Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/09b9e256-c3b8-3229-9b47-97d3cf22eec9.roa
File:                     09b9e256-c3b8-3229-9b47-97d3cf22eec9.roa (raw, json)
Hash identifier:          ykMDWyZtzjQUDZvTlK0qBC+lHXcWd0rwtY8MBrbz9ac=
Subject key identifier:   9B:43:1C:0F:BD:D9:D5:C5:3D:63:4F:92:15:E1:95:9D:77:A1:8F:5D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B3AEC433ABB298D00CC815740
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/09b9e256-c3b8-3229-9b47-97d3cf22eec9.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     51847
IP address blocks:        23.26.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:43:3a:bb:29:8d:00:cc:81:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=71fe473f-40d6-4ade-b73f-41321e12fe57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b0:de:6e:4f:77:6a:96:44:07:8e:3e:ce:7d:
                    25:01:d3:ae:d1:c2:23:85:9d:27:7f:83:d7:54:7f:
                    10:01:db:25:e4:07:54:45:8d:a2:fe:aa:42:f6:c1:
                    fb:dd:93:8d:1b:51:83:93:93:be:38:82:f9:2f:14:
                    3f:91:0b:36:a6:84:5c:31:85:75:64:f3:17:d6:96:
                    72:93:21:f6:90:0d:57:47:37:16:f5:99:14:8c:8b:
                    eb:ae:5a:20:f9:e7:b3:74:26:74:e1:a9:c9:a3:1a:
                    13:48:98:9e:b1:de:3d:fe:09:93:50:3e:2c:52:e5:
                    ed:21:fe:48:25:80:c8:ae:a7:30:6a:5a:90:92:58:
                    7f:73:d6:4f:0d:48:d9:85:95:d5:f3:ea:0b:e2:df:
                    5c:de:f5:50:e7:c7:ac:a6:63:9b:92:c2:cd:33:bd:
                    d3:00:1b:22:d7:d2:c5:a9:da:4c:06:c4:72:b1:df:
                    fa:58:28:41:1e:4f:88:75:e6:e8:44:7f:64:c5:cc:
                    05:38:c3:71:37:13:59:3f:96:ab:62:76:70:21:7e:
                    29:c7:fd:20:8a:91:df:d9:58:cf:a4:48:64:a8:ae:
                    84:ad:a4:bd:62:75:45:95:eb:36:87:5d:dc:77:e6:
                    b6:3a:9c:27:67:0e:b2:cc:d3:b0:e4:32:c6:a6:96:
                    df:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:43:1C:0F:BD:D9:D5:C5:3D:63:4F:92:15:E1:95:9D:77:A1:8F:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/09b9e256-c3b8-3229-9b47-97d3cf22eec9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:eb:ad:96:9b:2e:e8:cb:b4:05:6b:72:9a:e9:d8:87:4d:f3:
         68:d6:a8:84:28:26:ef:ee:88:13:ea:05:60:1d:29:20:f5:70:
         66:92:41:23:37:0d:7a:84:5b:b0:5c:6c:2b:d4:98:91:9e:8e:
         9a:93:0c:e9:22:6d:20:27:41:f5:6c:f2:1a:05:56:fe:53:36:
         a3:90:71:07:fe:d7:f5:1f:6d:d8:79:7f:79:57:2e:e2:ce:0b:
         cf:4b:6f:22:59:d4:f3:2c:c3:1a:8d:48:45:d2:fc:d3:f3:a3:
         79:2e:e1:79:00:a7:0e:2a:15:50:a2:19:0a:1c:ef:0b:1b:3b:
         91:07:54:29:24:86:6e:8b:e3:7c:25:3e:36:80:06:f3:11:3d:
         e7:14:95:f7:e2:ba:7f:bc:6c:74:fc:0b:c5:45:49:f6:30:34:
         fa:c1:45:b2:d0:cf:a6:68:78:55:ee:f1:45:9e:29:2a:e8:0d:
         25:fb:15:bb:ce:35:1b:3e:5a:e0:6d:38:fc:fe:89:36:3f:b0:
         de:a6:6e:79:7b:fe:57:ee:a3:f3:ef:ff:54:76:58:cf:16:2f:
         4a:d8:8d:85:d6:0b:bf:c7:26:2d:d1:98:63:a9:50:28:ea:0e:
         8c:e6:7f:ee:36:4a:a6:46:4a:60:1d:53:15:ad:be:50:7b:13:
         24:82:8c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:11:24 2025 by rpki-client