Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5f54b906-f787-310d-a20a-642087c10484.roa
File:                     5f54b906-f787-310d-a20a-642087c10484.roa (raw, json)
Hash identifier:          yWY32l0tVdpFn9Gvr3AEVHMbYQ0jJqNoH6NrLynGsIs=
Subject key identifier:   3F:BA:BE:BB:2A:22:6C:EE:F5:0A:D5:07:0D:D0:EA:B7:82:13:AE:60
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D5D47B15E6B5B1DCA91E9FA00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5f54b906-f787-310d-a20a-642087c10484.roa
Signing time:             Wed 01 Apr 2026 17:56:12 +0000
ROA not before:           Wed 01 Apr 2026 17:56:12 +0000
ROA not after:            Tue 30 Jun 2026 17:56:12 +0000
asID:                     401152
IP address blocks:        23.26.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5d:47:b1:5e:6b:5b:1d:ca:91:e9:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  1 17:56:12 2026 GMT
            Not After : Jun 30 17:56:12 2026 GMT
        Subject: CN=f8c8df97-2a1f-46b2-99bd-436c024b8430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:db:8a:99:2e:5f:d7:1b:64:c3:1f:16:4c:56:
                    48:2e:12:8c:3c:ab:a5:0d:bf:e9:72:61:db:db:b6:
                    fa:c7:a8:bc:97:b5:fd:43:48:59:ac:d9:4c:d1:14:
                    25:52:fd:56:8f:bb:17:76:f1:9a:3a:28:b1:71:a2:
                    69:2f:4c:36:e7:83:ea:d3:d5:71:7d:94:0f:29:48:
                    7a:63:92:c1:67:c6:03:82:fa:e0:65:b2:a3:3f:e0:
                    61:a8:69:24:6f:10:ac:0c:02:32:86:b3:bb:07:48:
                    bd:eb:1f:bb:26:e4:12:23:a5:67:c5:93:ce:2d:34:
                    d1:14:6d:89:54:3c:a0:4a:34:8c:00:d5:13:56:f5:
                    97:13:5d:dc:03:49:d7:21:f2:5c:4a:fc:69:7b:72:
                    b8:bb:8c:1b:7d:fb:eb:2f:d8:63:81:4d:f1:60:39:
                    23:d5:6a:18:af:93:59:af:7b:01:59:b6:d5:dd:4e:
                    94:33:6e:5e:7e:22:3f:f4:73:69:ab:24:a0:e7:31:
                    58:7d:c0:65:53:f0:37:c6:54:48:5c:42:ea:1a:07:
                    46:c5:a3:c6:cb:23:41:63:50:4e:a4:1b:01:0b:8c:
                    b4:64:b9:a2:97:8d:18:05:eb:1b:8e:e0:45:32:c1:
                    25:3d:6e:8c:90:5f:71:db:b7:0a:04:56:00:88:16:
                    1f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BA:BE:BB:2A:22:6C:EE:F5:0A:D5:07:0D:D0:EA:B7:82:13:AE:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5f54b906-f787-310d-a20a-642087c10484.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:5b:19:3d:78:06:9a:d6:9b:95:76:c3:8e:65:eb:3f:60:84:
         ed:0c:08:0e:f7:d3:1f:6d:22:7c:3a:36:83:33:06:07:9c:7f:
         e1:5f:6f:c3:7d:04:ad:fa:e1:ff:30:a5:a5:08:d8:40:46:f9:
         5f:c8:d9:5a:25:ee:38:a1:e6:da:a5:f4:b3:42:67:73:94:0c:
         a8:83:73:0f:02:f9:4f:8a:43:fc:83:c0:43:7f:21:2d:50:f5:
         34:da:28:3b:df:23:ba:1c:32:7b:32:d1:7c:82:f4:0d:e8:ff:
         57:a3:e2:fc:e6:0e:1e:29:00:6d:7d:ac:d8:71:d8:70:9e:c1:
         09:d1:b6:0d:1e:c0:62:aa:9f:08:0a:6a:0f:ab:4f:c7:14:db:
         dc:37:68:74:81:81:19:23:f2:75:6c:df:96:ea:be:a9:e3:ed:
         e1:d3:55:35:58:c4:0a:8d:c3:c8:78:08:3b:62:ed:75:25:21:
         cb:cc:66:f6:12:f6:a0:99:10:6f:ed:ee:f5:bd:de:84:1e:14:
         01:e7:d1:cf:24:e8:d1:6d:65:cc:89:28:ef:9e:07:ad:3c:a1:
         14:29:8e:8d:5c:14:3c:66:32:85:ff:f5:a0:a0:e8:87:32:b6:
         47:97:e3:c5:cf:5b:a9:ae:ac:58:d7:3a:c6:eb:2f:22:9f:8d:
         d8:d4:75:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1dR7Fea1sdypHp+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDQwMTE3NTYxMloXDTI2MDYzMDE3NTYxMlowLzEtMCsGA1UEAxMk
ZjhjOGRmOTctMmExZi00NmIyLTk5YmQtNDM2YzAyNGI4NDMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytuKmS5f1xtkwx8WTFZILhKMPKulDb/pcmHb
27b6x6i8l7X9Q0hZrNlM0RQlUv1Wj7sXdvGaOiixcaJpL0w254Pq09VxfZQPKUh6
Y5LBZ8YDgvrgZbKjP+BhqGkkbxCsDAIyhrO7B0i96x+7JuQSI6VnxZPOLTTRFG2J
VDygSjSMANUTVvWXE13cA0nXIfJcSvxpe3K4u4wbffvrL9hjgU3xYDkj1WoYr5NZ
r3sBWbbV3U6UM25efiI/9HNpqySg5zFYfcBlU/A3xlRIXELqGgdGxaPGyyNBY1BO
pBsBC4y0ZLmil40YBesbjuBFMsElPW6MkF9x27cKBFYAiBYfbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD+6vrsqImzu9QrVBw3Q6reCE65gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNWY1NGI5MDYtZjc4Ny0z
MTBkLWEyMGEtNjQyMDg3YzEwNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxqTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHxbGT14BprWm5V2w45l6z9ghO0MCA730x9tInw6NoMzBgecf+Ffb8N9
BK364f8wpaUI2EBG+V/I2Vol7jih5tql9LNCZ3OUDKiDcw8C+U+KQ/yDwEN/IS1Q
9TTaKDvfI7ocMnsy0XyC9A3o/1ej4vzmDh4pAG19rNhx2HCewQnRtg0ewGKqnwgK
ag+rT8cU29w3aHSBgRkj8nVs35bqvqnj7eHTVTVYxAqNw8h4CDti7XUlIcvMZvYS
9qCZEG/t7vW93oQeFAHn0c8k6NFtZcyJKO+eB608oRQpjo1cFDxmMoX/9aCg6Icy
tkeX48XPW6murFjXOsbrLyKfjdjUdaI=
-----END CERTIFICATE-----
Generated at Thu Apr 2 22:38:39 2026 by rpki-client