Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7c4e77cd-68ec-3ddc-a337-b49cb2c345b9.roa
File:                     7c4e77cd-68ec-3ddc-a337-b49cb2c345b9.roa (raw, json)
Hash identifier:          uLNdhY9TEAft/20QBeAzKtVI3jv44txxEpFHbmeHz3Q=
Subject key identifier:   38:C8:69:E5:B9:AA:B0:0E:E5:1D:C8:98:45:43:BF:7D:0A:D1:B9:E3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E4AEF72E50A610F7388FB6540
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7c4e77cd-68ec-3ddc-a337-b49cb2c345b9.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     203545
IP address blocks:        23.26.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:72:e5:0a:61:0f:73:88:fb:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=055d5cdc-5389-4df3-97fa-3600156cc841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1d:3c:ad:fa:00:07:08:dc:4d:9e:dc:c7:f2:
                    c7:74:b6:47:8c:e1:8c:ea:8c:84:29:cf:b6:7e:08:
                    18:45:75:fe:47:aa:00:4b:2e:fc:2e:b8:b9:95:ba:
                    34:31:4d:94:e3:94:b0:51:66:fd:f5:48:41:95:cc:
                    a9:de:33:06:98:3b:68:c5:f4:93:06:5d:1a:1a:02:
                    14:b7:0f:89:e6:63:48:49:82:b5:3d:07:22:c6:5e:
                    e6:fe:3f:5c:e4:8a:e1:16:d2:b7:20:17:2b:da:d4:
                    5e:bf:0c:07:62:21:bb:09:12:ae:b9:36:e9:5b:33:
                    6d:fc:9c:40:c7:4d:ba:38:e4:d4:c9:72:28:68:fc:
                    2c:0d:2f:dd:da:f3:8c:65:46:95:bf:bf:86:74:c4:
                    a1:e5:41:fd:61:71:d8:d2:73:ae:92:d5:2a:26:86:
                    b2:eb:ba:e8:ee:04:65:92:0c:15:3a:30:30:9a:7e:
                    31:2b:e1:1a:a9:d1:62:9d:36:19:c7:c3:c0:6a:df:
                    1b:36:2b:88:e7:c7:e4:8f:3d:39:27:cc:84:31:f8:
                    3a:62:e7:1c:f7:aa:04:f3:da:d0:e3:a3:df:13:d4:
                    f0:9b:4c:34:70:e7:84:1d:da:cc:11:22:94:22:e1:
                    56:42:ab:0d:73:7b:81:9a:68:99:16:59:9a:e3:09:
                    d8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C8:69:E5:B9:AA:B0:0E:E5:1D:C8:98:45:43:BF:7D:0A:D1:B9:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7c4e77cd-68ec-3ddc-a337-b49cb2c345b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:0f:52:65:13:8d:c7:43:c7:ff:78:7e:65:23:68:d7:a4:98:
         3d:84:6d:c2:63:c6:c6:d8:9a:de:51:f6:eb:ef:9c:8a:8e:07:
         7c:30:0a:e8:53:17:b7:be:65:af:a4:76:ed:38:7d:b9:22:45:
         39:7c:45:3c:b4:43:fc:e2:a3:ee:56:56:db:12:90:59:b2:8e:
         74:fa:5f:c4:26:e6:b3:8e:92:92:ad:4c:cc:19:f0:44:13:85:
         80:5c:30:4a:ef:05:fe:76:70:b2:e6:09:73:b5:ba:67:04:35:
         ad:53:29:78:5e:f1:ee:fa:a1:db:e7:cf:08:4a:e0:7a:01:fd:
         d1:85:06:1d:37:f5:3d:f0:51:11:30:5e:40:38:f4:ab:e4:93:
         42:03:6d:50:9b:dd:70:c7:80:04:00:bb:56:a6:01:30:42:89:
         06:2f:89:e3:36:53:85:00:d5:ac:ce:f4:db:00:89:70:b3:24:
         5f:9f:25:16:af:96:34:46:ac:5f:1f:36:5b:78:ad:a7:51:21:
         fb:dd:79:90:5b:f8:10:85:df:e9:7b:59:56:c2:b8:cd:99:f5:
         15:87:9e:63:3d:33:ac:5c:b2:de:47:bc:7d:26:73:30:11:d7:
         08:f9:b6:cd:b9:48:b2:a8:c8:bc:ca:32:23:c6:8a:87:64:7c:
         2b:11:b3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 12:26:41 2026 by rpki-client