Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1696e860-56ef-3c0e-b5f5-6968d90bcc59.roa
File:                     1696e860-56ef-3c0e-b5f5-6968d90bcc59.roa (raw, json)
Hash identifier:          1oI2ma/qqKd+IfrmJly41Ud1tfWsOgpIsyBPBo0I3vE=
Subject key identifier:   CE:74:82:B2:9D:B9:54:E7:B9:76:14:34:AB:F9:18:6D:08:63:37:75
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584DE150AA229F4D1D05F172EC40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1696e860-56ef-3c0e-b5f5-6968d90bcc59.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     10753
IP address blocks:        23.26.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 02 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:aa:22:9f:4d:1d:05:f1:72:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=b5b18b96-9188-4fec-a2c6-29ef909a4d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:dc:dc:b5:aa:85:7b:fd:c4:d4:dc:00:22:af:
                    13:f3:7a:3e:75:05:12:3c:8b:0a:3e:d8:f9:be:12:
                    bc:58:5d:ca:c8:8f:d2:1d:ef:93:e4:b6:67:29:ba:
                    cb:38:f1:13:15:36:bf:fb:d6:f0:75:80:ef:cc:a9:
                    29:9f:72:c2:0f:ac:c6:9b:08:1a:5f:c9:1b:ee:21:
                    5c:70:f7:67:eb:f5:df:23:73:6d:65:16:38:e3:e2:
                    d9:1e:9d:72:80:7c:06:5d:ca:1d:41:a9:06:db:e4:
                    4a:85:7e:11:e2:7e:cf:9b:12:cb:e3:76:af:94:7b:
                    71:76:d0:8b:7e:e6:00:b2:b7:f2:05:03:3b:39:94:
                    dc:77:82:b7:95:af:b6:7b:79:6e:dd:2d:a2:32:fe:
                    ac:a7:11:76:4d:41:23:be:9a:89:6f:7d:dd:38:58:
                    24:3b:23:99:63:27:98:ef:a4:48:17:6e:09:23:97:
                    d2:85:b6:b0:39:00:d4:bc:47:19:63:92:28:b8:b4:
                    69:47:f1:6c:12:45:0a:2a:d0:f1:b6:fe:22:1c:22:
                    4a:67:60:4d:de:ea:07:4b:f6:7b:61:75:9a:bd:7f:
                    91:de:5b:72:52:6c:99:b0:dd:80:b7:92:a5:31:f5:
                    13:85:54:9f:b3:78:93:52:2a:f5:89:25:4c:0e:9e:
                    ec:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:74:82:B2:9D:B9:54:E7:B9:76:14:34:AB:F9:18:6D:08:63:37:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1696e860-56ef-3c0e-b5f5-6968d90bcc59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:7b:50:4d:0a:73:c1:b7:ac:cc:54:aa:bd:cd:97:80:ef:f0:
         f9:fc:a2:8d:eb:e3:d7:6f:fe:75:8f:f6:25:49:b4:93:bd:0c:
         40:42:01:4c:37:5d:db:ac:94:03:14:e0:62:67:d2:62:eb:73:
         b6:6c:aa:75:18:ad:f7:84:ba:d0:b1:c6:fd:41:fa:12:ec:51:
         0e:4e:37:eb:c3:49:37:36:4b:76:bf:64:10:26:1b:aa:a1:0b:
         4b:0b:39:1f:df:c9:36:ac:58:88:54:f1:26:3a:53:66:c9:b0:
         b5:25:f2:c8:8d:73:0f:73:e0:7b:ce:26:56:e5:0d:e1:51:a6:
         ef:1b:7c:24:13:78:64:5c:04:31:21:43:49:ae:a1:87:e7:57:
         9c:10:f4:91:37:d9:64:20:14:f5:aa:c9:99:d2:fc:26:49:7e:
         e4:3a:80:fe:e2:e7:da:e2:87:e3:2f:f3:63:60:fe:87:b9:27:
         7a:ac:d6:9b:cb:5e:c7:9b:1c:3a:4f:f1:c4:68:22:e7:2f:24:
         bc:23:8c:4b:8b:01:19:65:76:3b:75:7a:d4:a1:24:b3:84:ce:
         a2:dd:b7:19:80:48:14:0b:f6:fd:6b:7c:41:50:ee:d2:6a:63:
         f2:f0:e8:20:eb:25:75:fa:c9:30:6f:14:b6:dd:db:43:27:43:
         62:af:24:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 21:54:49 2026 by rpki-client