Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1b9df145-acd1-35cf-9b53-65d7d02c1f66.roa
File:                     1b9df145-acd1-35cf-9b53-65d7d02c1f66.roa (raw, json)
Hash identifier:          ce3Z4GyFKBK95aPNIjx0lXvEfjiI7ECJY5LIDMGPpWU=
Subject key identifier:   2E:BB:3A:35:1D:74:EB:3C:11:A4:01:9D:76:7A:52:86:19:2C:60:78
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D366F57791D78C4CF5C4A8B40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1b9df145-acd1-35cf-9b53-65d7d02c1f66.roa
Signing time:             Wed 18 Mar 2026 19:59:34 +0000
ROA not before:           Wed 18 Mar 2026 19:59:34 +0000
ROA not after:            Tue 16 Jun 2026 19:59:34 +0000
asID:                     401152
IP address blocks:        23.26.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:36:6f:57:79:1d:78:c4:cf:5c:4a:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 18 19:59:34 2026 GMT
            Not After : Jun 16 19:59:34 2026 GMT
        Subject: CN=7b23d586-9685-4fa7-9500-da9d51bc8ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:08:fa:db:08:99:22:16:23:11:57:48:75:5e:
                    f1:6d:57:e7:a2:dc:e5:dc:79:8b:71:db:b9:94:4d:
                    93:1d:51:4b:4f:dc:a3:40:51:1f:8c:7f:e0:26:71:
                    5a:f9:43:a1:2a:1a:8a:af:e3:d8:3b:1b:d5:c3:e4:
                    38:12:db:c7:57:11:06:92:2d:39:f1:4f:0b:9d:b2:
                    5b:d6:af:85:a2:6b:e6:72:a3:87:de:ce:37:76:68:
                    a4:fd:73:fd:d6:e4:13:6c:59:05:1c:af:de:6a:27:
                    fd:be:87:97:af:4e:fe:dd:7f:08:bb:63:89:cd:4b:
                    5a:bf:f6:cd:66:00:01:db:bf:7e:fd:b0:79:89:e0:
                    e6:20:7d:e8:c1:01:94:07:36:2e:86:4d:01:37:68:
                    a7:d7:4e:0b:46:29:ba:86:89:ff:bf:57:73:a1:7e:
                    93:45:ae:a9:3b:ff:23:11:3e:d8:57:bb:c9:bb:2a:
                    7e:e3:74:12:a7:5d:7c:26:70:b2:8c:c9:b2:f4:ab:
                    f5:de:39:34:02:1a:d2:72:86:0f:c3:f2:ff:f8:6e:
                    3f:6b:fa:a8:27:65:6a:e9:04:97:cc:6c:8c:5f:16:
                    2c:81:3e:9d:32:07:84:23:09:fd:c8:55:4e:a8:d1:
                    06:98:37:e5:24:a1:e6:e9:65:6c:fb:83:ca:5a:d0:
                    95:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BB:3A:35:1D:74:EB:3C:11:A4:01:9D:76:7A:52:86:19:2C:60:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1b9df145-acd1-35cf-9b53-65d7d02c1f66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:75:db:07:f4:46:ec:b2:52:8d:3a:ba:b3:30:5b:53:b3:77:
         db:05:e7:95:4b:d3:41:bd:27:7e:3c:c7:34:d7:11:4f:bf:82:
         de:0b:d8:4f:28:fd:74:f9:e8:dc:d1:e8:39:09:93:98:33:eb:
         d4:db:06:8b:7b:11:3f:99:67:ad:ce:66:e8:e5:fa:40:2d:38:
         79:07:3f:76:6d:c6:f4:15:a7:9a:b1:22:a2:e5:85:57:20:a2:
         33:9e:b3:b2:b6:99:5c:66:18:23:9c:4e:35:ca:b5:04:20:cc:
         b7:9f:be:fb:13:a9:c0:e2:36:6b:bd:2f:b2:2c:a1:07:68:d9:
         f6:b6:42:6b:e1:60:ba:8c:63:fb:97:91:53:e6:71:1e:4c:26:
         3b:8c:1e:1f:2f:4f:a6:29:33:d5:ae:75:cb:d9:58:dd:8f:8c:
         bc:b4:aa:19:57:b0:0a:02:01:20:96:d2:8a:99:45:aa:16:e2:
         3e:30:72:41:1c:3d:10:29:8f:a5:15:9d:7d:a8:0e:81:4d:b1:
         ec:c9:bc:b8:31:30:a6:3e:92:00:9e:eb:94:84:8c:d2:00:d3:
         4a:7a:3a:f1:5f:11:e8:c6:36:d4:d1:d6:c2:18:59:d0:76:d0:
         bd:06:b7:da:25:3b:05:87:30:76:67:d0:47:b6:9c:24:dc:cd:
         ce:b3:36:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:55:30 2026 by rpki-client