Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3ddc9191-0919-3fe6-8bb6-1a89d5a12f85.roa
File:                     3ddc9191-0919-3fe6-8bb6-1a89d5a12f85.roa (raw, json)
Hash identifier:          V+Cy1lcOPBzwCfPw5pN28yWjsLLqwoFQ+3yym0WbfQk=
Subject key identifier:   71:83:7A:ED:FF:56:FD:AF:31:FE:46:3B:68:CD:49:E8:C5:5E:23:D2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D4461D63251615C03AE8EF380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3ddc9191-0919-3fe6-8bb6-1a89d5a12f85.roa
Signing time:             Mon 23 Mar 2026 19:53:40 +0000
ROA not before:           Mon 23 Mar 2026 19:53:40 +0000
ROA not after:            Sun 21 Jun 2026 19:53:40 +0000
asID:                     11798
IP address blocks:        23.26.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:61:d6:32:51:61:5c:03:ae:8e:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 23 19:53:40 2026 GMT
            Not After : Jun 21 19:53:40 2026 GMT
        Subject: CN=5fe99bee-ce0c-4326-a7d8-257f275f377f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ae:81:04:61:1a:11:2f:f2:6c:8e:3d:f0:89:
                    34:9d:15:c0:23:4d:f6:f7:c4:4e:8e:9c:8d:4b:a9:
                    a7:d9:3b:8b:6c:a2:2e:a6:6c:fd:b5:f2:54:87:3c:
                    7b:58:62:a6:e0:95:00:5b:f2:fc:45:33:1d:a4:5c:
                    c7:8f:3e:58:09:80:ba:43:ae:16:a3:7e:36:5c:07:
                    0c:75:ba:42:33:41:f9:dd:69:62:50:3a:d0:10:ab:
                    86:82:98:7a:f3:6c:5a:ba:b7:02:da:0c:cc:43:62:
                    2c:94:e0:50:32:50:91:5d:ed:ec:74:d5:6d:70:79:
                    f7:cb:7f:37:af:57:b7:4c:a3:eb:95:24:11:f2:b9:
                    3b:36:bc:54:d9:84:e5:55:fc:93:6f:0a:92:07:84:
                    59:07:9c:2d:97:79:fe:f4:3b:e3:f5:40:06:99:ab:
                    0d:02:66:70:2f:c3:2b:98:63:7b:64:22:d8:58:ea:
                    00:32:3b:c7:0e:bd:45:d1:84:bc:bd:65:dc:6b:bb:
                    fb:49:78:68:27:bc:0f:34:eb:b4:0f:2d:43:35:2c:
                    76:e7:71:1e:0f:d9:4e:c9:82:eb:18:dc:03:71:4e:
                    af:f8:c9:0b:df:f3:98:8c:e1:f9:2e:e3:ba:f6:76:
                    a5:71:a6:94:32:a0:9e:97:0d:7a:08:13:e5:e3:c8:
                    6f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:83:7A:ED:FF:56:FD:AF:31:FE:46:3B:68:CD:49:E8:C5:5E:23:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3ddc9191-0919-3fe6-8bb6-1a89d5a12f85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:61:62:98:75:eb:17:33:ad:09:d6:18:9c:fd:b8:22:f1:21:
         91:eb:38:7a:98:91:c2:49:d5:81:8f:9b:bc:06:34:7f:0b:22:
         f4:0a:db:b2:02:2c:dd:eb:76:d3:35:44:63:fd:a9:59:26:a1:
         35:b6:64:af:90:ea:0f:ec:a9:7f:7b:4c:d9:c7:6f:16:5f:6e:
         77:73:68:9f:a8:1c:43:fa:a0:be:ca:ec:8f:8e:3a:06:5c:d5:
         af:40:d7:d0:c0:b2:ff:21:b2:de:74:da:25:f0:c8:95:df:90:
         62:d9:27:06:ec:23:d9:6d:af:60:ec:d8:63:30:11:77:a4:02:
         b3:00:d1:f4:34:4d:31:82:14:1d:6d:e7:c4:1d:49:85:65:d5:
         94:00:d7:30:07:a5:c9:1a:c9:a4:5f:51:c7:4b:f1:41:b0:e6:
         2d:ad:37:c1:b7:47:70:27:57:63:1f:cf:0a:00:eb:a6:f5:10:
         d9:fc:84:27:81:a1:4d:00:5a:30:50:bb:f6:52:30:cf:09:52:
         3a:df:8f:b5:06:67:d6:53:24:d8:2a:11:d0:5d:a1:7b:13:6a:
         3e:0c:fd:7e:32:c4:12:c4:d4:14:f6:b8:91:fd:f6:b9:f9:6a:
         6a:bd:5e:b8:78:34:bc:d2:1e:37:5c:9a:fc:e7:f0:6d:05:0c:
         bd:00:00:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1EYdYyUWFcA66O84AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDMyMzE5NTM0MFoXDTI2MDYyMTE5NTM0MFowLzEtMCsGA1UEAxMk
NWZlOTliZWUtY2UwYy00MzI2LWE3ZDgtMjU3ZjI3NWYzNzdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl66BBGEaES/ybI498Ik0nRXAI03298ROjpyN
S6mn2TuLbKIupmz9tfJUhzx7WGKm4JUAW/L8RTMdpFzHjz5YCYC6Q64Wo342XAcM
dbpCM0H53WliUDrQEKuGgph682xaurcC2gzMQ2IslOBQMlCRXe3sdNVtcHn3y383
r1e3TKPrlSQR8rk7NrxU2YTlVfyTbwqSB4RZB5wtl3n+9Dvj9UAGmasNAmZwL8Mr
mGN7ZCLYWOoAMjvHDr1F0YS8vWXca7v7SXhoJ7wPNOu0Dy1DNSx253EeD9lOyYLr
GNwDcU6v+MkL3/OYjOH5LuO69nalcaaUMqCelw16CBPl48hvsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHGDeu3/Vv2vMf5GO2jNSejFXiPSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvM2RkYzkxOTEtMDkxOS0z
ZmU2LThiYjYtMWE4OWQ1YTEyZjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxpYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJFhYph16xczrQnWGJz9uCLxIZHrOHqYkcJJ1YGPm7wGNH8LIvQK27IC
LN3rdtM1RGP9qVkmoTW2ZK+Q6g/sqX97TNnHbxZfbndzaJ+oHEP6oL7K7I+OOgZc
1a9A19DAsv8hst502iXwyJXfkGLZJwbsI9ltr2Ds2GMwEXekArMA0fQ0TTGCFB1t
58QdSYVl1ZQA1zAHpckayaRfUcdL8UGw5i2tN8G3R3AnV2MfzwoA66b1ENn8hCeB
oU0AWjBQu/ZSMM8JUjrfj7UGZ9ZTJNgqEdBdoXsTaj4M/X4yxBLE1BT2uJH99rn5
amq9Xrh4NLzSHjdcmvzn8G0FDL0AAIQ=
-----END CERTIFICATE-----
Generated at Tue Mar 24 22:32:38 2026 by rpki-client