Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/02ef2a5e-f0da-3c88-bf7b-80cc5eee3ffa.roa
File:                     02ef2a5e-f0da-3c88-bf7b-80cc5eee3ffa.roa (raw, json)
Hash identifier:          vcL7YlC3biwJz4Wk/9xmbIZi8kBuyykMdaG+utcWnlQ=
Subject key identifier:   41:0E:38:6D:90:1F:9E:43:0C:31:4A:67:ED:3D:00:90:FD:CE:EB:E7
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F9E9889E5BE6F71F55F079D00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/02ef2a5e-f0da-3c88-bf7b-80cc5eee3ffa.roa
Signing time:             Sun 25 Oct 2026 13:00:13 +0000
ROA not before:           Sun 25 Oct 2026 13:00:13 +0000
ROA not after:            Sat 23 Jan 2027 14:00:13 +0000
asID:                     20473
IP address blocks:        23.26.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9e:98:89:e5:be:6f:71:f5:5f:07:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 25 13:00:13 2026 GMT
            Not After : Jan 23 14:00:13 2027 GMT
        Subject: CN=1c21549d-52d8-4c3c-9db0-22ed205309bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8d:08:c1:9e:19:cf:2f:25:86:81:8f:5c:b3:
                    17:9e:c6:a3:90:b9:d0:30:79:b7:26:97:74:95:26:
                    25:2c:54:b4:b4:fc:03:73:f3:e6:cc:1d:39:2f:76:
                    2d:36:75:45:5a:a1:01:ca:f5:52:4c:10:0f:6b:f8:
                    ad:0b:b5:ba:23:40:49:11:0f:6a:a8:4e:da:c5:d6:
                    88:68:0b:32:10:32:88:44:06:65:d3:7b:12:73:11:
                    24:39:7a:53:f0:8b:a1:dc:3b:c4:2e:de:c4:6e:d9:
                    24:dc:3f:ef:55:ee:42:05:d7:b5:ed:51:8f:f4:69:
                    06:53:7f:18:91:c8:bd:77:9f:53:35:1e:1c:25:3c:
                    5d:12:9e:ee:d7:87:d4:2a:0c:3c:77:f7:a0:87:a4:
                    c9:33:2a:61:82:66:75:d3:bf:43:29:a4:09:2d:6c:
                    fc:ac:b6:11:87:88:ab:33:42:6e:d7:01:22:14:7c:
                    42:20:73:eb:63:06:d3:99:ff:6e:9b:91:cb:79:4b:
                    54:75:4c:77:79:72:e2:9b:00:ba:60:35:4d:cd:39:
                    94:63:4f:99:71:a7:85:ad:60:20:3a:5d:04:6f:45:
                    d4:5b:b8:0d:06:38:10:c0:0f:31:a4:ac:99:e9:65:
                    19:77:52:d7:e6:6e:d7:f2:0f:3a:da:0f:b9:82:fb:
                    9d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:0E:38:6D:90:1F:9E:43:0C:31:4A:67:ED:3D:00:90:FD:CE:EB:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/02ef2a5e-f0da-3c88-bf7b-80cc5eee3ffa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:5c:b4:81:f0:ee:28:f0:ac:10:89:8b:e5:e2:b1:71:5d:2b:
         f7:86:5d:13:6b:8c:fc:43:5c:ff:98:e2:5a:c6:74:9f:10:a8:
         0c:cb:e8:2d:43:5d:5b:b5:6c:ba:06:3c:ab:3c:0a:ff:d4:d6:
         ed:be:34:59:2c:e6:b3:a4:73:e4:62:eb:9c:c6:11:6b:8c:00:
         2c:61:e9:3b:98:9d:21:9e:df:68:58:5a:2d:29:63:bf:b1:fa:
         c7:88:85:e4:81:fd:18:cd:24:32:54:93:4b:3a:67:2c:65:24:
         30:0f:8c:42:09:71:e5:2d:dc:86:6c:be:d8:d5:b2:96:1a:4c:
         a7:31:15:0b:c6:76:17:98:f4:fd:06:b8:e1:39:b6:83:fb:f8:
         0e:df:b7:12:13:0c:82:61:f9:db:75:ef:24:b0:b3:51:d4:75:
         95:90:84:5e:6f:2b:fe:28:4d:de:f4:30:d1:9b:ce:41:bb:bf:
         b0:c3:45:23:c8:d5:aa:e1:17:4b:ea:5e:80:24:00:7a:aa:88:
         0f:c8:b4:f8:ce:b4:9e:0e:c9:83:ff:6e:b8:81:75:b1:3b:66:
         14:fe:8a:65:ad:40:79:5a:3b:8c:52:73:35:7e:75:09:53:b8:
         7b:ee:ba:ae:0e:5c:47:69:19:1b:6b:d0:a8:9b:f1:0b:45:05:
         83:37:5e:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+emInlvm9x9V8HnQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MTAyNTEzMDAxM1oXDTI3MDEyMzE0MDAxM1owLzEtMCsGA1UEAxMk
MWMyMTU0OWQtNTJkOC00YzNjLTlkYjAtMjJlZDIwNTMwOWJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI0IwZ4Zzy8lhoGPXLMXnsajkLnQMHm3Jpd0
lSYlLFS0tPwDc/PmzB05L3YtNnVFWqEByvVSTBAPa/itC7W6I0BJEQ9qqE7axdaI
aAsyEDKIRAZl03sScxEkOXpT8Iuh3DvELt7Ebtkk3D/vVe5CBde17VGP9GkGU38Y
kci9d59TNR4cJTxdEp7u14fUKgw8d/egh6TJMyphgmZ1079DKaQJLWz8rLYRh4ir
M0Ju1wEiFHxCIHPrYwbTmf9um5HLeUtUdUx3eXLimwC6YDVNzTmUY0+ZcaeFrWAg
Ol0Eb0XUW7gNBjgQwA8xpKyZ6WUZd1LX5m7X8g862g+5gvudeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEEOOG2QH55DDDFKZ+09AJD9zuvnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDJlZjJhNWUtZjBkYS0z
Yzg4LWJmN2ItODBjYzVlZWUzZmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKhctIHw7ijwrBCJi+XisXFdK/eGXRNrjPxDXP+Y4lrGdJ8QqAzL6C1D
XVu1bLoGPKs8Cv/U1u2+NFks5rOkc+Ri65zGEWuMACxh6TuYnSGe32hYWi0pY7+x
+seIheSB/RjNJDJUk0s6ZyxlJDAPjEIJceUt3IZsvtjVspYaTKcxFQvGdheY9P0G
uOE5toP7+A7ftxITDIJh+dt17ySws1HUdZWQhF5vK/4oTd70MNGbzkG7v7DDRSPI
1arhF0vqXoAkAHqqiA/ItPjOtJ4OyYP/briBdbE7ZhT+imWtQHlaO4xSczV+dQlT
uHvuuq4OXEdpGRtr0Kib8QtFBYM3Xtg=
-----END CERTIFICATE-----
Generated at Sun Oct 25 20:12:52 2026 by rpki-client