Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4c001fcf-e3c6-3df8-944e-dfd1e962ba49.roa
File:                     4c001fcf-e3c6-3df8-944e-dfd1e962ba49.roa (raw, json)
Hash identifier:          9OKVCq+u59sSIaj31olnMRtBi8eF4IZ1a5vV96vsPsI=
Subject key identifier:   12:1F:07:FE:A9:3D:4A:A9:66:1A:0B:10:66:B2:68:32:CC:AD:B7:FA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849D8053736EF1D7C27086F5D80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4c001fcf-e3c6-3df8-944e-dfd1e962ba49.roa
Signing time:             Tue 13 May 2025 21:58:56 +0000
ROA not before:           Tue 13 May 2025 21:58:56 +0000
ROA not after:            Mon 11 Aug 2025 21:58:56 +0000
asID:                     7385
IP address blocks:        23.26.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:05:37:36:ef:1d:7c:27:08:6f:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 13 21:58:56 2025 GMT
            Not After : Aug 11 21:58:56 2025 GMT
        Subject: CN=e66a8f42-415b-4dd6-9da8-e65009443019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4e:6e:6c:38:1a:9f:cb:74:93:e1:e8:d0:aa:
                    1d:2b:05:02:f2:53:ce:4d:60:68:0d:b2:d3:23:55:
                    93:2f:5f:66:e3:c8:95:cd:e7:62:59:85:39:1f:8a:
                    2f:c8:f8:64:7a:2c:a7:b7:64:bf:2a:9a:ae:ce:06:
                    f5:72:6d:9e:33:4c:68:ca:1c:ac:54:02:94:59:8c:
                    1e:39:db:a3:5b:71:78:5d:35:04:17:a7:1b:bb:7c:
                    2c:b1:19:31:7e:5f:7c:a0:0f:f9:a9:f0:13:1c:bc:
                    69:cc:29:46:48:a7:41:11:00:2d:95:5c:1e:62:46:
                    77:d1:eb:ea:3e:8e:c6:0b:65:bd:55:48:af:af:55:
                    26:a5:0c:f2:94:39:97:68:33:68:8d:44:0d:f1:6f:
                    b2:e5:55:98:8b:df:52:d3:a7:9b:16:93:d2:d8:1f:
                    9a:d2:b2:b8:ea:cc:ee:9e:00:15:e5:41:4c:a0:6c:
                    bb:dc:1e:d2:e9:be:1a:fa:d0:e0:22:6a:c6:e4:98:
                    e5:c3:dd:59:9b:cd:b4:56:c8:e6:e2:77:14:b4:3c:
                    0a:8e:7d:c1:45:18:23:bd:b8:64:e3:26:49:d8:72:
                    3b:78:85:6e:0f:f7:39:7f:42:1b:7e:ca:66:7d:43:
                    6c:8c:94:a8:55:00:0d:23:08:50:e2:46:5a:31:d7:
                    d0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1F:07:FE:A9:3D:4A:A9:66:1A:0B:10:66:B2:68:32:CC:AD:B7:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4c001fcf-e3c6-3df8-944e-dfd1e962ba49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:8c:16:ee:03:f0:65:d6:2d:21:aa:a0:03:e4:d1:8b:76:7a:
         f0:59:3b:2b:4b:35:be:e4:94:89:d3:2c:75:80:8a:c6:f1:5e:
         5c:de:e8:14:b5:3b:43:29:8a:e5:1a:5b:89:60:ee:ec:3b:71:
         22:a1:6b:5c:b5:ff:0f:dc:73:f7:a2:ba:7d:ff:7b:59:13:fc:
         37:e4:e5:f3:f4:84:0f:35:6b:df:56:d2:fc:24:0a:bf:31:4c:
         fa:8a:b3:f3:e7:d7:0c:ab:b9:ae:33:a7:26:91:18:ed:37:1d:
         ea:08:20:81:46:91:a9:39:83:98:99:cb:e2:e8:41:33:b6:85:
         fe:34:d8:59:31:7f:2b:82:2e:d6:d4:a6:74:fc:af:27:4b:1c:
         75:f9:d3:3c:f4:e2:00:98:0c:8b:81:6c:51:a8:61:ea:2e:0e:
         74:ad:b9:af:89:d8:90:3a:7a:24:ac:32:83:d3:e1:12:5a:d4:
         de:75:43:fe:cd:83:d7:25:08:da:40:ca:8e:dc:29:b5:86:a2:
         93:30:24:6a:ee:ed:da:d2:c1:9e:96:6f:fb:cc:35:63:d6:22:
         1e:36:28:a7:0c:b0:9c:f3:6f:45:f5:31:80:55:4f:e1:70:8c:
         82:4c:e1:45:d7:0e:a6:ab:ef:56:d9:94:f6:36:fa:bf:6b:94:
         56:41:48:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYBTc27x18JwhvXYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDUxMzIxNTg1NloXDTI1MDgxMTIxNTg1NlowLzEtMCsGA1UEAxMk
ZTY2YThmNDItNDE1Yi00ZGQ2LTlkYTgtZTY1MDA5NDQzMDE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA405ubDgan8t0k+Ho0KodKwUC8lPOTWBoDbLT
I1WTL19m48iVzediWYU5H4ovyPhkeiynt2S/Kpquzgb1cm2eM0xoyhysVAKUWYwe
OdujW3F4XTUEF6cbu3wssRkxfl98oA/5qfATHLxpzClGSKdBEQAtlVweYkZ30evq
Po7GC2W9VUivr1UmpQzylDmXaDNojUQN8W+y5VWYi99S06ebFpPS2B+a0rK46szu
ngAV5UFMoGy73B7S6b4a+tDgImrG5Jjlw91Zm820Vsjm4ncUtDwKjn3BRRgjvbhk
4yZJ2HI7eIVuD/c5f0IbfspmfUNsjJSoVQANIwhQ4kZaMdfQzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBIfB/6pPUqpZhoLEGayaDLMrbf6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNGMwMDFmY2YtZTNjNi0z
ZGY4LTk0NGUtZGZkMWU5NjJiYTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxrZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGeMFu4D8GXWLSGqoAPk0Yt2evBZOytLNb7klInTLHWAisbxXlze6BS1
O0MpiuUaW4lg7uw7cSKha1y1/w/cc/eiun3/e1kT/Dfk5fP0hA81a99W0vwkCr8x
TPqKs/Pn1wyrua4zpyaRGO03HeoIIIFGkak5g5iZy+LoQTO2hf402FkxfyuCLtbU
pnT8rydLHHX50zz04gCYDIuBbFGoYeouDnStua+J2JA6eiSsMoPT4RJa1N51Q/7N
g9clCNpAyo7cKbWGopMwJGru7drSwZ6Wb/vMNWPWIh42KKcMsJzzb0X1MYBVT+Fw
jIJM4UXXDqar71bZlPY2+r9rlFZBSOE=
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:45:26 2025 by rpki-client