Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05cc1c8d-270a-3933-a4b8-901b64d438bb.roa
File:                     05cc1c8d-270a-3933-a4b8-901b64d438bb.roa (raw, json)
Hash identifier:          +eJMWg1KO66yC6azyfY5OXC6Hm1Lr1YHtM31lqIu7JU=
Subject key identifier:   7A:8F:1A:AA:16:30:82:71:9B:F9:4B:23:D7:8A:48:A3:63:CB:27:5B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D4461D5F84AADE0D6AB392080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05cc1c8d-270a-3933-a4b8-901b64d438bb.roa
Signing time:             Mon 23 Mar 2026 19:53:40 +0000
ROA not before:           Mon 23 Mar 2026 19:53:40 +0000
ROA not after:            Sun 21 Jun 2026 19:53:40 +0000
asID:                     11798
IP address blocks:        23.26.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:61:d5:f8:4a:ad:e0:d6:ab:39:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 23 19:53:40 2026 GMT
            Not After : Jun 21 19:53:40 2026 GMT
        Subject: CN=69c7d174-d001-404d-8bd9-bb0e980e5840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d5:05:24:e2:71:54:1f:8e:7c:ae:3c:1c:46:
                    a7:fd:1e:e6:49:00:a5:83:60:2b:3d:fd:e2:b4:c6:
                    e7:64:13:91:21:43:0b:c3:53:bd:77:ea:94:f9:02:
                    29:13:92:a6:c7:21:07:ee:5c:74:d5:c5:30:1d:6a:
                    b9:b2:1f:c7:15:59:6f:f8:34:c8:b5:88:bc:43:7f:
                    15:c9:af:77:9d:41:a6:5b:14:fd:4a:68:7c:28:eb:
                    0c:69:1a:dd:72:51:7c:f3:98:cc:17:c3:1e:c8:b6:
                    39:26:86:b9:08:6d:c2:c9:ad:ee:9c:b4:21:52:74:
                    5b:61:1c:45:ed:da:51:cb:3d:a5:0f:c2:41:f5:35:
                    a8:5b:21:ef:6b:ca:b0:57:f5:82:33:16:f1:c6:41:
                    19:6d:44:1f:2b:b2:ee:cf:4a:1d:b9:bc:9d:ce:e8:
                    1d:e4:ec:50:d5:ee:3a:be:c6:16:60:53:21:e8:af:
                    2e:86:cc:5f:dd:82:e1:57:a8:fc:39:a0:bd:dc:08:
                    22:7a:e1:d2:e0:ae:8c:b0:c9:03:f6:78:f1:71:06:
                    1d:bd:dd:24:f4:b1:9e:8a:b7:1b:cd:66:61:4b:de:
                    b8:25:27:ab:d2:df:c6:cc:a7:5e:1d:ba:b0:a9:7a:
                    8f:0e:ca:77:37:09:54:e9:57:dc:b4:c1:a3:85:e8:
                    12:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8F:1A:AA:16:30:82:71:9B:F9:4B:23:D7:8A:48:A3:63:CB:27:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/05cc1c8d-270a-3933-a4b8-901b64d438bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:f4:4a:9b:5a:30:9e:16:58:9d:d6:67:bf:a1:52:eb:a4:b8:
         f9:d1:51:47:13:51:96:2e:35:8c:e5:6a:c2:5f:61:27:62:fb:
         2e:7d:08:4f:8c:5a:3d:ea:dc:4f:48:9e:28:89:2c:04:35:28:
         6a:47:1b:3d:6a:1f:52:17:a3:66:d3:25:eb:4d:c9:5d:27:b6:
         16:f4:a5:c7:ca:b7:5b:93:e5:64:08:84:23:8c:c6:e3:57:a2:
         5a:3a:c8:3a:d3:b6:3e:cc:f5:89:36:c0:26:b6:01:96:df:4b:
         42:fb:8e:9d:a8:da:cd:de:09:b5:85:9c:9f:6d:4d:1d:d8:49:
         6f:4e:eb:10:9d:df:34:ff:da:8d:ab:ea:08:54:2b:2e:76:e3:
         2b:5e:f8:7b:8f:53:d8:77:4e:da:60:1d:64:0e:96:53:e8:2f:
         ee:a9:0b:ba:e2:11:34:ec:dc:e0:27:16:53:cd:06:2f:82:29:
         d6:b5:af:a7:64:d4:4c:2d:a5:5f:93:12:f0:78:8a:ad:77:2d:
         68:f1:7e:3b:ae:58:85:d7:ee:12:4d:f4:d3:b6:15:a8:17:64:
         f8:f5:24:3a:e1:04:cb:50:a8:a1:09:4d:da:b1:9f:7e:9f:cb:
         39:a7:24:5b:c8:f6:a1:0c:f1:90:84:63:f4:d1:28:57:e8:e1:
         b8:f3:d4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 22:32:01 2026 by rpki-client