Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2aa95afe-52d3-3896-b3f0-61c81484c4de.roa
File:                     2aa95afe-52d3-3896-b3f0-61c81484c4de.roa (raw, json)
Hash identifier:          0HxsAhZpoyzmG+R5Onn7XwbKpjsk4ZyzsPDQHj8AImQ=
Subject key identifier:   70:FE:38:20:DD:AE:5E:DE:EF:6D:6A:E3:5E:F1:51:82:7D:C4:67:BD
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EA7920109C125CEF393799060
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2aa95afe-52d3-3896-b3f0-61c81484c4de.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     209604
IP address blocks:        23.26.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:01:09:c1:25:ce:f3:93:79:90:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=087e83bb-3b0f-41ee-8ade-ceab86d84fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c0:d7:e6:ee:43:a0:02:25:85:3f:c3:c1:ab:
                    d5:b6:82:b0:5d:01:be:2a:9a:d8:3b:12:b0:f5:31:
                    62:b8:93:1e:d2:bd:ef:5f:a1:94:cd:fe:15:4a:c4:
                    59:29:70:0a:4f:26:4d:91:19:90:36:4c:f6:66:a6:
                    19:d8:70:a1:a4:55:66:02:43:01:c8:1a:f3:d5:ab:
                    8f:46:bc:fb:c3:96:ea:ed:2d:0e:e8:e3:f9:da:7e:
                    33:21:2d:5e:51:71:1f:70:8e:2b:16:ed:b1:f8:a6:
                    b3:fe:cf:94:15:de:f6:7d:06:cb:99:b4:6b:bf:16:
                    0c:11:66:7e:59:b9:9d:52:29:1e:80:70:6e:b1:f5:
                    62:8c:74:e3:50:b7:d8:31:df:40:ce:8d:84:b1:55:
                    54:33:63:86:d9:d6:cd:9a:16:a1:3d:cf:06:df:d8:
                    5f:71:5d:76:7f:06:89:7f:d9:b5:ad:6d:ca:e6:52:
                    36:c5:f1:de:e1:41:fb:9b:4d:83:af:af:f3:3a:6c:
                    b3:46:d1:3d:d0:21:80:a2:fb:4e:a7:b7:0a:43:e9:
                    82:db:1e:d7:f1:42:0d:53:a1:f0:20:23:91:41:1d:
                    91:b1:6c:f4:c6:27:07:72:dd:1b:60:92:83:d3:20:
                    d5:34:f6:f3:af:b6:49:fc:36:46:62:91:0d:cd:ac:
                    3c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FE:38:20:DD:AE:5E:DE:EF:6D:6A:E3:5E:F1:51:82:7D:C4:67:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2aa95afe-52d3-3896-b3f0-61c81484c4de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:a8:e4:d3:67:2c:ca:1f:8f:aa:63:d8:b9:b7:b6:d7:12:0a:
         4b:e5:22:d8:6c:c0:37:41:87:6f:7e:88:b6:da:8c:e8:8e:b4:
         82:ae:5d:b1:3d:7e:2a:50:29:20:bb:f0:79:2f:d0:fa:41:5f:
         b6:49:f7:d0:2e:31:fe:53:f1:9e:11:04:d5:c8:df:17:72:63:
         04:a5:ae:fb:ae:7d:33:c0:44:77:7e:6a:f5:6c:6c:1e:b6:a6:
         3e:e4:09:2d:d5:bf:20:b9:69:fd:43:06:7f:9f:81:af:4e:48:
         5c:a8:a8:3e:31:42:04:84:3d:ca:11:87:fa:23:2a:a0:08:b1:
         5d:d1:88:7b:6a:68:4d:9a:1d:a4:a5:9e:66:5f:65:02:22:66:
         dd:2e:7e:5e:fa:69:d5:95:f8:03:aa:6d:5e:ce:1d:ea:c0:ce:
         7d:38:01:64:6b:03:f9:c1:6d:e6:c0:7a:cb:52:83:cb:34:c2:
         4b:31:9b:b8:db:80:c9:4d:85:ee:30:d4:64:92:34:b1:c2:36:
         8b:ea:96:95:09:2b:b1:5a:69:dc:f5:84:1b:8a:ed:aa:c4:79:
         f2:de:4e:33:4b:93:23:0d:04:66:3e:f5:f6:a9:66:67:64:a1:
         2e:8b:9f:40:e0:96:de:e6:cd:f1:b0:38:2d:8a:10:07:2e:80:
         e9:42:d3:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkgEJwSXO85N5kGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MDg3ZTgzYmItM2IwZi00MWVlLThhZGUtY2VhYjg2ZDg0ZmFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MDX5u5DoAIlhT/DwavVtoKwXQG+KprYOxKw
9TFiuJMe0r3vX6GUzf4VSsRZKXAKTyZNkRmQNkz2ZqYZ2HChpFVmAkMByBrz1auP
Rrz7w5bq7S0O6OP52n4zIS1eUXEfcI4rFu2x+Kaz/s+UFd72fQbLmbRrvxYMEWZ+
WbmdUikegHBusfVijHTjULfYMd9Azo2EsVVUM2OG2dbNmhahPc8G39hfcV12fwaJ
f9m1rW3K5lI2xfHe4UH7m02Dr6/zOmyzRtE90CGAovtOp7cKQ+mC2x7X8UINU6Hw
ICORQR2RsWz0xicHct0bYJKD0yDVNPbzr7ZJ/DZGYpENzaw8bQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHD+OCDdrl7e721q417xUYJ9xGe9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMmFhOTVhZmUtNTJkMy0z
ODk2LWIzZjAtNjFjODE0ODRjNGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxrLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIWo5NNnLMofj6pj2Lm3ttcSCkvlIthswDdBh29+iLbajOiOtIKuXbE9
fipQKSC78Hkv0PpBX7ZJ99AuMf5T8Z4RBNXI3xdyYwSlrvuufTPARHd+avVsbB62
pj7kCS3VvyC5af1DBn+fga9OSFyoqD4xQgSEPcoRh/ojKqAIsV3RiHtqaE2aHaSl
nmZfZQIiZt0ufl76adWV+AOqbV7OHerAzn04AWRrA/nBbebAestSg8s0wksxm7jb
gMlNhe4w1GSSNLHCNovqlpUJK7Faadz1hBuK7arEefLeTjNLkyMNBGY+9fapZmdk
oS6Ln0Dglt7mzfGwOC2KEAcugOlC0y8=
-----END CERTIFICATE-----
Generated at Fri Sep 4 01:42:08 2026 by rpki-client