Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/60eea67b-99fe-3d3c-a0e0-f2f78a63085a.roa
File:                     60eea67b-99fe-3d3c-a0e0-f2f78a63085a.roa (raw, json)
Hash identifier:          qmpzZ08NR6yJyYwIQsCK+6u+nXT7q2qIYOE7yIHUb2U=
Subject key identifier:   D9:8B:8B:9A:E0:46:AB:73:A9:C6:89:B8:78:1A:E7:E4:F6:73:F7:71
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584AC4464129EE5511C4ADA8DB00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/60eea67b-99fe-3d3c-a0e0-f2f78a63085a.roa
Signing time:             Wed 06 Aug 2025 13:00:42 +0000
ROA not before:           Wed 06 Aug 2025 13:00:42 +0000
ROA not after:            Tue 04 Nov 2025 14:00:42 +0000
asID:                     7029
IP address blocks:        23.26.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c4:46:41:29:ee:55:11:c4:ad:a8:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  6 13:00:42 2025 GMT
            Not After : Nov  4 14:00:42 2025 GMT
        Subject: CN=638fcea4-4bc2-41ea-8cb5-643d65f71c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:de:02:c8:0d:5c:bc:ab:36:ed:8d:78:86:44:
                    77:b5:3f:78:16:b4:e3:5d:60:cb:04:41:21:00:3b:
                    6e:6f:a5:b1:a1:34:a4:ac:99:32:e6:91:41:ad:fe:
                    45:07:69:a0:64:15:66:1f:ba:90:ba:b9:23:31:45:
                    88:40:c8:0b:e1:1a:af:59:d1:fa:dc:19:25:d0:27:
                    32:a6:f6:e7:c0:c5:46:a7:8d:1c:66:4d:7b:71:76:
                    a9:62:51:70:6a:b4:ed:43:26:b5:16:8e:9f:21:83:
                    17:22:2b:95:e7:dc:9a:22:33:f9:c7:93:fc:f4:cd:
                    48:40:7a:ea:68:30:f0:57:26:eb:40:9e:28:c2:63:
                    a1:46:f9:ec:af:73:dc:d1:b5:a9:32:da:d6:98:5b:
                    61:ab:36:2d:55:6f:50:cd:6c:e0:02:3d:b2:a3:b2:
                    15:3f:c2:c7:e4:21:7f:3d:d2:7f:0b:c5:39:ae:6b:
                    5b:9b:1e:48:f2:05:a0:0e:60:c8:79:83:6a:80:56:
                    3d:2c:ca:73:50:4f:7b:3f:9b:4a:73:cb:05:d5:b0:
                    89:ca:82:4f:68:95:70:7f:85:d1:34:be:00:53:82:
                    77:01:aa:32:bb:1a:49:39:d2:da:5d:59:aa:42:05:
                    82:96:e3:fe:b4:24:e4:43:68:b0:57:0b:9b:e9:33:
                    ef:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:8B:8B:9A:E0:46:AB:73:A9:C6:89:B8:78:1A:E7:E4:F6:73:F7:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/60eea67b-99fe-3d3c-a0e0-f2f78a63085a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:6e:0c:cd:ee:72:11:d1:fc:93:e8:e4:30:b2:86:40:7f:fc:
         ef:b4:64:9c:de:ea:56:6c:94:36:5a:38:13:2b:cc:59:a2:00:
         a1:56:3f:17:fa:d3:b7:6e:12:4f:31:e1:9e:2e:bf:b7:2e:3e:
         5f:9a:1d:cb:59:e1:f1:e6:ae:b9:eb:27:2d:1c:72:5f:22:63:
         bd:bb:60:1f:5e:bd:08:8d:14:77:13:df:4c:f9:5b:93:34:3e:
         17:ed:db:1e:bd:d5:24:b0:37:21:93:c0:44:7d:60:01:33:4f:
         c3:bc:8e:2d:a3:d7:90:b7:8c:60:64:af:75:ec:28:c7:f1:f0:
         38:d1:4f:da:f1:ef:e6:17:1e:04:76:04:e4:ee:f0:10:75:a8:
         6d:ea:15:0b:9e:8c:a3:b0:b2:57:3e:01:7d:e2:15:25:0f:13:
         c1:f0:a7:d5:fa:71:6b:8b:13:f9:ab:b7:c2:d5:86:76:87:bc:
         ea:69:09:52:45:85:cc:29:61:8e:fb:30:30:26:0b:2d:1a:a2:
         d2:30:89:dd:25:8b:b8:bc:05:3a:a4:87:7e:67:a3:17:d2:5e:
         67:6e:77:18:98:70:5f:bf:cd:d5:b8:29:83:50:b2:59:22:4b:
         b9:44:70:01:d2:03:75:78:6d:81:3c:bd:a7:8d:6f:7e:77:40:
         f2:f8:08:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:13:03 2025 by rpki-client