Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8973ecc0-539a-34d1-af26-f3a5ffb4a40c.roa
File:                     8973ecc0-539a-34d1-af26-f3a5ffb4a40c.roa (raw, json)
Hash identifier:          gsGyoTPhjl01YHgAXX0YCNz1v/PFocGdOlJqi8pa4fI=
Subject key identifier:   95:E4:98:B7:8D:2E:FF:5E:DB:16:3C:CC:81:16:68:81:51:54:4E:E6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F21C91913CDCAEDF78CD49880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8973ecc0-539a-34d1-af26-f3a5ffb4a40c.roa
Signing time:             Thu 10 Sep 2026 20:02:19 +0000
ROA not before:           Thu 10 Sep 2026 20:02:19 +0000
ROA not after:            Wed 09 Dec 2026 21:02:19 +0000
asID:                     399646
IP address blocks:        23.26.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:21:c9:19:13:cd:ca:ed:f7:8c:d4:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 10 20:02:19 2026 GMT
            Not After : Dec  9 21:02:19 2026 GMT
        Subject: CN=e47b7305-e528-465d-937f-9d49d80abb05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ff:10:23:77:d3:be:af:5e:e8:6a:27:fa:ef:
                    91:86:ff:e3:b0:35:8d:a5:7b:a2:fe:a7:fc:e0:07:
                    db:36:34:4e:7a:55:88:60:78:97:d9:06:b1:04:2d:
                    2b:36:38:77:45:cc:15:75:ce:cb:4d:f8:29:64:48:
                    f6:51:d3:21:6c:fd:18:09:36:f8:72:8f:d3:2f:6c:
                    d8:e2:78:80:89:ee:57:b5:db:61:4e:ae:9e:92:bb:
                    8c:bb:24:47:34:d6:7e:f7:17:56:bb:8b:af:4c:c7:
                    70:92:34:fc:a4:5e:d4:73:7a:70:95:51:71:a9:98:
                    04:96:f9:0f:f5:8f:f9:38:e6:ec:89:53:7d:28:41:
                    0e:40:d2:5a:57:66:93:f5:c8:2a:a4:7a:1c:57:c0:
                    dd:4f:fa:54:81:9b:09:59:23:18:d6:77:0f:61:3b:
                    d3:d2:43:c9:bd:46:3e:d1:13:5d:d2:86:9b:41:e2:
                    34:10:29:0a:f4:92:99:07:ae:97:f4:2a:b8:16:77:
                    1e:39:3a:fa:5a:c8:48:1b:4f:77:fa:8d:0d:b2:5c:
                    00:df:bc:9d:08:64:0b:a9:dc:37:f2:5a:58:27:51:
                    3b:4f:84:8b:fa:cc:da:58:e9:17:7e:59:7f:79:b8:
                    09:58:ee:1c:3e:46:8d:f5:5b:75:74:b9:56:9b:f2:
                    01:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E4:98:B7:8D:2E:FF:5E:DB:16:3C:CC:81:16:68:81:51:54:4E:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8973ecc0-539a-34d1-af26-f3a5ffb4a40c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:9d:75:81:b3:d5:07:28:f5:50:01:bb:ba:15:72:e5:08:56:
         86:87:6b:ef:8d:05:86:a6:da:69:ef:07:fc:93:f1:b9:c1:cd:
         8b:d0:29:fa:08:54:4b:6c:6f:9e:30:12:1a:37:c0:70:43:79:
         8a:04:24:eb:f0:b8:f2:62:61:a7:7d:f7:d0:c9:ab:a0:28:7d:
         0d:46:d7:b0:99:de:5f:7b:1a:90:02:5e:08:a4:17:99:9c:c9:
         91:f9:ab:10:99:e3:82:d3:1b:e5:21:85:36:d6:63:f4:f5:51:
         9b:7e:2c:7d:55:40:03:5a:70:9e:d7:7f:07:2b:bb:50:56:c1:
         10:35:08:12:1e:f8:c6:36:19:41:ee:79:24:96:7f:14:d3:2a:
         1b:3a:e5:fa:c7:e1:de:8e:7a:da:43:c0:8c:5a:b9:57:e8:e6:
         8a:0e:d6:33:16:b3:da:49:46:7e:0c:10:30:e8:0f:e5:a3:3f:
         01:2c:1e:c4:8b:0a:7a:ae:2e:10:a8:8f:4d:22:51:3f:8a:8d:
         b1:ca:a6:00:98:78:cb:16:77:b5:98:32:4a:6d:c7:73:a8:d7:
         53:23:08:b8:a1:46:b9:a8:ec:a3:d8:e2:ea:e9:c5:f9:7b:e9:
         c2:c7:d3:8e:a1:60:da:f0:ee:03:f4:a7:56:e2:17:d9:55:91:
         cf:80:21:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 07:57:53 2026 by rpki-client