Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21d35fec-e77d-325a-9f96-16ba812ada2d.roa
File:                     21d35fec-e77d-325a-9f96-16ba812ada2d.roa (raw, json)
Hash identifier:          nu0du/Q2hJsx890OmxoKYOWIIsnyF2YgH7ExiR7Eqog=
Subject key identifier:   95:89:95:91:47:6F:22:E6:C3:5B:9D:05:DA:3E:A9:66:82:C0:27:E1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F549D9A2040CA8128A24297C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21d35fec-e77d-325a-9f96-16ba812ada2d.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     198376
IP address blocks:        23.26.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:9a:20:40:ca:81:28:a2:42:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=7cd79462-f803-49fc-b1d3-fc9f2aabb8e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:73:13:86:c3:da:a6:fc:99:4b:68:fa:04:20:
                    5d:7b:79:8b:83:d6:5d:87:cc:6e:77:49:df:7f:d0:
                    85:a6:1a:59:b3:ac:47:70:84:2a:62:fe:7b:32:41:
                    7e:e4:6f:c1:20:60:85:ac:5f:d5:57:1e:9f:0d:cb:
                    a7:3f:e4:16:7b:f8:83:ce:1c:34:a6:d1:bc:8a:57:
                    a6:ce:5a:9d:ab:9b:b0:8a:0f:aa:0f:22:48:51:54:
                    c0:5d:95:26:30:56:e3:6e:d3:15:05:81:c6:54:cb:
                    de:9e:da:24:0c:c8:d7:43:4f:88:64:1a:0e:9d:5a:
                    71:e7:ee:0c:50:63:8b:ad:69:14:71:2a:ef:ab:67:
                    e7:e6:66:23:2a:72:dd:f5:20:87:25:be:aa:5e:2b:
                    56:93:5f:1b:43:91:5c:73:35:e4:d0:43:44:ca:50:
                    f2:7a:da:0a:de:26:77:ee:a3:57:27:7b:35:bf:16:
                    7c:ff:e8:c3:3b:ac:56:72:4a:71:79:6b:e2:cc:ee:
                    c1:7c:56:a4:67:d2:ea:83:84:29:24:c1:45:8f:b7:
                    7f:72:c7:f5:a8:a2:b2:c9:0e:37:5c:b8:68:2e:b6:
                    e3:75:4a:57:fe:f8:b0:a9:a3:e7:cf:a0:d7:e0:5b:
                    02:65:d5:8c:76:c3:6a:82:e9:d4:43:51:95:c4:66:
                    b3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:89:95:91:47:6F:22:E6:C3:5B:9D:05:DA:3E:A9:66:82:C0:27:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/21d35fec-e77d-325a-9f96-16ba812ada2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:65:16:b7:b9:cb:d2:5c:8e:3f:dd:c2:23:8e:ce:42:44:af:
         20:45:8e:24:97:c9:90:d2:6c:1a:df:e2:4b:89:61:b8:eb:19:
         18:75:6d:bd:2d:15:5d:7a:f5:71:34:c3:a1:33:a4:a3:d2:14:
         d2:23:7f:01:c3:64:6d:79:95:71:51:a9:f7:c2:82:34:89:7d:
         e0:be:37:64:f1:e7:93:09:0e:de:47:ec:11:d6:f4:e1:cd:42:
         3d:21:83:2d:d6:b7:68:32:db:5c:82:b2:50:61:9e:24:ce:18:
         be:41:84:02:74:ba:63:13:f8:39:f1:b6:1f:65:3b:68:09:c7:
         f9:7d:27:6a:23:76:aa:ef:af:84:0f:d9:8f:4a:bd:67:56:b2:
         00:72:c1:0d:4e:0f:bf:9e:d3:63:c5:50:90:1a:f9:73:4e:61:
         b7:73:c6:1f:26:e0:ef:cf:74:60:3f:fd:b8:e3:de:1b:28:83:
         f1:60:f7:b0:ca:1c:47:d3:6c:78:89:34:9f:74:e4:77:b5:c5:
         1e:b5:ab:be:ee:41:34:00:73:c6:18:07:03:06:3e:0b:02:e9:
         78:16:09:f3:99:b7:fc:3c:f7:c5:b6:3c:7f:31:a0:3b:2c:90:
         46:29:08:29:2c:2a:ed:1d:c9:c9:f0:37:24:71:b0:bb:06:2a:
         dd:e8:7b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 13:41:03 2026 by rpki-client