Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0a7b65f9-491c-3255-83f6-ba2c48e91345.roa
File:                     0a7b65f9-491c-3255-83f6-ba2c48e91345.roa (raw, json)
Hash identifier:          5XpFs0mXLk87AoQXh65OYj9prJAdd8XqwvCPTSKtmfg=
Subject key identifier:   74:79:F0:F5:6D:A6:D7:86:03:FD:2A:81:D2:56:63:0E:F9:37:BA:03
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AD23C319A15D220797DBE1A80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0a7b65f9-491c-3255-83f6-ba2c48e91345.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     401152
IP address blocks:        23.26.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:31:9a:15:d2:20:79:7d:be:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=78216fd6-968b-47bd-a7e4-3fb1fb38d37a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:42:ca:d5:78:c6:59:05:32:16:b7:ff:f2:f3:
                    10:8d:bf:7c:19:65:2f:a6:75:f7:cd:d0:b6:0b:23:
                    37:bb:4f:03:c6:a6:12:d1:70:cf:09:1c:fa:37:ce:
                    cf:02:85:42:46:0b:65:44:e7:59:d1:66:89:b9:11:
                    85:f1:94:43:92:6a:c3:ae:4b:ef:a0:41:1f:9b:2d:
                    0b:d1:41:a2:3a:71:b2:ca:f3:d3:9a:9a:cb:78:e6:
                    bb:0c:15:1d:ac:50:76:60:47:29:a4:60:b0:61:44:
                    32:ef:2f:4b:ef:17:50:c9:1f:a8:3c:9c:7e:23:1f:
                    ec:4d:58:e3:fe:67:9e:1a:f4:b3:1c:33:f7:ba:f0:
                    81:54:c6:da:a0:e1:1e:89:3e:9b:10:69:28:3c:a1:
                    25:a9:81:88:2a:a0:79:85:40:cb:eb:11:e3:86:19:
                    af:62:cb:d2:f9:c1:c2:c0:1f:27:e5:da:61:a6:c5:
                    b8:d4:1f:19:28:19:06:e8:39:75:26:08:5a:55:b3:
                    29:a3:f0:4b:48:b9:79:fb:9a:3f:35:51:f3:e5:21:
                    13:0a:a7:cb:78:91:36:0b:8b:90:a8:8d:a1:10:b0:
                    3a:e4:93:bd:75:6b:de:b9:fe:2d:32:a6:06:8e:c2:
                    cd:28:a8:7c:b5:d5:98:1b:34:27:1d:02:25:c5:ae:
                    aa:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:79:F0:F5:6D:A6:D7:86:03:FD:2A:81:D2:56:63:0E:F9:37:BA:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0a7b65f9-491c-3255-83f6-ba2c48e91345.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:8f:ee:b5:3d:5a:ac:f9:f5:f0:b3:fd:85:52:86:a4:f3:87:
         91:4c:1a:63:e9:7e:72:d1:ae:e6:ba:46:08:59:bb:a3:61:33:
         e6:45:93:24:bb:37:b2:10:c1:41:5c:86:10:9b:8c:f0:67:2e:
         2f:4f:b7:ee:57:8e:b2:9e:5b:04:24:bf:fc:92:4a:33:bf:42:
         f2:f6:c0:0c:1c:3c:2f:3a:61:39:f3:ff:53:a5:aa:2d:91:0b:
         90:0c:e7:22:af:13:04:3d:f4:73:d4:41:a8:ad:15:7e:8a:db:
         ec:1e:0c:a3:0f:bf:78:14:2a:4c:c9:b5:2a:0b:8c:29:ee:14:
         0a:ab:66:2b:e3:14:bc:32:ab:bb:cf:59:cd:f1:dc:fc:cc:5b:
         d7:de:0f:a6:66:5b:07:fa:8a:09:36:5b:9c:53:ed:52:19:6f:
         26:97:49:ae:8d:88:83:90:f4:c3:b4:01:58:95:a2:c6:8e:af:
         0f:ba:05:17:5e:8f:18:db:70:f1:5b:d5:d4:fb:2e:37:de:4c:
         44:e5:93:b2:77:6a:4f:88:44:c4:b0:83:bd:bc:eb:cd:7d:7b:
         68:64:fc:c8:0e:ce:f0:52:54:4f:6d:0e:ae:1b:67:f4:c2:6d:
         8b:cb:30:30:9a:72:51:6a:ec:20:a0:7a:94:b6:d6:bd:27:02:
         39:bb:f2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:15:40 2025 by rpki-client