Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/718472bc-02b6-3f08-b9ed-f480a3a50a5a.roa
File:                     718472bc-02b6-3f08-b9ed-f480a3a50a5a.roa (raw, json)
Hash identifier:          sHORWIGUH5meDbFBGwGIpIguDzr6SJLVXSZZGsIPAHU=
Subject key identifier:   77:7C:FB:49:07:1C:A9:52:90:8D:3A:1C:E7:06:94:92:14:92:93:1A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EB8474EF4EC3979BFF4E60300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/718472bc-02b6-3f08-b9ed-f480a3a50a5a.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     401152
IP address blocks:        23.26.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:4e:f4:ec:39:79:bf:f4:e6:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=270593bb-0e45-4e5d-942d-2abf1cd0ecd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:45:62:3a:69:85:4a:0a:45:1b:09:41:f0:7b:
                    90:a0:58:e8:88:b4:e8:5a:87:76:86:4a:95:78:b3:
                    27:ec:bf:09:70:00:74:3d:c5:7f:7a:9d:17:6c:6e:
                    86:8d:94:3a:48:f5:59:de:5a:a3:36:5c:59:95:9d:
                    61:b9:f8:58:7d:4e:a1:53:f9:80:10:29:fe:3f:7b:
                    06:a8:98:03:ff:89:98:82:79:ca:bb:ce:c7:da:1f:
                    3b:a7:c3:07:62:fb:fc:14:b5:c0:3c:1f:30:e4:84:
                    84:47:c7:c8:a2:da:5f:6c:da:a3:42:51:bf:69:7e:
                    d8:86:ed:8c:c6:04:c7:da:9c:79:8f:c1:ec:39:a1:
                    3d:64:a5:96:e4:6b:51:65:9c:3f:be:3e:83:f3:0b:
                    7d:d9:16:38:de:da:13:1e:cf:65:21:1c:42:c9:a2:
                    cf:14:95:44:70:33:7d:ae:d6:86:ea:4f:21:f5:31:
                    05:d5:3b:74:65:71:95:43:dc:86:ce:a3:6f:d2:93:
                    81:f4:94:da:d6:50:4e:4b:06:e6:b0:55:2d:35:8a:
                    59:a1:8a:95:e2:ac:ec:c5:3e:d1:80:89:9b:8e:96:
                    f5:af:41:d8:9f:a0:bf:f2:03:f1:0f:a8:87:45:12:
                    27:cf:37:45:1b:cd:82:71:a0:a2:e3:72:7e:81:2b:
                    d6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7C:FB:49:07:1C:A9:52:90:8D:3A:1C:E7:06:94:92:14:92:93:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/718472bc-02b6-3f08-b9ed-f480a3a50a5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:81:ea:93:9f:5d:06:5f:be:74:d1:4a:67:08:e1:ef:da:9c:
         22:e2:18:e9:73:71:70:ed:85:8c:2a:7d:35:e0:4b:ad:9d:99:
         fd:0b:f5:99:3e:32:f8:b2:3a:bc:67:ba:35:27:fe:cf:6c:b3:
         44:67:dd:7d:47:4a:a7:93:1e:62:23:40:3d:d0:c6:90:c0:22:
         a5:30:9d:5a:6b:13:1a:4f:89:cd:29:97:fa:a6:1e:14:74:98:
         50:a5:f5:8e:77:37:71:f5:a3:3d:03:16:7b:0a:b3:d3:71:e7:
         4f:01:bb:cd:8d:e1:17:87:29:e6:1a:8d:9c:bb:68:62:61:85:
         96:34:9d:5d:39:8a:f2:ac:c9:ab:7b:67:6f:76:18:97:a9:fa:
         32:99:b3:e4:8f:5c:56:9a:91:45:de:95:ca:e7:ee:70:0a:0d:
         87:c8:c1:d7:ed:37:da:c8:36:f8:61:9f:70:3a:b4:96:5d:02:
         82:53:34:e3:1d:be:04:d0:e9:7a:69:e7:96:92:79:e7:6f:d7:
         1d:9c:6a:f5:ab:bb:0c:62:c9:2b:98:b5:8a:33:f9:48:dc:e0:
         4e:03:ad:df:ae:85:62:e7:f9:0c:98:82:d2:2d:5c:26:df:66:
         bd:9c:60:ff:48:f0:3c:f8:18:20:93:8f:d0:76:95:0f:9c:5f:
         fc:46:89:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 19:53:03 2026 by rpki-client