Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6f7294df-f688-35b8-a0d2-852a30d35b92.roa
File:                     6f7294df-f688-35b8-a0d2-852a30d35b92.roa (raw, json)
Hash identifier:          tM9RtvHq/gnPDPhZP/yIREL1O+Tx8GmBJ9l2z9/8u7Y=
Subject key identifier:   3C:4E:10:8E:25:9C:B3:E5:CB:40:AB:2A:F8:1D:8E:40:26:11:69:7C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F4112DC4B1178D9F10C484100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6f7294df-f688-35b8-a0d2-852a30d35b92.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     200173
IP address blocks:        23.26.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:dc:4b:11:78:d9:f1:0c:48:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=8a1be182-a3f0-473d-844d-8c737b8ad772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:81:f4:33:43:82:7d:f7:fb:b8:33:c4:f8:a2:
                    6e:84:ae:ff:5b:02:34:2d:2f:81:ad:91:de:73:e0:
                    f4:5a:f5:ec:a0:fa:5c:b0:f1:94:67:43:f7:5c:72:
                    2d:a0:b4:dd:a6:93:5e:55:46:c9:cd:52:91:7b:e5:
                    35:9f:ec:ee:44:7c:9d:96:51:7c:30:3a:13:15:d2:
                    b1:21:3a:42:d7:30:f7:8b:2c:b2:16:4b:0d:c2:a0:
                    00:b2:c2:2d:60:a9:df:67:5a:82:82:62:ae:57:7b:
                    d4:e1:32:59:75:a7:e8:0d:b1:c4:44:84:ea:00:ff:
                    d8:92:f9:a7:9b:f8:1a:64:8e:8e:0f:18:a3:3c:0d:
                    4a:bc:26:e5:48:30:0a:1e:72:65:b9:12:72:85:05:
                    6f:b0:50:fd:6a:d0:f1:39:70:36:3f:01:12:1e:5c:
                    c6:0a:dd:d9:82:c7:ed:c5:ef:05:e6:35:e3:96:ac:
                    27:aa:63:33:3c:2c:7f:ea:7d:ec:cc:db:11:18:e7:
                    97:ab:30:65:31:12:34:0d:63:43:9a:ad:65:69:29:
                    27:6d:fa:e1:c0:64:e8:07:c4:ba:1d:60:cf:80:f6:
                    09:ad:84:83:0e:9f:d8:7f:04:79:18:2a:bf:63:f8:
                    0a:c1:21:c5:a6:f7:22:5f:8c:6a:3d:c5:a1:9f:a5:
                    8e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4E:10:8E:25:9C:B3:E5:CB:40:AB:2A:F8:1D:8E:40:26:11:69:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6f7294df-f688-35b8-a0d2-852a30d35b92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:4a:3a:0c:af:b8:ab:74:d9:a1:7e:d0:5a:17:9c:bb:a4:4c:
         02:dc:a7:3d:6f:10:36:13:10:41:9b:50:7d:ad:c0:c1:35:f7:
         99:21:c0:e0:3b:69:b6:cd:b7:c6:fd:84:fa:0b:f0:33:b5:b6:
         0c:39:df:99:ea:fa:ac:32:df:82:00:d7:5a:4b:d9:c8:9b:b8:
         07:f6:f5:9a:19:95:a1:f1:f4:ee:b3:a0:cd:7c:c1:94:10:b6:
         23:c8:4f:ee:ee:b1:ba:11:70:5d:ef:a8:0d:60:cc:0d:1b:22:
         1f:94:57:d3:72:58:6c:9a:90:7c:cb:6f:f2:e7:0b:ce:33:dd:
         8b:62:87:84:9c:32:7b:d7:d7:40:9b:f8:72:0f:0f:e7:21:c7:
         f7:b8:73:2f:e9:cd:b0:1e:a5:6d:83:65:47:18:e8:f5:50:47:
         f5:eb:35:a8:d2:dc:fd:bc:03:36:ab:b2:fa:ec:48:cd:53:cd:
         14:35:85:35:8f:9e:68:97:4b:eb:2a:ef:42:c3:79:64:d9:be:
         1e:1c:af:02:56:fe:57:cc:ff:8d:5c:0e:df:2b:8e:de:0b:c2:
         72:23:02:10:22:ef:b4:83:d2:17:21:0d:68:ee:6a:6c:53:77:
         c7:89:08:37:a4:fb:fe:40:f2:f0:e1:33:aa:e7:53:19:91:16:
         17:17:d8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:04:23 2026 by rpki-client