Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38b50b55-345f-3f4f-b879-d5e2dc5f748e.roa
File:                     38b50b55-345f-3f4f-b879-d5e2dc5f748e.roa (raw, json)
Hash identifier:          c5acoJPAcDRQlANYy+ku0tFYaGk04I71fTGvuhO3CGc=
Subject key identifier:   09:80:AF:F5:37:1A:00:95:1F:21:60:76:48:34:1B:B1:82:CA:B4:ED
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584BA9329172FDD88BDA5FE69800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38b50b55-345f-3f4f-b879-d5e2dc5f748e.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     401152
IP address blocks:        23.26.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:91:72:fd:d8:8b:da:5f:e6:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=cd2a7245-be8c-442b-b6a4-2ec51249d555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:30:c8:9a:5d:4e:8d:11:de:57:6c:a5:87:eb:
                    ff:0d:45:75:01:4b:c7:00:f7:e8:30:55:3b:f6:20:
                    1b:df:56:72:9a:83:70:98:b4:a4:d2:d2:b8:94:7a:
                    5a:bb:f1:71:76:a2:8e:d4:1e:0d:6d:0b:56:6a:3d:
                    e2:a3:a2:1d:82:70:28:b9:e7:67:b3:b3:4e:da:7f:
                    b6:1f:9f:2f:08:c6:80:7e:a0:67:41:c2:cc:53:6e:
                    04:7c:73:fe:76:ae:0b:34:66:1e:c1:c7:51:de:73:
                    b5:01:84:f9:4d:a1:38:c8:42:16:35:26:30:7e:9f:
                    80:cd:88:98:38:0c:42:23:84:f1:6d:22:19:33:4c:
                    f7:1b:3f:91:c3:32:cd:e7:80:88:48:db:81:35:3b:
                    6f:4f:ae:97:d8:31:6d:77:b1:f1:fc:e3:fa:99:d0:
                    9d:ee:c3:c0:dd:9e:6b:65:3d:7f:fc:50:3c:e2:05:
                    e0:d0:a2:47:2d:44:ed:fa:9c:0a:ee:96:6d:fb:49:
                    9c:23:90:28:e3:26:f7:4e:e6:77:18:b0:1e:8c:1d:
                    43:d7:3c:7c:52:72:bb:d6:2e:b3:8d:c5:fa:f2:15:
                    db:3b:0b:d0:ae:9b:11:35:f7:c2:62:a6:67:b8:0e:
                    a3:30:9f:41:78:34:f3:f2:19:87:a5:93:e4:fe:70:
                    cb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:80:AF:F5:37:1A:00:95:1F:21:60:76:48:34:1B:B1:82:CA:B4:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38b50b55-345f-3f4f-b879-d5e2dc5f748e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:03:ff:aa:91:77:56:61:66:f4:cf:ab:ed:d2:28:f2:50:40:
         63:a7:a3:1e:b7:16:71:6e:ba:38:23:ed:4e:df:9c:ca:f6:3e:
         7b:cb:8e:3d:3b:28:db:20:91:36:7f:49:f0:cc:28:3a:30:00:
         98:8e:b6:a8:70:ea:67:a2:cd:ce:5b:35:9a:94:4c:0d:08:9c:
         d9:d3:93:e1:6a:52:40:b6:fe:73:4b:d2:d1:42:bd:1c:f6:2d:
         50:03:90:09:d9:4b:c5:85:f5:9b:25:dd:53:fb:ff:0f:0c:b5:
         f6:a6:f9:76:7b:92:67:36:2a:6c:bb:20:74:4c:72:c1:6f:c7:
         5d:b7:3b:40:df:64:ff:22:a6:7b:d0:00:66:d6:fc:86:de:70:
         05:06:b7:77:80:1a:77:29:8a:30:d1:6d:82:52:06:86:6b:3f:
         4a:29:b4:e7:fa:64:7b:f8:10:da:a9:81:35:96:95:39:90:70:
         e3:16:2c:ef:d1:2e:19:fb:06:fa:4b:25:1f:ce:c5:eb:63:79:
         92:49:bc:75:c5:00:f8:2a:1c:fb:66:bb:3c:ac:2d:7e:71:16:
         28:8f:8e:bc:58:03:24:23:1b:d1:46:f3:1b:cc:19:21:88:c2:
         e1:c6:d2:ce:45:4e:b5:65:c6:c7:54:c1:38:a8:1b:58:19:02:
         5b:22:ed:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 16:47:39 2025 by rpki-client