Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5449d8d8-dda9-3b0e-9aa1-d39f67436be7.roa
File:                     5449d8d8-dda9-3b0e-9aa1-d39f67436be7.roa (raw, json)
Hash identifier:          xOYuxxHKnrbw9MyY9lb3h0qso2nTTHNS7/euD6zg/Qw=
Subject key identifier:   30:EC:33:1F:6F:BC:C1:FD:B4:E8:AA:CB:61:C9:22:0E:07:3C:60:19
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EBD7F79C8A376C1910EF46700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5449d8d8-dda9-3b0e-9aa1-d39f67436be7.roa
Signing time:             Wed 05 Aug 2026 21:53:08 +0000
ROA not before:           Wed 05 Aug 2026 21:53:08 +0000
ROA not after:            Tue 03 Nov 2026 22:53:08 +0000
asID:                     6079
IP address blocks:        23.26.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:7f:79:c8:a3:76:c1:91:0e:f4:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  5 21:53:08 2026 GMT
            Not After : Nov  3 22:53:08 2026 GMT
        Subject: CN=1d83ef6d-347b-4ceb-984e-dc037eba11c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:41:61:58:48:e8:b2:4f:21:c9:48:02:5e:73:
                    a2:71:50:bc:38:c2:07:9d:fb:ff:29:64:3b:e5:43:
                    ba:15:1c:f5:20:61:50:fc:54:04:84:35:01:a9:47:
                    41:4b:c8:8e:f1:25:38:72:42:d2:39:a7:e4:5d:a7:
                    38:ac:f1:02:42:4e:b4:98:f5:53:a0:da:1c:03:e7:
                    86:6a:38:4c:1f:0f:de:64:ff:33:3e:60:f2:42:8d:
                    f0:96:a9:30:f5:36:41:1a:87:23:5b:45:07:fa:70:
                    1c:ee:8c:24:fa:04:34:ad:4b:03:0b:b0:e6:c2:54:
                    fb:89:d2:ca:a9:db:3f:d2:97:4d:54:8c:32:a6:5a:
                    ce:c1:5c:1c:bf:44:6d:b3:f1:5d:6e:07:90:e7:e9:
                    cc:14:6e:63:d2:59:8e:9c:17:4c:08:cd:f6:1f:3c:
                    27:3e:cf:10:5f:42:54:6f:f8:92:c2:d0:ae:cc:47:
                    53:cd:5f:b1:bc:79:9a:a9:f3:87:e1:cc:44:a3:4a:
                    85:e3:0b:f5:6d:b5:6c:db:40:d3:eb:e2:7d:96:6e:
                    42:a9:be:21:e5:28:67:0d:31:00:8a:0a:16:c6:62:
                    a1:a7:54:61:39:1a:36:71:54:4b:b7:ff:05:6b:7c:
                    58:bc:06:a1:8f:ba:2c:3c:37:75:16:03:b9:cf:35:
                    79:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EC:33:1F:6F:BC:C1:FD:B4:E8:AA:CB:61:C9:22:0E:07:3C:60:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5449d8d8-dda9-3b0e-9aa1-d39f67436be7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:5a:d1:a1:c7:54:95:58:a7:25:e2:0a:93:12:1f:88:fb:b8:
         78:c6:4b:68:35:02:79:b4:68:57:4c:d1:e0:6c:b6:64:23:d3:
         b4:4f:79:4e:a4:6a:dc:a7:9d:ca:ec:0e:da:9e:a4:29:14:b7:
         91:eb:88:81:54:0a:86:6d:6e:af:47:ef:72:a0:e6:57:15:21:
         f5:31:ce:6d:57:64:ab:56:2a:ea:3b:10:52:8e:ce:cd:fc:16:
         6f:61:dc:c7:f1:36:67:77:18:d9:a9:8e:22:fe:42:fa:f7:69:
         f2:89:25:d8:4f:12:14:7f:11:12:3c:28:33:23:bc:ad:0d:4f:
         ec:05:a7:7c:7b:57:78:73:56:f6:28:39:45:db:7c:f3:a5:d5:
         d0:66:54:fc:ac:be:cb:af:d5:51:6b:f5:61:7f:04:f5:f2:c3:
         28:a7:3b:26:62:fe:1b:67:29:c0:20:03:0f:5a:0d:f5:a6:00:
         64:70:69:88:a9:ff:56:a5:53:f2:e6:7c:9a:30:8e:74:59:74:
         df:7e:29:ee:3a:cf:dc:e8:a0:85:0d:9f:34:0e:f3:fe:2e:67:
         af:46:a5:bd:ee:ce:07:39:f4:db:0c:76:b6:98:fb:b5:37:21:
         1a:3d:7f:24:f4:a6:3e:e5:0a:73:d7:46:c1:c9:73:b0:78:47:
         89:5d:01:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 16:16:29 2026 by rpki-client