Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5726e21f-426d-34a3-b270-06a19d8af6f2.roa
File:                     5726e21f-426d-34a3-b270-06a19d8af6f2.roa (raw, json)
Hash identifier:          6eLeBKUPkGrIcz0ClOau5KFcrPdzuJWVKUZU2pkZGLI=
Subject key identifier:   82:B9:30:CD:40:0A:F9:8B:83:9C:A0:DB:7D:2B:DC:F8:20:43:CE:52
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B52A7741FA4FB303D0DADA700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5726e21f-426d-34a3-b270-06a19d8af6f2.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     212238
IP address blocks:        23.26.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:74:1f:a4:fb:30:3d:0d:ad:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=e2bce416-e11b-4cbc-b493-56700a8a3dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f1:aa:a6:de:59:48:b3:b9:3d:22:b9:3d:1f:
                    80:21:6f:9c:6a:c6:8f:25:9b:df:0d:5b:da:14:21:
                    89:06:87:2c:a9:66:61:d1:3b:da:12:14:70:d1:33:
                    df:a3:e5:58:52:e2:78:15:5c:9c:d4:e3:b2:95:ef:
                    18:ba:79:5e:e9:b3:f8:c4:ee:5b:a7:ef:08:be:c0:
                    d6:8b:28:90:f1:64:07:ea:5c:11:b8:8a:9a:65:e7:
                    27:11:a5:5d:9f:23:60:97:69:41:1e:c1:0a:f1:ed:
                    5a:59:89:ba:a5:3e:38:f1:ef:e2:7a:f8:17:6e:8e:
                    8f:0f:d4:2e:4d:73:21:6f:70:31:9d:b6:85:96:cb:
                    28:46:57:1b:c2:e2:73:e7:d3:7b:6e:c4:5f:af:6a:
                    80:be:8a:91:aa:2d:68:d4:0f:a7:2d:01:1d:b9:80:
                    12:af:dd:eb:be:d5:3c:08:5b:1a:1f:55:4c:32:ff:
                    62:7d:90:a5:bb:1a:d3:5b:c6:5e:bf:7f:1a:93:75:
                    9b:27:df:1a:17:b4:35:5a:9c:cc:94:f6:1a:20:ae:
                    03:41:02:4a:a2:39:87:f1:91:03:55:71:b4:be:39:
                    eb:3d:7c:fb:26:c1:e5:9f:6b:43:79:47:60:b6:50:
                    3a:d2:3b:78:24:72:35:9d:80:5a:f8:f8:95:46:90:
                    5d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B9:30:CD:40:0A:F9:8B:83:9C:A0:DB:7D:2B:DC:F8:20:43:CE:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5726e21f-426d-34a3-b270-06a19d8af6f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:95:30:be:25:b5:e2:be:82:e8:46:6b:61:75:df:26:90:41:
         c2:f0:39:c9:52:86:41:63:11:e7:22:8f:3d:bf:dd:66:f1:28:
         71:b1:e1:6d:c9:f5:5e:bf:f0:10:84:ff:b4:e8:65:2d:fb:32:
         02:ee:9a:e1:a9:ef:b9:1e:d7:41:e0:85:4a:c0:83:18:64:a2:
         3c:3e:36:81:7b:50:e6:92:5b:d7:d3:67:6f:2c:e0:8c:09:7e:
         33:4b:f9:04:91:9e:42:e4:79:a7:ac:3b:c1:c7:20:94:6c:12:
         1c:56:43:c0:fe:f1:05:9e:65:23:0d:94:aa:bb:f4:f9:3d:51:
         33:59:e9:ce:0a:26:7b:fe:46:6c:89:ac:a1:38:65:f9:26:29:
         ad:b4:ed:91:d5:e7:75:97:d8:90:fe:e4:2d:dc:df:5a:16:b3:
         51:55:88:73:ef:a7:ab:76:1e:93:6d:64:26:4e:95:d6:6e:5e:
         aa:80:24:8a:67:06:83:11:36:b8:8f:c4:08:eb:41:99:7b:f3:
         33:10:ea:14:5c:10:ac:fc:5d:d6:74:0b:d7:8b:ba:07:3b:d3:
         7e:77:2c:ea:02:e2:be:76:84:89:69:43:01:ff:a0:da:8d:30:
         c0:f1:8d:5e:d6:4a:ac:27:96:01:87:f8:53:95:a2:de:88:dc:
         1a:9b:5e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:24:12 2025 by rpki-client