Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5bbcb1ea-212b-33f7-b575-e7937654bc60.roa
File:                     5bbcb1ea-212b-33f7-b575-e7937654bc60.roa (raw, json)
Hash identifier:          qQFVqR11WyNb94AFhSiTlBRJJIwtpmPCfM1AjeCIpdg=
Subject key identifier:   A7:05:BE:47:91:10:43:37:C7:B1:A6:6C:55:37:93:98:5B:B4:95:7E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849F3745CA369C67242F1F128C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5bbcb1ea-212b-33f7-b575-e7937654bc60.roa
Signing time:             Fri 23 May 2025 17:49:43 +0000
ROA not before:           Fri 23 May 2025 17:49:43 +0000
ROA not after:            Thu 21 Aug 2025 17:49:43 +0000
asID:                     49770
IP address blocks:        23.26.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f3:74:5c:a3:69:c6:72:42:f1:f1:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 23 17:49:43 2025 GMT
            Not After : Aug 21 17:49:43 2025 GMT
        Subject: CN=d677c9fb-bd97-4b86-9e3e-90631b4d5b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:27:c4:45:05:95:33:5f:76:22:9a:84:d1:40:
                    a6:81:33:27:f3:87:8e:1d:81:68:ca:a9:e5:ed:91:
                    f6:5d:18:41:86:fd:b8:1e:38:38:1c:f1:38:3e:06:
                    7f:d6:b2:d5:a9:a5:96:19:f5:ab:64:83:27:8a:0e:
                    65:a0:66:80:27:17:ea:40:96:30:2e:5b:0f:a7:8f:
                    d7:55:cd:28:aa:3c:7b:6f:21:b1:5f:95:df:67:90:
                    6a:30:6f:75:c6:c2:54:91:f4:37:8a:4f:02:1e:5c:
                    e3:f9:cb:ba:7e:e4:2a:72:4d:4b:b5:89:f0:48:5e:
                    60:a2:e1:47:b9:e5:38:c6:a9:b9:a4:c5:85:6d:6d:
                    aa:92:d5:df:ae:05:80:50:20:3a:f6:2e:e8:0e:66:
                    d4:05:46:8e:4d:94:ce:3b:44:63:9b:c6:fc:03:0c:
                    d9:e7:c4:aa:93:4e:22:6a:18:f0:05:7a:ba:b5:cc:
                    2d:c6:18:2c:02:55:77:ef:d5:5b:af:bf:0f:27:e8:
                    a7:24:9b:20:ef:99:90:17:54:15:be:21:a1:86:cb:
                    4b:4b:22:2e:72:05:cc:dd:a9:ab:58:4a:2e:c5:69:
                    88:00:01:a5:3f:a9:ca:42:3c:57:da:29:cc:24:17:
                    43:f9:9d:38:b6:e7:46:2c:01:4a:45:3e:6d:86:d9:
                    01:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:05:BE:47:91:10:43:37:C7:B1:A6:6C:55:37:93:98:5B:B4:95:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5bbcb1ea-212b-33f7-b575-e7937654bc60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:ac:f7:cb:5a:91:fa:82:ba:4a:f8:3c:88:d3:b9:68:af:59:
         2e:9e:02:72:7d:06:bc:fa:2e:47:df:fd:f7:73:e7:54:62:45:
         e1:18:e4:df:5b:92:c6:c1:7e:81:da:1f:db:e9:51:c2:ea:5f:
         e5:40:74:1e:98:15:6a:95:c9:13:4e:05:61:5e:ad:04:b6:7e:
         ba:db:e2:e0:90:d3:c4:22:91:ab:b9:5d:a1:8a:d0:75:f6:a0:
         8a:93:e4:54:86:37:b5:f6:bd:bd:e8:83:ff:1a:67:a5:c8:d0:
         c7:96:e6:b3:80:67:c1:48:36:0f:68:1b:f5:ce:9c:20:b6:f8:
         ee:e6:95:1a:44:14:56:f3:fe:fa:1c:b8:36:30:73:05:a2:8e:
         9c:e2:25:8d:7a:11:90:1b:7e:e8:b8:7f:a6:b5:4d:e7:b3:10:
         21:cf:e3:4a:98:e5:cb:17:82:c6:6a:eb:7c:2d:c5:12:f9:3c:
         83:21:86:78:ea:74:2a:f6:7b:3d:01:db:01:0d:13:f8:17:56:
         2a:c3:9f:a0:e7:9a:7b:64:a0:d1:1b:18:c2:57:bf:63:fb:39:
         27:9c:79:78:c6:a6:13:f0:13:57:78:2d:89:77:65:66:7f:cd:
         cb:27:73:4e:14:a9:bb:bb:67:d0:c8:0b:d5:b0:ff:05:5b:8b:
         d6:d9:79:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:45:51 2025 by rpki-client