Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6281cc12-f3b7-3043-8b8e-5fd296d3d44d.roa
File:                     6281cc12-f3b7-3043-8b8e-5fd296d3d44d.roa (raw, json)
Hash identifier:          o+MBO6uGRnr1urdykTh1NJ3RsO/RN/umOhIUkDSoRaI=
Subject key identifier:   EE:FC:3D:B7:8D:87:9B:FD:65:C0:95:3A:BE:88:98:7B:95:CC:17:E3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849D165865601CB0D5A28F3E100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6281cc12-f3b7-3043-8b8e-5fd296d3d44d.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     205220
IP address blocks:        23.26.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:86:56:01:cb:0d:5a:28:f3:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=83d80c94-7910-4961-8a3b-4e5e995beb8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:14:d6:5d:36:63:f0:dd:86:e4:2b:89:28:da:
                    de:5e:95:93:38:bc:38:a6:a5:a5:43:70:9b:09:69:
                    bb:eb:2e:1d:3d:e8:2d:1d:9c:a0:5b:e5:cc:e5:aa:
                    8e:1d:99:d2:96:17:0c:8e:e0:6c:ea:b1:e3:2e:cd:
                    36:6e:81:be:62:51:89:86:91:cf:1c:b2:d7:71:1e:
                    67:a2:82:e6:8f:1a:77:4a:6e:c6:57:5c:8e:e1:34:
                    be:41:72:51:2c:2f:b4:32:27:2f:5a:c5:1e:32:2f:
                    5b:70:16:ad:ff:25:f3:b1:5b:18:0e:53:27:42:eb:
                    8c:8c:a3:f0:58:30:94:39:be:fc:af:04:53:54:ea:
                    9b:12:46:33:60:9d:73:2c:05:c8:cd:e2:14:2f:34:
                    a4:b6:38:50:8a:63:be:58:0b:a8:09:5d:45:95:d4:
                    27:82:97:ee:c4:3a:41:ce:6b:b3:83:05:95:3c:0f:
                    18:7b:02:9d:a6:4a:db:b9:a8:a1:82:c1:81:77:78:
                    24:b6:e0:32:96:ad:20:27:d4:b5:3e:0d:64:97:5b:
                    58:81:f8:78:37:82:98:c6:73:b9:7e:67:6c:10:f6:
                    d4:7e:da:15:e3:80:cf:ac:db:1e:35:51:a3:03:d2:
                    03:0a:31:f8:fd:cd:39:59:37:b6:e7:ad:b9:c9:ac:
                    9f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FC:3D:B7:8D:87:9B:FD:65:C0:95:3A:BE:88:98:7B:95:CC:17:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6281cc12-f3b7-3043-8b8e-5fd296d3d44d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:d9:15:69:89:59:a1:25:fd:e4:ab:0f:43:8d:b9:f3:f2:08:
         eb:a6:02:45:4b:c5:a6:fb:e4:fc:40:6d:97:cc:35:18:3b:dc:
         f0:c9:b1:44:5f:ef:2f:c9:93:43:34:94:06:a9:45:28:d1:bf:
         ed:0d:e3:ba:ef:99:63:20:55:c2:d4:b1:23:26:75:59:52:04:
         c3:2f:65:75:ae:8a:e3:81:70:40:fb:f6:cc:a5:e7:67:b4:c0:
         1b:84:64:7f:d0:b7:59:57:3f:23:5a:0a:10:b6:ad:78:a5:d2:
         fd:53:b8:24:7f:9e:13:3d:9f:41:15:01:d4:c0:e9:0a:24:db:
         ce:be:eb:c4:7f:48:f9:b9:c7:b1:47:1d:91:26:fa:8d:9e:4d:
         6e:da:f5:f9:dd:97:c7:be:be:35:57:54:f0:9f:f2:37:94:11:
         3e:5f:41:b2:1f:7d:5d:b3:84:d9:54:03:3d:1d:e3:a6:fc:c4:
         c8:59:11:61:f2:88:2f:c6:92:cd:c4:f0:39:8e:a5:ff:6a:9b:
         59:e4:e5:64:fa:1a:a2:b5:63:3a:fa:d5:17:18:5f:4e:5a:8e:
         67:4a:14:9f:f7:4f:29:2e:08:06:75:ed:fc:c1:32:a4:e0:f7:
         00:26:36:36:40:02:29:52:58:2d:18:81:46:42:44:74:0a:9e:
         00:82:0f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:44:40 2025 by rpki-client