Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/52f2c378-a21f-304a-9de3-292bd443202d.roa
File:                     52f2c378-a21f-304a-9de3-292bd443202d.roa (raw, json)
Hash identifier:          azVkUKxKeClXOqwt8g62CR+2YY4KkqiL4NK0eC1kxQQ=
Subject key identifier:   3B:0C:A0:B9:1E:04:D2:F3:0C:97:22:11:BF:72:49:C6:E8:FC:3A:8A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849B6796E4D9AB930AE04B6EF20
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/52f2c378-a21f-304a-9de3-292bd443202d.roa
Signing time:             Thu 01 May 2025 21:35:37 +0000
ROA not before:           Thu 01 May 2025 21:35:37 +0000
ROA not after:            Wed 30 Jul 2025 21:35:37 +0000
asID:                     401152
IP address blocks:        23.26.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:79:6e:4d:9a:b9:30:ae:04:b6:ef:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  1 21:35:37 2025 GMT
            Not After : Jul 30 21:35:37 2025 GMT
        Subject: CN=3dfbb62a-86ef-4613-bfcf-5bd47e297c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a1:e3:e8:a6:cb:eb:1f:eb:b4:e6:49:34:e8:
                    b0:22:82:0e:7b:bb:48:a9:5c:48:28:44:c0:bb:e6:
                    0c:58:d0:0d:0b:8d:3d:46:58:76:0e:6e:a4:86:39:
                    7e:cd:60:06:b7:ec:d9:8b:0f:fc:ab:37:29:ca:03:
                    b6:01:80:4c:59:e1:dc:48:cf:93:1e:45:6a:f2:c8:
                    53:ee:a1:b5:b5:71:c9:52:66:46:56:0a:bd:35:b2:
                    6d:ad:df:8d:47:13:a4:d0:f8:19:40:b6:8c:a1:a0:
                    12:2c:39:d9:86:bf:91:18:c4:e9:e1:87:ee:9b:74:
                    08:65:f8:08:29:aa:f2:2e:d3:84:aa:31:4d:ae:33:
                    be:50:02:82:74:80:0b:89:32:c2:e3:99:5f:0f:77:
                    65:9b:c8:5b:09:1c:98:88:4b:d1:10:5b:85:f6:38:
                    76:87:32:40:e1:df:18:a3:79:68:d3:9c:8e:7d:f2:
                    de:1c:fd:38:9f:c4:9f:b2:a1:b1:5e:a3:8d:b1:8e:
                    d1:df:c4:4a:1f:0c:3e:3c:21:18:49:8a:76:bf:96:
                    8f:d7:93:97:44:3f:8a:31:8c:c8:65:fc:5d:c7:2c:
                    ac:59:ed:4f:4e:85:86:84:4e:06:dc:32:1a:1f:e5:
                    09:5c:7d:37:06:b9:58:6e:65:f6:3e:1d:ef:5f:92:
                    ff:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0C:A0:B9:1E:04:D2:F3:0C:97:22:11:BF:72:49:C6:E8:FC:3A:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/52f2c378-a21f-304a-9de3-292bd443202d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:99:55:bd:10:bb:91:a6:ee:26:e1:fe:2a:70:e7:7f:0d:f2:
         d8:5b:6d:5d:55:00:ab:41:85:31:97:66:da:58:4e:97:82:01:
         0b:22:3a:ab:01:cf:89:ca:b0:fd:80:d3:77:46:39:11:3e:e4:
         ab:72:5e:6f:6f:2b:df:96:5e:70:bb:81:03:05:ce:f5:3d:02:
         e2:78:44:d3:39:13:48:fd:60:39:c5:3f:e8:12:bf:09:3f:8d:
         66:0b:a8:81:0f:e7:04:dc:54:a4:95:f1:87:5d:2f:e4:39:b6:
         28:8b:eb:60:71:d5:e6:79:b4:00:9d:e5:3a:9c:c7:a2:53:86:
         5c:c0:ec:dc:ce:c9:53:90:9a:c0:d8:8d:a4:ad:86:f0:bb:32:
         3c:96:9d:c6:b0:6a:70:01:10:52:bc:46:23:52:d8:79:d5:90:
         17:c2:cc:8a:93:46:9b:df:ed:30:46:82:3a:00:f6:f5:f9:33:
         ec:ce:0d:52:a1:a7:38:4b:63:fd:49:25:8b:36:32:ce:d9:4d:
         d5:a0:b3:1b:04:c4:53:78:eb:38:c4:64:8b:23:65:cb:32:c7:
         c9:58:a3:17:b1:0e:ea:93:9a:6e:7a:32:a4:7a:e2:5c:28:97:
         08:47:4f:d8:99:b8:dc:12:56:89:b3:07:98:2f:8d:03:4a:56:
         22:25:3b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:59:35 2025 by rpki-client