Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8bd58994-7a40-32e7-9074-946a83698374.roa
File:                     8bd58994-7a40-32e7-9074-946a83698374.roa (raw, json)
Hash identifier:          MeiPBC7r8jnx21g6ofUPvoEGexqNc/kn+YmwNaV1a8c=
Subject key identifier:   8F:09:B7:2E:82:92:55:7F:4F:ED:B8:90:9A:3C:E6:85:38:B5:57:47
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B2E5C42CA4B696511D7D35DA0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8bd58994-7a40-32e7-9074-946a83698374.roa
Signing time:             Sat 13 Sep 2025 13:00:41 +0000
ROA not before:           Sat 13 Sep 2025 13:00:41 +0000
ROA not after:            Fri 12 Dec 2025 14:00:41 +0000
asID:                     51847
IP address blocks:        23.26.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2e:5c:42:ca:4b:69:65:11:d7:d3:5d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 13 13:00:41 2025 GMT
            Not After : Dec 12 14:00:41 2025 GMT
        Subject: CN=89718564-bb1e-4d6c-9841-9514f7658a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6d:1b:80:be:5d:4d:30:af:e7:70:71:30:38:
                    0a:06:7a:22:e3:c7:79:ff:17:5c:0e:f2:10:dc:83:
                    1c:39:80:9f:41:65:59:3c:b9:4e:49:52:9b:90:94:
                    31:97:e6:d3:87:3f:3a:0a:0f:cd:57:55:6f:79:1b:
                    c0:ec:fd:1a:72:0d:89:a1:98:85:87:75:94:13:33:
                    b9:fd:f1:f3:40:b1:15:a1:79:0a:89:d5:bc:1b:10:
                    7b:82:f4:4c:60:2f:4a:94:fa:e1:35:7e:91:cb:13:
                    ba:39:d6:bf:31:b0:fd:f1:e3:65:a3:9c:4a:9b:f5:
                    61:ae:1b:96:1b:9d:1f:e7:79:90:e4:08:20:af:75:
                    01:c2:e8:70:db:84:e7:14:fe:c6:31:d1:de:a9:c7:
                    5c:9f:b1:18:4b:19:44:cc:6d:72:74:eb:62:d5:8a:
                    f1:0b:c8:86:d9:2c:45:aa:b9:b3:e9:15:24:c0:51:
                    c4:5f:ad:d3:6e:3b:b2:7e:e0:32:9d:7f:a7:f2:5c:
                    f7:4d:c0:22:68:ef:65:1b:ff:b7:96:0c:47:51:77:
                    fa:dd:b3:a4:65:b0:7b:8d:10:c3:60:2f:1d:2c:7c:
                    ee:72:15:16:63:20:40:64:bc:3e:03:c5:c6:2e:c3:
                    27:19:3b:6a:75:17:17:a5:90:1f:13:4e:84:29:14:
                    8a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:09:B7:2E:82:92:55:7F:4F:ED:B8:90:9A:3C:E6:85:38:B5:57:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8bd58994-7a40-32e7-9074-946a83698374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:be:d2:68:e6:2a:25:e1:d2:cb:16:aa:e5:85:02:4b:09:04:
         a8:dd:8e:1b:70:7e:f9:28:20:75:3a:62:e5:64:59:f6:30:a3:
         33:7a:c7:23:f6:3c:9a:b9:6e:4e:0b:cf:d4:ce:83:81:f3:7e:
         09:60:e8:46:b0:a6:eb:97:c9:4b:11:1b:30:a1:6f:9e:e0:68:
         b0:43:b9:49:db:b7:37:51:2d:54:cf:7b:71:15:e1:06:37:c1:
         e1:2f:79:47:63:f5:f4:e2:f9:dc:55:fb:9c:53:ba:ad:5d:1f:
         f1:66:8b:71:f6:52:50:9d:f7:85:4f:c0:e3:34:cb:60:08:ba:
         55:ad:63:53:50:1c:63:b8:76:12:92:f4:41:48:78:46:fd:7a:
         09:34:83:74:a1:c2:e6:c9:ef:33:7a:ec:35:33:85:65:54:62:
         0f:56:3e:c6:35:e7:eb:64:17:08:aa:bc:7c:23:28:e4:c8:3a:
         0c:84:f4:c3:ed:8a:22:70:38:ff:1e:7b:a1:cd:35:1f:f2:54:
         ed:ea:8c:28:90:e0:59:99:a4:be:fe:4a:7f:ea:15:62:f6:19:
         b9:c6:8e:86:9d:70:5a:f8:32:c4:f2:18:42:08:67:f1:5c:00:
         13:d8:8a:8a:a5:1a:b4:0d:a7:97:1c:cd:2b:65:95:ba:85:16:
         86:b4:07:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:06:36 2025 by rpki-client