Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/72610aea-f4b7-372c-af34-17a023cb8852.roa
File:                     72610aea-f4b7-372c-af34-17a023cb8852.roa (raw, json)
Hash identifier:          dNJ4XcKmsO3to0ZZRDYtHdQ3XdHza/vvTABjFnlEJC0=
Subject key identifier:   E3:56:68:80:CB:65:CB:A4:0A:72:28:5D:81:11:63:97:72:34:C3:5B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EC63C784ED5C356D1242E2A20
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/72610aea-f4b7-372c-af34-17a023cb8852.roa
Signing time:             Sun 09 Aug 2026 01:00:12 +0000
ROA not before:           Sun 09 Aug 2026 01:00:12 +0000
ROA not after:            Sat 07 Nov 2026 02:00:12 +0000
asID:                     11798
IP address blocks:        23.26.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c6:3c:78:4e:d5:c3:56:d1:24:2e:2a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug  9 01:00:12 2026 GMT
            Not After : Nov  7 02:00:12 2026 GMT
        Subject: CN=ba0e79f4-300d-4606-b665-7a711dd17c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:85:95:b7:ac:cd:45:50:37:82:bc:b3:d0:2b:
                    e7:e3:e2:11:02:40:e2:cd:0e:44:e9:c4:f8:27:a8:
                    27:cc:1f:68:d8:ae:95:a1:6a:7b:4f:a3:dc:8b:4d:
                    b6:8e:00:b9:39:cd:41:6d:b7:72:a9:0c:f3:bd:b4:
                    05:b9:ba:4d:74:5b:36:da:65:8a:0f:9f:00:55:dc:
                    02:a7:6c:d5:f1:d4:b3:9e:f9:be:50:59:ac:e0:32:
                    8c:3b:e4:67:1c:c2:42:fa:88:2f:3e:07:87:47:76:
                    16:a0:63:a4:47:25:25:5a:18:4f:2a:14:99:1c:ce:
                    60:4f:f9:61:aa:e1:11:c7:8d:03:25:6a:52:6d:9c:
                    45:37:8c:49:04:47:a4:01:32:cf:d6:06:5c:39:54:
                    47:4a:06:3a:9c:3b:40:fe:ae:9f:a3:19:72:39:72:
                    f1:c0:c2:c9:9f:83:a5:2e:d6:bd:69:13:01:88:89:
                    13:2e:2e:82:24:c6:58:9f:3d:1e:9b:da:07:95:52:
                    ba:57:0f:b1:9f:b2:ba:56:e8:ac:61:b1:16:05:4e:
                    22:7d:1b:ce:a1:25:c5:af:2a:39:20:83:9a:c2:f6:
                    5f:22:92:c7:5b:6d:45:89:43:19:52:3e:83:cd:85:
                    20:72:17:96:ce:44:0a:c9:cf:8e:f4:43:28:1f:10:
                    e4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:56:68:80:CB:65:CB:A4:0A:72:28:5D:81:11:63:97:72:34:C3:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/72610aea-f4b7-372c-af34-17a023cb8852.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:ca:3a:41:25:4d:68:c7:ef:36:eb:f1:86:f3:98:fe:e1:17:
         5b:53:d3:d7:fe:38:1f:95:9e:57:5e:a5:14:d8:37:b6:07:4a:
         a4:74:dd:79:92:64:a7:d8:41:13:b6:0e:e1:2f:9b:f9:6a:c5:
         82:d3:2a:22:9b:d2:76:fe:15:e2:fa:cb:9f:77:b2:91:34:32:
         b0:a0:c1:10:e2:1b:65:fa:53:00:aa:1b:95:3c:a5:b6:61:df:
         2f:26:24:af:31:67:4a:8c:bb:a0:eb:99:2a:fd:39:31:70:82:
         c1:1b:d2:77:96:ec:11:e4:cc:e3:74:c5:eb:f2:6f:13:36:3e:
         c3:cd:2f:01:5a:09:d8:84:bd:b3:00:8c:bc:88:d6:f5:ca:69:
         db:ce:7b:e6:26:7e:d9:6b:6e:27:51:34:71:75:96:47:e3:95:
         00:cc:fc:ef:64:3f:48:33:64:bd:c3:96:cb:c0:c8:f1:16:82:
         30:94:50:7e:97:32:93:ce:0d:7a:87:3a:1c:34:1a:ee:dc:a9:
         6f:a6:24:b2:9b:69:cd:72:42:79:a2:fe:ac:95:83:e9:56:49:
         1c:3e:ad:57:5f:cc:36:e4:f7:0b:f3:54:bd:f0:c9:4a:7b:de:
         44:aa:fd:f3:95:9a:e0:77:a2:09:e8:25:fb:5a:a6:7e:4f:01:
         a9:10:45:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:03:56 2026 by rpki-client