fc:
                    3c:29:b7:52:ed:59:41:a1:2f:94:d1:27:91:af:26:
                    2b:2f:d0:77:35:b1:39:18:2f:0e:0a:43:3d:03:52:
                    21:25:ee:84:cf:5b:60:97:88:15:b9:37:4a:fd:8d:
                    e2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:63:D7:09:95:B1:D8:11:E9:9D:DC:77:CD:AB:3D:D9:D6:0D:C4:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e78b5549-9548-3899-8b58-5fa967b10e21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:06:a9:e7:36:a5:38:a4:90:4f:df:48:aa:f1:77:3d:6a:d8:
         a5:49:0f:e4:2c:4b:9f:fc:ec:89:4e:cf:8f:bc:29:70:81:d2:
         d1:81:1a:8e:c6:8b:e8:9e:5f:90:bd:c8:07:04:79:39:3c:ff:
         6b:55:3d:f5:5d:36:a6:cf:b3:d8:cd:88:67:8a:25:43:1d:1c:
         53:eb:71:2d:e2:31:a2:19:fe:9b:9d:b3:f0:3e:09:d6:cb:b9:
         6c:89:3b:91:b1:2f:8e:08:2b:dc:c0:ef:56:49:d1:4b:6e:59:
         d9:bf:73:51:80:96:52:09:32:9a:d5:db:f9:33:aa:53:86:6a:
         29:88:eb:10:f4:22:c2:c2:c0:12:ed:88:92:51:b9:87:b4:ed:
         23:e8:bd:d6:02:fc:5e:92:60:e7:7d:70:7e:c1:13:53:91:d8:
         bc:f4:a5:b5:56:e9:3a:e7:c6:43:5c:26:68:e3:62:de:3b:2a:
         3b:3d:09:c5:fd:39:58:ab:7d:dc:2d:6a:46:82:63:bc:fd:5c:
         97:e6:84:66:da:ee:ee:c1:9c:0c:ca:42:0e:c1:95:90:fa:71:
         60:b7:03:3f:92:37:ed:f0:d8:31:6d:92:c7:a9:88:98:d8:1e:
         5d:bb:56:9c:c1:ad:35:8b:a1:34:14:b0:67:0d:07:4e:72:77:
         6c:74:88:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 13:08:47 2025 by rpki-client