Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8b38c070-fd8b-3e04-9eba-10de1ac14403.roa
File:                     8b38c070-fd8b-3e04-9eba-10de1ac14403.roa (raw, json)
Hash identifier:          plnPmPcSkXNYM1PM0UMUYS1/E+qLhVRQUn+SQX3CaD8=
Subject key identifier:   44:BB:F6:83:DF:1A:07:2C:2D:85:76:B2:CC:92:99:73:FF:71:96:18
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849F17FA8326AEBCB9B5206D600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8b38c070-fd8b-3e04-9eba-10de1ac14403.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     30644
IP address blocks:        23.26.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:a8:32:6a:eb:cb:9b:52:06:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=0ae8e797-b9e0-48dc-951a-2eba4563d33d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:69:03:9d:e8:73:3b:c0:04:44:ce:45:a8:1e:
                    c6:f8:95:5f:6e:c7:72:c6:02:ab:37:6e:f6:87:56:
                    cb:ba:8a:dd:19:16:3a:87:dd:15:58:b0:df:7e:12:
                    de:67:6e:00:29:dc:2b:37:22:0d:bc:ea:97:c6:c2:
                    d1:23:9f:4c:e8:06:4e:96:e6:f0:1c:3d:a1:ed:e7:
                    47:fa:82:7d:7d:5a:c1:7f:47:9c:2d:87:b8:5b:fc:
                    06:4c:ef:06:aa:dd:cb:ba:0c:e3:0a:26:80:e7:cf:
                    e8:96:eb:0c:be:57:83:e3:66:55:b5:1c:54:8e:40:
                    c8:09:cb:b8:4c:c2:a4:5b:a7:52:d1:19:69:cf:77:
                    b1:01:a9:3a:3a:0a:6d:b1:58:a6:cb:a4:30:43:d0:
                    9e:43:c9:4f:ad:46:69:04:46:45:ee:c2:4f:f3:cc:
                    db:18:f3:e5:0e:3e:13:6b:8b:fc:74:3a:ac:12:88:
                    82:b8:fa:6a:a2:1d:25:2d:df:ba:c4:98:f8:3d:b4:
                    11:6c:e8:ea:b0:38:7a:bf:8a:f2:13:8d:fb:dc:a6:
                    b5:bc:d2:b8:38:48:b1:b4:fa:4b:9b:72:8f:6b:13:
                    7c:b8:20:69:9d:06:2b:c7:b2:8b:ff:90:39:d7:d6:
                    0a:4c:d6:0e:fa:15:8d:dc:eb:6c:05:8b:d4:1b:fa:
                    63:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BB:F6:83:DF:1A:07:2C:2D:85:76:B2:CC:92:99:73:FF:71:96:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8b38c070-fd8b-3e04-9eba-10de1ac14403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ad:9b:dd:1b:5b:2a:32:02:79:e1:47:75:66:7a:1b:63:81:
         30:e3:bc:c6:6f:cc:a2:c4:0c:ca:20:62:d4:3f:2c:3b:a6:df:
         7e:74:24:a4:1f:51:14:0d:fa:a4:f3:7b:7f:ea:36:cd:b1:fa:
         3b:28:c2:60:ba:fa:7d:c2:b6:cb:e5:0b:5e:2a:63:76:f5:96:
         de:f6:ff:d4:50:c0:75:56:fe:09:ef:a7:10:ce:14:c6:4f:40:
         46:08:d0:d8:f5:47:b8:60:e6:f0:da:8c:ea:38:c8:70:28:26:
         15:66:bc:f2:22:aa:5b:f7:8f:be:89:47:35:4c:92:05:09:19:
         90:84:47:0c:c8:64:fa:60:56:e2:ef:62:39:a1:54:b1:dc:04:
         42:f4:24:e7:f9:02:45:bb:af:98:58:68:b1:0a:7a:95:92:2c:
         9d:9f:6f:bd:fd:27:e7:83:8d:ed:a4:d8:83:cf:43:92:fd:5c:
         bd:25:64:7c:5e:99:a7:75:c3:45:c8:36:bf:85:b1:47:67:39:
         8c:ff:be:b1:7d:d9:68:de:56:8d:42:b3:fd:d9:99:b4:9c:4a:
         58:5d:42:40:f6:2a:d1:03:02:4c:e5:87:9f:ff:63:9c:4b:e5:
         33:dc:56:55:8d:a3:53:24:98:9b:8d:b2:53:69:e4:8e:82:ef:
         59:7d:bb:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf6gyauvLm1IG1gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
MGFlOGU3OTctYjllMC00OGRjLTk1MWEtMmViYTQ1NjNkMzNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmkDnehzO8AERM5FqB7G+JVfbsdyxgKrN272
h1bLuordGRY6h90VWLDffhLeZ24AKdwrNyINvOqXxsLRI59M6AZOlubwHD2h7edH
+oJ9fVrBf0ecLYe4W/wGTO8Gqt3LugzjCiaA58/olusMvleD42ZVtRxUjkDICcu4
TMKkW6dS0Rlpz3exAak6OgptsVimy6QwQ9CeQ8lPrUZpBEZF7sJP88zbGPPlDj4T
a4v8dDqsEoiCuPpqoh0lLd+6xJj4PbQRbOjqsDh6v4ryE4373Ka1vNK4OEixtPpL
m3KPaxN8uCBpnQYrx7KL/5A519YKTNYO+hWN3OtsBYvUG/pjkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFES79oPfGgcsLYV2ssySmXP/cZYYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOGIzOGMwNzAtZmQ4Yi0z
ZTA0LTllYmEtMTBkZTFhYzE0NDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxp5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGWtm90bWyoyAnnhR3VmehtjgTDjvMZvzKLEDMogYtQ/LDum3350JKQf
URQN+qTze3/qNs2x+jsowmC6+n3CtsvlC14qY3b1lt72/9RQwHVW/gnvpxDOFMZP
QEYI0Nj1R7hg5vDajOo4yHAoJhVmvPIiqlv3j76JRzVMkgUJGZCERwzIZPpgVuLv
YjmhVLHcBEL0JOf5AkW7r5hYaLEKepWSLJ2fb739J+eDje2k2IPPQ5L9XL0lZHxe
mad1w0XINr+FsUdnOYz/vrF92WjeVo1Cs/3ZmbScSlhdQkD2KtEDAkzlh5//Y5xL
5TPcVlWNo1MkmJuNslNp5I6C71l9u6g=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:39:51 2025 by rpki-client