Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/437e63af-8e22-3078-8da5-500218f3af58.roa
File:                     437e63af-8e22-3078-8da5-500218f3af58.roa (raw, json)
Hash identifier:          VyvNLBwLfp0EKZR3qe5m6lw3feZSixWFGChIRtJ4+JE=
Subject key identifier:   63:2C:7C:03:28:FC:CB:04:32:81:DF:68:59:6B:05:07:F8:C4:74:AA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E0435DC8EC6D1564976AF3FE0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/437e63af-8e22-3078-8da5-500218f3af58.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     197450
IP address blocks:        23.26.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:dc:8e:c6:d1:56:49:76:af:3f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=8e32dc84-ad32-403f-9033-398b94569537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8a:9b:4e:81:a4:45:0e:76:33:1f:52:00:9a:
                    e0:db:e8:a2:3e:14:36:fc:f8:86:98:fe:42:fd:01:
                    b7:de:f4:7d:2e:ef:51:20:3a:e4:22:30:f2:1a:2f:
                    31:27:13:56:8b:2d:a0:55:a2:7b:fb:13:c4:95:3b:
                    37:47:0c:fc:fc:99:6e:6f:15:d5:f8:c8:b4:1f:fb:
                    78:36:fc:12:12:19:c1:ee:59:14:3c:87:79:e8:4c:
                    69:e2:54:75:79:05:6c:9e:58:21:59:6d:e9:a7:c1:
                    65:0a:d0:60:e8:55:d4:c2:f4:1d:36:43:e4:88:dc:
                    9b:86:5a:47:59:c9:fd:ae:2c:16:43:13:a6:91:bc:
                    92:de:67:2a:b9:0d:24:1b:63:81:c3:76:c1:cf:94:
                    dc:3a:25:98:04:cd:98:d5:d1:d9:a7:b5:a0:0a:ce:
                    c9:e1:f5:fa:9c:51:50:e5:b9:8f:6e:fc:82:5f:7f:
                    6c:39:73:8a:e0:ab:40:a5:65:f9:be:df:6a:55:49:
                    f1:2c:7a:53:0b:7d:02:bd:50:61:7e:73:82:c9:fd:
                    b2:ba:26:62:33:7e:92:6f:b0:71:8d:7d:9d:0e:c2:
                    d0:57:fa:9d:21:81:5b:9a:3f:5c:95:fe:d4:12:23:
                    ac:2c:56:a3:9d:6d:e1:a9:69:de:4f:d6:4e:60:1d:
                    5c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2C:7C:03:28:FC:CB:04:32:81:DF:68:59:6B:05:07:F8:C4:74:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/437e63af-8e22-3078-8da5-500218f3af58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:fb:bb:5a:76:8d:c5:fb:5c:dc:ec:fa:6d:b2:27:39:97:cf:
         47:88:16:31:8a:b6:a8:11:0a:34:dc:e7:da:04:75:74:45:02:
         f0:d4:2c:c9:60:86:c5:27:de:ce:2f:aa:c2:cd:e6:18:38:4d:
         62:46:42:b8:ba:4c:7c:a1:83:cd:f8:a8:af:0e:34:fe:08:49:
         b3:60:03:14:e7:fc:49:6b:60:bc:8d:56:41:50:27:35:67:d3:
         aa:62:e7:21:49:27:e2:54:f0:c6:87:25:fb:85:e6:7d:ce:24:
         e8:e8:3a:91:aa:fd:5f:ca:0b:81:21:33:6a:88:61:63:7c:c5:
         98:22:47:7a:b4:2b:2e:65:37:cb:3f:25:73:7c:cf:09:55:b0:
         1e:10:a4:83:ed:14:4a:39:d2:fd:f9:91:b9:fb:66:77:ec:df:
         bf:44:a7:70:78:59:8f:d1:98:a9:81:d3:c9:4e:82:37:4d:1b:
         f9:ff:3a:da:a9:94:c7:2a:b2:da:1b:a7:75:ed:05:e6:ff:bc:
         97:fe:42:1c:43:90:bc:02:4d:4c:27:cf:d2:93:65:cb:c0:52:
         eb:9b:7a:14:b5:8c:d9:ef:5f:ea:d4:39:c0:cd:fc:77:5a:31:
         6d:e9:21:2f:5b:c4:37:3a:ea:e0:79:c0:cd:0b:90:ec:99:39:
         de:84:3e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:46:45 2026 by rpki-client