Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/09b9dbe6-3335-3c82-8c41-818f89fa3dfb.roa
File:                     09b9dbe6-3335-3c82-8c41-818f89fa3dfb.roa (raw, json)
Hash identifier:          yGzMkYioOcYxN6sBDfZlWi0gaCAen85Q9wBsJJSobZQ=
Subject key identifier:   29:2C:93:73:D4:3D:F1:A2:33:65:C9:82:15:D9:C5:28:F6:CC:79:10
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EA8EC376BD27F4EBC22B49440
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/09b9dbe6-3335-3c82-8c41-818f89fa3dfb.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     397373
IP address blocks:        23.26.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:37:6b:d2:7f:4e:bc:22:b4:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=e79e3328-bcb8-41fe-9341-455d58893c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5b:87:6d:57:32:60:d4:4c:42:27:68:48:42:
                    41:c8:aa:58:ab:b3:69:08:0b:46:5f:38:f5:b2:fa:
                    6d:30:d5:80:82:5e:11:29:6b:c4:1d:c8:5b:7e:cb:
                    1a:a8:ef:70:5e:de:fc:fb:bd:36:5f:da:a6:f4:4e:
                    32:61:b3:b0:7b:3c:ec:28:08:90:ca:86:f8:91:6a:
                    37:e4:20:c9:dd:5f:71:42:e1:cc:d3:60:64:22:7c:
                    61:aa:b8:41:e2:ec:34:59:dd:d5:71:22:77:f8:8f:
                    e9:69:02:6b:36:22:46:a5:40:77:b8:e7:e3:0e:50:
                    12:d5:a0:09:0e:e5:78:7c:4a:5b:80:96:68:1c:1c:
                    c5:bf:07:2c:dd:e2:ae:52:76:bc:b8:a1:9b:bb:fa:
                    ba:13:29:99:32:77:e7:34:10:a6:4b:c0:a7:5e:fe:
                    18:e8:12:66:96:95:4c:66:43:60:bd:12:9f:08:d6:
                    bd:b6:38:f3:ce:51:2a:f0:d4:cb:50:63:eb:08:44:
                    0e:18:83:13:7c:ac:b7:8c:a7:7a:5b:e2:fb:1f:b6:
                    e2:e2:fd:7f:65:d8:74:97:c4:eb:48:37:18:87:80:
                    65:d1:5c:3d:7f:6b:36:1c:23:fd:a4:b8:1a:12:ac:
                    f5:9e:fa:ab:d0:60:96:ee:78:6d:2d:49:ef:b0:41:
                    af:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:2C:93:73:D4:3D:F1:A2:33:65:C9:82:15:D9:C5:28:F6:CC:79:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/09b9dbe6-3335-3c82-8c41-818f89fa3dfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:bd:bd:84:25:a8:5d:fc:a7:f2:87:38:3b:b7:97:40:19:51:
         b9:6a:24:c3:28:3d:a6:7e:a7:d0:72:dd:22:11:42:78:99:cf:
         bd:c7:40:33:c1:9b:cc:f8:9f:cb:60:7a:d5:a9:53:94:02:31:
         0f:1a:51:28:ac:52:f7:12:4f:33:b1:8d:c0:c3:f5:85:f5:ce:
         a0:7c:a8:92:a9:02:c0:0a:9c:30:aa:03:dc:1f:00:ce:85:4c:
         15:81:9b:0c:cb:8d:31:76:cd:78:51:8a:99:2f:b6:e4:31:77:
         03:12:11:a2:2c:2a:77:67:79:7b:72:f5:1e:4f:a8:45:ec:5a:
         8f:e8:4d:51:ee:3c:4f:5a:38:46:79:87:51:32:5e:08:9f:97:
         ad:44:96:87:fc:40:16:85:df:0a:26:0a:cd:e3:97:63:a1:b2:
         e3:c6:06:9f:c3:bf:dd:39:1c:79:cb:86:16:a2:fe:54:0c:d9:
         d0:e4:7e:09:53:2a:8e:ad:43:b0:b5:1e:5e:ff:ec:39:ea:82:
         44:c2:fd:6d:1c:2d:d9:0f:e9:49:ac:63:a4:84:74:ae:a2:33:
         30:5a:6a:9e:bc:a6:15:42:7e:ed:49:98:49:6c:5a:c1:ac:32:
         da:7a:e1:65:38:8c:be:95:63:6e:92:80:81:f3:6d:1e:e2:bb:
         fe:56:1a:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6o7Ddr0n9OvCK0lEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDcyOTEzMDAxMloXDTI2MTAyNzEzMDAxMlowLzEtMCsGA1UEAxMk
ZTc5ZTMzMjgtYmNiOC00MWZlLTkzNDEtNDU1ZDU4ODkzYzlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11uHbVcyYNRMQidoSEJByKpYq7NpCAtGXzj1
svptMNWAgl4RKWvEHchbfssaqO9wXt78+702X9qm9E4yYbOwezzsKAiQyob4kWo3
5CDJ3V9xQuHM02BkInxhqrhB4uw0Wd3VcSJ3+I/paQJrNiJGpUB3uOfjDlAS1aAJ
DuV4fEpbgJZoHBzFvwcs3eKuUna8uKGbu/q6EymZMnfnNBCmS8CnXv4Y6BJmlpVM
ZkNgvRKfCNa9tjjzzlEq8NTLUGPrCEQOGIMTfKy3jKd6W+L7H7bi4v1/Zdh0l8Tr
SDcYh4Bl0Vw9f2s2HCP9pLgaEqz1nvqr0GCW7nhtLUnvsEGv4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCksk3PUPfGiM2XJghXZxSj2zHkQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDliOWRiZTYtMzMzNS0z
YzgyLThjNDEtODE4Zjg5ZmEzZGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxqYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADC9vYQlqF38p/KHODu3l0AZUblqJMMoPaZ+p9By3SIRQniZz73HQDPB
m8z4n8tgetWpU5QCMQ8aUSisUvcSTzOxjcDD9YX1zqB8qJKpAsAKnDCqA9wfAM6F
TBWBmwzLjTF2zXhRipkvtuQxdwMSEaIsKndneXty9R5PqEXsWo/oTVHuPE9aOEZ5
h1EyXgifl61Elof8QBaF3womCs3jl2OhsuPGBp/Dv905HHnLhhai/lQM2dDkfglT
Ko6tQ7C1Hl7/7DnqgkTC/W0cLdkP6UmsY6SEdK6iMzBaap68phVCfu1JmElsWsGs
Mtp64WU4jL6VY26SgIHzbR7iu/5WGmA=
-----END CERTIFICATE-----
Generated at Wed Aug 12 01:14:49 2026 by rpki-client