Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/500c9e2d-4600-379f-8df9-a1953dda6c7b.roa
File:                     500c9e2d-4600-379f-8df9-a1953dda6c7b.roa (raw, json)
Hash identifier:          RYfkuNoeRu7+rqchMm7eRLcOSdhWjE8dc2i6njVbb3I=
Subject key identifier:   36:53:EE:F2:1F:C1:87:93:B7:57:E6:6F:60:40:33:2D:91:22:D7:EC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E428F2D5AD76362A7BF527800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/500c9e2d-4600-379f-8df9-a1953dda6c7b.roa
Signing time:             Mon 22 Jun 2026 21:00:12 +0000
ROA not before:           Mon 22 Jun 2026 21:00:12 +0000
ROA not after:            Sun 20 Sep 2026 21:00:12 +0000
asID:                     4766
IP address blocks:        23.26.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:8f:2d:5a:d7:63:62:a7:bf:52:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 22 21:00:12 2026 GMT
            Not After : Sep 20 21:00:12 2026 GMT
        Subject: CN=333a721f-4e20-4c10-b17e-ce50b6ca69ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:59:0d:8c:f9:5e:af:1f:16:e7:0e:75:3a:ff:
                    47:bb:c5:40:ac:39:1f:c0:a0:7b:c1:f1:90:f4:0a:
                    3a:02:cd:22:25:cc:8d:3e:e5:5a:b6:c8:dd:c7:dc:
                    c9:39:34:5b:de:fe:3d:c5:9d:8e:b0:58:ac:15:1b:
                    99:cc:2a:1b:65:75:35:00:c4:59:b1:7e:ee:26:67:
                    6a:3a:a2:e8:2c:5c:5a:85:a1:19:84:9b:6b:4e:b9:
                    9a:f5:21:7e:65:12:bb:f9:2d:80:36:37:e5:f2:46:
                    c3:9c:51:d7:f9:c3:13:a8:f6:15:4d:10:00:8f:d8:
                    70:3a:f1:37:77:a0:1d:ec:15:cf:6c:5b:be:d7:bd:
                    54:c8:b5:64:2e:45:5a:b1:33:57:96:2e:b8:dd:99:
                    07:1e:21:84:83:38:e5:6a:ee:c0:07:5e:45:e3:e3:
                    b4:f3:ce:34:be:c6:bd:db:3e:16:35:4f:e4:1b:11:
                    36:da:bc:e7:08:3a:87:3e:42:01:e1:ff:4a:81:24:
                    c0:dc:dc:fb:09:18:9b:5d:d7:d9:9e:ac:71:8e:9b:
                    c6:51:9b:e1:30:30:19:4f:72:4d:e2:01:e9:bd:08:
                    08:38:5e:ca:5d:ba:92:7e:c5:d1:34:ee:08:17:e1:
                    bb:0c:35:0e:73:17:e9:a5:a4:a1:75:75:3d:e6:d5:
                    95:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:53:EE:F2:1F:C1:87:93:B7:57:E6:6F:60:40:33:2D:91:22:D7:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/500c9e2d-4600-379f-8df9-a1953dda6c7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:bd:c3:5a:cc:a8:04:04:18:03:7e:9e:20:71:e4:7e:e2:6b:
         2f:a3:ba:ef:04:f1:c4:30:1f:3e:22:8c:5a:1e:8b:37:5b:08:
         8d:7d:50:0c:6b:f3:83:12:66:f9:16:33:c7:ac:10:74:4c:89:
         42:b7:8c:84:91:fd:db:ae:42:aa:4f:b5:cf:a6:1d:c2:b4:6c:
         85:c9:ce:04:8f:eb:de:9d:0b:04:26:4a:6f:71:2e:b1:e9:48:
         b2:06:79:82:d5:a4:36:58:1b:2a:ab:b8:37:e2:4c:c3:42:d5:
         68:76:9f:2e:32:9d:dd:d5:f8:cd:8d:68:4f:46:61:c1:35:eb:
         58:9f:8c:2c:c0:e0:12:f0:61:ba:35:80:5f:0b:9c:99:dc:cb:
         8b:85:ef:4e:76:8f:eb:8d:c0:f8:f3:06:ed:a6:eb:41:5f:5c:
         93:8f:d7:4f:f0:6d:6b:71:1d:15:ad:11:bc:b1:b9:8e:05:93:
         ed:a1:d9:2f:41:7b:99:c2:08:4f:bd:63:ae:46:b1:42:9f:63:
         59:fd:f4:db:49:0a:8c:5b:2d:f0:fd:d0:da:69:b1:78:52:e1:
         4a:c9:08:64:cf:ad:54:0b:0e:c8:43:98:da:cf:f3:fe:6d:8c:
         a9:1a:e5:26:d7:c7:d0:c7:dc:e6:b2:77:71:9b:3a:e5:e2:ab:
         ca:ef:7b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 04:32:44 2026 by rpki-client