Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/718472bc-02b6-3f08-b9ed-f480a3a50a5a.roa
File:                     718472bc-02b6-3f08-b9ed-f480a3a50a5a.roa (raw, json)
Hash identifier:          oD4yxbJvfWgS/sMTg3vNvZYilm4tZWOCoxuOZtNtP40=
Subject key identifier:   CE:55:73:25:D7:FF:F5:05:BB:56:F9:77:99:9C:5D:56:34:10:33:11
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D366F576B90C36306B81CA700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/718472bc-02b6-3f08-b9ed-f480a3a50a5a.roa
Signing time:             Wed 18 Mar 2026 19:59:34 +0000
ROA not before:           Wed 18 Mar 2026 19:59:34 +0000
ROA not after:            Tue 16 Jun 2026 19:59:34 +0000
asID:                     401152
IP address blocks:        23.26.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:36:6f:57:6b:90:c3:63:06:b8:1c:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 18 19:59:34 2026 GMT
            Not After : Jun 16 19:59:34 2026 GMT
        Subject: CN=becc28af-f40b-4a5c-beab-1012eca8e3f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:25:d7:dc:f3:8a:71:fb:43:1a:87:87:94:a7:
                    7a:27:25:f6:c6:6a:d0:60:9f:3c:aa:7e:80:38:53:
                    ec:be:66:d2:99:3d:db:e9:ef:3e:2e:8c:c3:0a:1a:
                    56:19:08:1b:dc:07:0c:7c:a3:d0:6c:24:37:06:3f:
                    1a:cd:d9:2c:4a:70:06:4e:4a:2d:7a:31:7c:fb:89:
                    06:d3:0b:2d:58:88:2c:09:c3:a8:74:b5:f1:15:ef:
                    45:1c:01:fa:03:b4:7f:69:cf:f2:73:f4:f8:ef:78:
                    c9:34:70:a3:09:62:0f:45:b8:95:01:8b:76:19:ac:
                    3d:17:ee:bf:14:bf:9e:0d:ce:7c:b8:e2:41:8e:4a:
                    cd:36:1d:c2:4f:fb:e6:52:4c:e3:06:a5:7a:76:f6:
                    5a:a5:38:e4:18:20:3d:f0:e6:d0:7c:11:ce:91:36:
                    5b:a2:07:d4:66:ff:88:ee:39:cc:97:7a:c8:8e:6c:
                    3f:8d:09:bb:10:37:c8:01:2b:d0:4a:11:52:9f:93:
                    7e:08:52:2a:93:7e:0a:a2:3f:9d:16:6b:70:64:23:
                    68:a3:9a:58:37:91:d9:03:55:52:63:b3:bc:bb:90:
                    ab:c5:74:38:51:5f:35:d7:f9:e7:f7:87:15:8d:9a:
                    de:a2:65:a6:65:51:43:a1:65:b5:5b:6f:1f:57:89:
                    04:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:55:73:25:D7:FF:F5:05:BB:56:F9:77:99:9C:5D:56:34:10:33:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/718472bc-02b6-3f08-b9ed-f480a3a50a5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:da:0c:be:73:9e:08:32:26:ec:24:73:e7:4a:b2:ba:f2:79:
         70:a9:df:35:f4:13:a8:b7:43:5e:44:6c:95:1e:9c:a3:87:82:
         ad:5f:19:6c:87:59:8a:cd:1d:14:8b:b4:94:2d:94:72:e2:b8:
         29:2b:cf:f2:46:39:39:86:eb:c2:e4:1d:13:96:34:2a:8e:27:
         98:32:ca:50:4b:2a:52:81:1c:8d:67:79:0a:47:f5:f2:94:a3:
         f6:c1:2b:c0:ab:af:d5:34:f3:fe:2b:26:86:9a:e5:87:99:a0:
         85:22:85:55:d8:11:84:39:99:52:ab:f3:ac:0c:8e:b2:c7:22:
         08:cf:09:00:4e:e5:88:a7:4d:c8:f8:ef:a9:cb:40:41:e6:4c:
         77:f2:21:66:3c:12:67:10:23:dc:9f:ec:68:12:8e:38:d5:f2:
         4c:ac:9d:37:aa:af:69:46:69:94:15:65:8c:0f:5e:c6:b4:e3:
         f4:8a:ec:4e:f3:b1:0c:9b:5d:0c:85:de:88:ce:2b:3d:aa:28:
         3d:59:d4:d5:dc:33:6f:c0:c2:bc:cd:95:46:93:62:11:21:e2:
         d6:b9:93:1e:c6:a3:ac:fa:0a:0b:8d:aa:4c:ac:74:6e:1e:b9:
         9e:73:c1:53:96:dc:c7:33:35:4b:cc:2a:fb:0a:46:c4:39:ee:
         68:a3:35:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:50:48 2026 by rpki-client