Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0ea8b15f-a4ac-3803-8631-c36553e95538.roa
File:                     0ea8b15f-a4ac-3803-8631-c36553e95538.roa (raw, json)
Hash identifier:          juu4EWD54GTotREt146UkuF+bOVTIV0mrZWB3s131EE=
Subject key identifier:   A9:88:08:1A:5B:00:29:CB:E6:C5:49:89:07:47:B7:AA:1B:63:4F:B3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584BB45D41165E54259945F52900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0ea8b15f-a4ac-3803-8631-c36553e95538.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     49770
IP address blocks:        23.26.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:41:16:5e:54:25:99:45:f5:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=e15aa562-ba11-45cc-8b6a-06bf2e925c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:40:a4:bf:d2:cb:f6:c9:37:2d:6e:af:00:ea:
                    8f:dc:3c:53:a6:80:3e:21:fc:26:f5:75:ab:5f:a6:
                    1b:17:e8:60:6a:16:f7:83:1c:b6:01:70:b2:5f:90:
                    19:0f:08:5d:36:5d:7d:28:ed:e2:22:62:87:51:b7:
                    63:cf:2f:a8:57:d7:bb:8b:0f:68:17:86:fa:a0:83:
                    22:fa:09:9a:0e:39:a4:4b:ff:7e:7f:40:78:46:67:
                    d9:dd:3a:ac:4c:73:dc:e1:e6:4c:be:d9:14:7a:73:
                    47:ea:d2:18:30:71:b1:02:01:2a:55:29:ff:01:08:
                    d8:84:ee:fe:4e:0d:a0:63:8f:ac:dd:87:79:34:20:
                    64:ba:39:08:2f:ad:e0:0f:cc:ac:f1:5f:7e:92:0e:
                    6b:06:f7:08:13:e6:17:1a:66:b7:b7:e4:6f:e8:af:
                    b4:4c:23:2f:be:80:41:ab:b3:8b:dc:21:ae:95:d6:
                    ce:ee:63:7c:fc:7b:7d:00:c0:62:d7:27:05:db:61:
                    7d:b8:59:83:6a:7e:60:5e:2f:47:56:bb:16:0b:ec:
                    ac:2c:90:15:51:ed:e2:79:db:5e:df:f9:c4:6c:5d:
                    ad:65:4a:17:37:77:19:0f:1e:4b:95:09:9a:22:ed:
                    e6:80:7d:74:a5:cb:56:1a:6a:0d:d6:5d:23:75:b3:
                    de:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:88:08:1A:5B:00:29:CB:E6:C5:49:89:07:47:B7:AA:1B:63:4F:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0ea8b15f-a4ac-3803-8631-c36553e95538.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:88:0b:31:82:f8:f6:4a:17:78:a4:ca:a4:29:15:ae:14:4f:
         70:5c:c3:c9:f4:db:fc:ff:34:d0:11:73:d0:f4:34:52:31:ed:
         bf:6c:7c:a0:5d:20:01:1b:f5:65:81:6c:22:7a:67:9d:6b:a7:
         d4:e0:51:fe:ac:b7:a8:c2:12:c8:da:c2:1e:6e:51:4c:aa:11:
         a3:ca:cd:79:fe:7d:08:d9:01:55:03:a0:9d:14:0b:9f:06:f8:
         3a:0f:f9:5a:24:2e:a4:da:73:86:02:2e:db:c6:7b:c5:95:aa:
         cc:bc:a9:df:c4:f8:9d:5d:28:be:df:fa:ab:3a:b0:01:0f:99:
         cb:3a:89:86:d8:74:53:13:32:ff:62:bd:6e:e1:9e:a3:77:cb:
         e8:e6:d4:ca:86:9d:59:8b:f4:68:bd:64:20:02:12:cd:ed:d9:
         54:1d:12:95:92:bb:85:ab:01:29:5e:f3:df:01:b1:f0:f8:60:
         eb:3d:a1:d9:17:4b:62:0f:f2:16:48:fd:43:0d:0b:fa:83:1e:
         f3:21:f0:35:07:38:78:fd:01:99:7c:de:5e:9a:7b:8a:9d:a8:
         30:77:82:a2:59:68:0f:7b:6d:48:17:fc:45:48:32:d0:83:67:
         48:84:91:d3:3a:92:49:f7:1f:27:99:ce:3f:52:e5:c0:e2:e8:
         d6:3c:84:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 16:49:18 2025 by rpki-client