Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/02ef2a5e-f0da-3c88-bf7b-80cc5eee3ffa.roa
File:                     02ef2a5e-f0da-3c88-bf7b-80cc5eee3ffa.roa (raw, json)
Hash identifier:          JIXKctZgjh5QdrGMnceLU/kXMqcRA52tXHg87jrn+nM=
Subject key identifier:   2C:BE:FA:4D:BB:FE:92:68:EC:1F:26:1B:BA:C1:60:FE:7E:6C:CD:F4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AD7D13336CB2CE8AF6CF95D00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/02ef2a5e-f0da-3c88-bf7b-80cc5eee3ffa.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     20473
IP address blocks:        23.26.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:33:36:cb:2c:e8:af:6c:f9:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=61f5e017-ce3c-4bd8-a0bd-6a67c3db3fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f5:c5:28:29:8d:c1:2c:c3:d8:72:72:ab:ac:
                    76:1e:dd:a7:2d:c8:82:06:00:8d:42:73:1e:2a:36:
                    07:60:64:25:c7:51:d8:20:7f:0d:9b:77:d7:fb:20:
                    6e:15:07:8e:4b:32:23:8e:e6:f5:7e:91:44:5c:fe:
                    74:27:ab:b6:e5:00:27:c3:8c:85:10:ef:22:87:a3:
                    7a:47:5f:89:d8:76:20:a1:10:45:a6:d4:d3:58:83:
                    6b:ea:fb:47:17:e7:13:d4:95:15:27:6f:35:c8:0b:
                    64:48:3f:9c:43:3e:ea:c0:a9:ad:71:ae:46:ee:8e:
                    6e:ed:be:06:1c:59:74:9b:01:3a:48:80:98:14:4c:
                    60:aa:78:12:01:77:eb:e2:4d:52:9f:7f:ea:bb:44:
                    6e:f6:36:71:74:6c:20:cd:c4:46:7b:ec:f4:db:db:
                    b5:e8:1f:73:20:c5:a2:0b:8c:dc:84:a5:ab:75:0b:
                    28:42:27:97:26:85:c8:84:cb:95:6e:d1:ac:0e:2f:
                    22:e8:ce:5b:7e:cb:e7:d8:1d:98:ac:6c:56:27:ba:
                    d2:5b:5b:27:98:1e:80:2f:c7:2d:c4:19:8e:82:97:
                    a7:82:f7:c3:c0:d5:05:44:60:f9:b7:bd:e3:3b:eb:
                    a0:81:ea:14:b6:cf:fb:33:08:ff:ad:5d:aa:a1:39:
                    8c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BE:FA:4D:BB:FE:92:68:EC:1F:26:1B:BA:C1:60:FE:7E:6C:CD:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/02ef2a5e-f0da-3c88-bf7b-80cc5eee3ffa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:3d:eb:89:bb:3d:15:e9:b8:97:68:76:e1:2f:81:22:c4:28:
         93:4f:33:a2:b6:42:d0:7e:8b:43:17:16:81:c4:6f:b9:5f:67:
         f2:72:76:32:aa:23:12:4a:2b:a3:42:b5:a5:46:dd:ce:e8:68:
         ef:82:a1:95:01:ae:41:97:f0:3c:17:0e:cb:60:ac:fe:4c:8b:
         28:0b:6e:48:24:f9:98:20:73:d1:11:a6:7a:73:4c:24:bc:c6:
         ff:cf:be:f9:4a:79:8a:ed:c4:84:e8:1b:fa:80:ce:75:f0:68:
         6d:92:a8:a0:c2:6f:d7:45:08:a8:0f:f9:f6:dc:44:34:49:2b:
         a0:50:b8:77:72:c7:69:e4:9b:31:27:1c:34:7d:71:ae:d6:dd:
         39:49:c9:6b:83:99:5a:24:8f:f7:56:8f:2a:c1:89:18:b5:53:
         68:11:5b:ec:84:6c:2c:21:97:0f:37:cb:01:20:26:f9:ae:a2:
         35:37:64:67:c1:e2:9d:ec:9c:a1:c8:7e:66:c7:08:80:29:6b:
         bd:34:73:aa:0d:4b:b8:35:38:b1:bc:da:8d:a5:d0:e1:2e:d6:
         07:0f:ec:dc:78:05:5f:69:03:ec:1a:2b:56:09:5e:fc:d5:14:
         73:04:1d:f1:41:40:c4:71:69:47:48:e2:21:44:57:8c:f7:fd:
         d8:b7:2e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:15:37 2025 by rpki-client