Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/17739b7b-01c9-380e-a2fe-7dc84887300f.roa
File:                     17739b7b-01c9-380e-a2fe-7dc84887300f.roa (raw, json)
Hash identifier:          0xNqGjXDS0xrHQ4aHVqRsQ283cMxmgF4aTKPScDEVX0=
Subject key identifier:   2C:EE:1D:5A:84:50:BA:EB:21:DA:29:F3:E7:48:11:19:26:7C:9D:43
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D4461D67DA4BFE303758E0620
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/17739b7b-01c9-380e-a2fe-7dc84887300f.roa
Signing time:             Mon 23 Mar 2026 19:53:40 +0000
ROA not before:           Mon 23 Mar 2026 19:53:40 +0000
ROA not after:            Sun 21 Jun 2026 19:53:40 +0000
asID:                     11798
IP address blocks:        23.26.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:61:d6:7d:a4:bf:e3:03:75:8e:06:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 23 19:53:40 2026 GMT
            Not After : Jun 21 19:53:40 2026 GMT
        Subject: CN=3760cb00-4bbf-4346-aef6-41b896728b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f2:46:b4:17:76:60:ee:9b:da:ae:23:05:65:
                    3e:07:d4:64:a9:75:3c:4b:9c:cc:2a:97:97:b9:43:
                    29:ee:fe:a0:2f:bd:3f:dc:9f:bb:2e:ae:d6:a0:4e:
                    65:91:e3:fc:b2:2a:92:df:17:fc:35:93:e3:59:55:
                    65:c0:b1:be:ae:10:67:db:0d:77:b2:9d:25:e2:df:
                    2e:35:bf:d4:d3:56:bb:a9:a8:79:26:23:e9:b4:8f:
                    e4:a0:19:c9:58:95:54:e2:d4:75:76:97:cc:8c:34:
                    05:86:15:a6:39:23:8c:7a:83:ac:6b:92:1c:9f:ac:
                    70:c1:1f:e0:03:00:e9:07:0b:86:82:71:ea:0d:eb:
                    81:4e:33:b9:92:f5:17:04:6c:b1:bb:06:2c:7b:92:
                    e2:a6:f3:36:d8:08:61:62:b3:b7:be:c0:37:ed:5b:
                    ad:e7:8a:a5:4d:67:bc:24:0e:ad:e7:2f:c3:bb:e2:
                    c8:5e:87:2b:8d:91:98:5f:88:30:8f:5d:14:7b:2d:
                    23:2f:f1:0b:1c:a2:a5:fb:a6:52:dc:32:af:73:b1:
                    67:72:ef:7c:01:66:d5:bf:57:66:26:ba:0f:17:08:
                    00:ba:b3:d4:e4:4a:b7:cb:e7:55:96:e9:ad:7a:73:
                    9d:d5:41:32:0d:b1:d8:e8:93:95:7a:06:e0:06:4d:
                    a2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:EE:1D:5A:84:50:BA:EB:21:DA:29:F3:E7:48:11:19:26:7C:9D:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/17739b7b-01c9-380e-a2fe-7dc84887300f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:c1:06:79:1d:30:b9:54:0a:7f:d1:9c:6d:33:02:d9:99:96:
         d8:18:bd:8c:c7:be:0f:82:6d:97:1d:72:a7:c6:52:6b:2d:de:
         4e:1e:97:d3:76:51:3a:ba:22:4c:16:66:ce:be:c9:dc:53:44:
         dd:12:ef:7d:85:a8:c1:7c:dc:a9:4d:38:2a:e7:26:4d:ce:a8:
         e4:d8:e7:59:34:87:83:03:9a:50:0c:49:15:02:03:f4:e6:cc:
         76:f6:fb:48:f2:8c:5c:84:53:38:b8:db:05:87:76:79:a4:a9:
         24:3f:b9:7f:4f:90:c6:95:76:9d:a0:ac:eb:87:97:3a:af:a6:
         14:53:cb:02:70:d3:86:3d:0f:b9:20:df:26:97:c5:d6:ae:92:
         11:f8:dc:e9:c0:73:f5:95:18:7a:a4:07:b9:88:65:43:22:1e:
         eb:e1:72:5c:32:24:44:f7:e4:ae:ff:2d:28:c9:9c:61:52:21:
         2c:67:c8:94:c2:23:8a:49:fb:80:db:c4:bf:b9:7b:5b:50:a6:
         d9:67:73:d6:4c:04:50:0c:41:b1:50:39:94:60:57:cf:47:bd:
         72:3e:39:14:7d:c3:4a:49:39:87:3b:93:d5:42:fc:1b:d3:71:
         44:f5:04:5b:60:f4:b0:00:33:b3:84:ce:a6:fe:c2:9a:8e:25:
         83:bf:d2:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1EYdZ9pL/jA3WOBiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDMyMzE5NTM0MFoXDTI2MDYyMTE5NTM0MFowLzEtMCsGA1UEAxMk
Mzc2MGNiMDAtNGJiZi00MzQ2LWFlZjYtNDFiODk2NzI4YjY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/JGtBd2YO6b2q4jBWU+B9RkqXU8S5zMKpeX
uUMp7v6gL70/3J+7Lq7WoE5lkeP8siqS3xf8NZPjWVVlwLG+rhBn2w13sp0l4t8u
Nb/U01a7qah5JiPptI/koBnJWJVU4tR1dpfMjDQFhhWmOSOMeoOsa5Icn6xwwR/g
AwDpBwuGgnHqDeuBTjO5kvUXBGyxuwYse5LipvM22AhhYrO3vsA37Vut54qlTWe8
JA6t5y/Du+LIXocrjZGYX4gwj10Uey0jL/ELHKKl+6ZS3DKvc7Fncu98AWbVv1dm
JroPFwgAurPU5Eq3y+dVlumtenOd1UEyDbHY6JOVegbgBk2iJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCzuHVqEULrrIdop8+dIERkmfJ1DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMTc3MzliN2ItMDFjOS0z
ODBlLWEyZmUtN2RjODQ4ODczMDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxqXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGHBBnkdMLlUCn/RnG0zAtmZltgYvYzHvg+CbZcdcqfGUmst3k4el9N2
UTq6IkwWZs6+ydxTRN0S732FqMF83KlNOCrnJk3OqOTY51k0h4MDmlAMSRUCA/Tm
zHb2+0jyjFyEUzi42wWHdnmkqSQ/uX9PkMaVdp2grOuHlzqvphRTywJw04Y9D7kg
3yaXxdaukhH43OnAc/WVGHqkB7mIZUMiHuvhclwyJET35K7/LSjJnGFSISxnyJTC
I4pJ+4DbxL+5e1tQptlnc9ZMBFAMQbFQOZRgV89HvXI+ORR9w0pJOYc7k9VC/BvT
cUT1BFtg9LAAM7OEzqb+wpqOJYO/0mI=
-----END CERTIFICATE-----
Generated at Tue Mar 24 22:30:50 2026 by rpki-client