Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38b50b55-345f-3f4f-b879-d5e2dc5f748e.roa
File:                     38b50b55-345f-3f4f-b879-d5e2dc5f748e.roa (raw, json)
Hash identifier:          seBEhg4pQV5Q5POuTDN2pgc/O9uOdqsIZN1hBnuO8Q8=
Subject key identifier:   05:E7:BE:84:56:06:4E:3F:71:3F:AB:E7:B7:04:04:EB:66:CB:41:16
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EED523DE68DBF7CF1781C6E80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38b50b55-345f-3f4f-b879-d5e2dc5f748e.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     401152
IP address blocks:        23.26.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:3d:e6:8d:bf:7c:f1:78:1c:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=3db0321a-4ef0-4288-91a6-a56005ce6dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:dc:47:31:53:56:f2:ca:c3:f9:ff:59:0c:47:
                    1c:10:b1:68:ef:d5:f7:23:52:69:3c:63:d8:d2:bc:
                    a8:ae:3e:62:a0:d0:71:0f:f1:ad:8c:7e:19:8a:fd:
                    eb:6d:87:59:6e:29:2d:69:1c:00:d8:fd:f0:51:30:
                    55:b2:a3:87:19:ef:ad:6a:9c:3e:f9:c4:9b:45:66:
                    4d:0a:2d:89:e5:51:86:84:c3:51:97:61:46:63:85:
                    10:2c:d6:1e:e5:9a:1b:08:6c:a6:75:eb:8b:3a:c3:
                    61:8b:1d:e7:69:fb:e7:27:45:f7:14:27:06:98:90:
                    be:53:2e:a4:59:93:08:4c:2f:e8:dc:b1:23:e7:84:
                    35:35:00:af:cd:d7:11:7a:14:71:19:0a:52:e5:50:
                    3f:69:f2:30:65:2a:ac:98:1a:14:48:c8:54:72:70:
                    76:39:19:7c:a6:c1:03:72:b5:3c:9d:08:43:7f:79:
                    c3:58:55:d7:e7:21:e8:b4:ef:55:27:99:a8:33:5b:
                    bd:7b:2b:08:a1:17:40:47:c5:a8:40:c4:a0:3a:16:
                    27:f8:23:5c:ff:8b:79:37:e9:66:09:e5:08:f9:c6:
                    43:d7:a5:48:57:72:c1:67:22:7f:59:57:4e:7f:68:
                    48:62:49:ce:88:f3:50:ed:15:d3:1b:56:f1:71:af:
                    f3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E7:BE:84:56:06:4E:3F:71:3F:AB:E7:B7:04:04:EB:66:CB:41:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/38b50b55-345f-3f4f-b879-d5e2dc5f748e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:23:4b:d2:0f:a1:6c:18:1a:7a:fc:39:6b:7b:6a:0b:2f:24:
         d7:42:61:3c:7a:ea:f9:1d:94:93:8b:2e:5d:95:d4:ac:09:7a:
         1d:6e:ae:28:90:27:a6:a0:41:a3:dd:91:82:c1:9d:c4:6f:21:
         5f:27:14:9b:92:90:14:f2:c2:a9:c9:58:b7:de:93:de:c5:1e:
         e6:f8:79:86:6c:f7:a3:b3:a1:f5:5c:61:81:2e:5f:08:b9:c9:
         46:83:f8:ce:a4:72:bb:32:17:6e:13:8c:cd:df:f9:0d:f0:bd:
         b6:59:5f:11:e9:0a:df:21:43:56:f1:f1:e7:e2:97:4f:3b:d9:
         67:e3:14:61:59:8e:1b:d4:b2:45:cd:66:ce:42:42:1f:b1:a4:
         8b:67:9f:c8:12:11:e9:2e:71:25:73:ca:0e:e3:a2:7a:da:71:
         a2:79:7c:63:e6:7f:52:f6:74:39:ef:db:c3:09:a8:cf:60:46:
         cc:97:c2:79:71:a3:4f:d6:7d:f1:3f:4c:81:93:3a:f4:03:d9:
         96:47:de:50:a7:b5:08:af:b9:e9:ee:da:d3:b6:2a:27:40:ef:
         ee:50:e6:2e:a5:80:46:b6:12:ed:bb:cb:58:93:13:cd:9e:03:
         c8:76:21:cb:c9:0d:11:79:31:fd:4d:38:d5:cb:96:32:03:d7:
         8a:d7:50:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 18:53:19 2026 by rpki-client