Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/939bc912-aa1b-36f1-8654-f501c58ccf2e.roa
File:                     939bc912-aa1b-36f1-8654-f501c58ccf2e.roa (raw, json)
Hash identifier:          2pBJdaJnM5EZKp9f68/El6auTPwnhHsoaf23jvZclkc=
Subject key identifier:   0D:E0:0F:A5:9F:A8:E9:4E:53:E2:42:D6:2B:9E:2E:3D:8C:72:66:F4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584B9872473D49F746B6077EBBC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/939bc912-aa1b-36f1-8654-f501c58ccf2e.roa
Signing time:             Tue 21 Oct 2025 13:00:39 +0000
ROA not before:           Tue 21 Oct 2025 13:00:39 +0000
ROA not after:            Mon 19 Jan 2026 14:00:39 +0000
asID:                     7385
IP address blocks:        23.26.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:98:72:47:3d:49:f7:46:b6:07:7e:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 21 13:00:39 2025 GMT
            Not After : Jan 19 14:00:39 2026 GMT
        Subject: CN=34afe3ce-fbdc-44c8-8271-de47f7cc733c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ef:c1:47:ba:90:c2:29:84:6e:60:01:fc:58:
                    6e:38:07:ae:6b:7a:62:6c:cd:81:a9:42:3d:d0:7d:
                    c9:4f:da:8f:2c:e9:1f:78:02:64:d9:ff:74:44:cd:
                    10:25:7c:67:1c:d6:6e:a4:f1:ae:ae:91:7c:02:6a:
                    73:dc:ca:bf:8e:70:1e:ad:9d:b0:24:3f:7f:70:53:
                    0f:e9:88:b0:a6:9e:17:76:81:17:36:ea:12:86:8d:
                    ed:43:c4:cb:06:b2:66:a6:29:0c:16:40:1e:67:69:
                    00:08:5b:2b:bf:14:52:e2:66:2e:71:09:fd:0a:ef:
                    91:32:de:38:a7:b2:ed:44:64:57:0d:06:ff:28:13:
                    86:d5:50:ea:a7:90:5b:ca:50:d9:05:bd:de:27:e7:
                    a3:a4:fe:29:9d:c0:6e:32:d4:7b:94:aa:1c:d6:af:
                    82:66:17:23:7a:ee:69:5b:15:26:05:e4:58:12:3a:
                    29:67:99:f5:9d:fc:db:da:d6:80:5a:ba:a3:5a:75:
                    38:76:54:2a:df:7d:f7:2f:73:66:92:e5:db:9d:5b:
                    89:e1:4c:46:56:3f:66:a7:6f:03:b7:2f:ac:da:93:
                    3d:11:95:b8:ca:85:4d:78:b3:1b:48:81:2a:29:07:
                    92:e2:80:97:3a:0f:b3:2b:9e:8f:34:76:46:82:0c:
                    bb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E0:0F:A5:9F:A8:E9:4E:53:E2:42:D6:2B:9E:2E:3D:8C:72:66:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/939bc912-aa1b-36f1-8654-f501c58ccf2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:5a:3b:9d:2c:a8:c2:3e:cf:88:41:5a:51:95:df:f1:81:16:
         75:8b:ef:2a:80:24:9b:7e:67:4d:6a:42:05:a7:e0:3e:19:69:
         68:3b:80:3e:75:78:42:03:10:eb:f0:d3:d7:b0:07:29:27:cf:
         31:44:c1:df:17:db:f2:14:88:47:15:7e:65:e3:8c:1c:5f:d9:
         68:27:cc:36:ed:3a:16:90:ec:eb:46:c0:b0:33:56:92:6c:65:
         da:ec:5d:9f:14:e8:d8:67:95:e7:4a:0b:dc:65:cf:3d:43:5d:
         96:c0:01:a1:67:79:46:2f:e0:aa:81:d9:c4:22:25:28:1d:c0:
         88:94:cf:f9:4f:ca:1d:fa:c0:49:82:31:12:c0:07:ce:42:20:
         eb:f7:b6:6b:0b:17:01:49:b7:6c:56:a1:04:84:3a:ea:42:65:
         d0:ea:b5:1a:f7:68:ed:cc:e8:bd:b4:74:51:7e:5f:94:9a:b6:
         cd:a1:00:01:46:91:6b:e8:00:ea:a5:51:c3:b4:36:b1:28:ef:
         f5:a3:20:7b:27:d3:b6:08:f0:00:3f:a2:68:44:ae:d0:cb:0a:
         15:ad:91:74:ef:ce:78:d6:37:04:35:e4:17:82:da:b9:cb:91:
         42:f8:f9:dc:1f:99:87:29:cc:51:95:47:c2:35:b2:78:9f:c4:
         b5:d9:4f:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYckc9SfdGtgd+u8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk
MzRhZmUzY2UtZmJkYy00NGM4LTgyNzEtZGU0N2Y3Y2M3MzNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7e/BR7qQwimEbmAB/FhuOAeua3pibM2BqUI9
0H3JT9qPLOkfeAJk2f90RM0QJXxnHNZupPGurpF8Ampz3Mq/jnAerZ2wJD9/cFMP
6Yiwpp4XdoEXNuoSho3tQ8TLBrJmpikMFkAeZ2kACFsrvxRS4mYucQn9Cu+RMt44
p7LtRGRXDQb/KBOG1VDqp5BbylDZBb3eJ+ejpP4pncBuMtR7lKoc1q+CZhcjeu5p
WxUmBeRYEjopZ5n1nfzb2taAWrqjWnU4dlQq3333L3NmkuXbnVuJ4UxGVj9mp28D
ty+s2pM9EZW4yoVNeLMbSIEqKQeS4oCXOg+zK56PNHZGggy7/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA3gD6WfqOlOU+JC1iueLj2Mcmb0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOTM5YmM5MTItYWExYi0z
NmYxLTg2NTQtZjUwMWM1OGNjZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxpHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADFaO50sqMI+z4hBWlGV3/GBFnWL7yqAJJt+Z01qQgWn4D4ZaWg7gD51
eEIDEOvw09ewByknzzFEwd8X2/IUiEcVfmXjjBxf2WgnzDbtOhaQ7OtGwLAzVpJs
ZdrsXZ8U6NhnledKC9xlzz1DXZbAAaFneUYv4KqB2cQiJSgdwIiUz/lPyh36wEmC
MRLAB85CIOv3tmsLFwFJt2xWoQSEOupCZdDqtRr3aO3M6L20dFF+X5Sats2hAAFG
kWvoAOqlUcO0NrEo7/WjIHsn07YI8AA/omhErtDLChWtkXTvznjWNwQ15BeC2rnL
kUL4+dwfmYcpzFGVR8I1snifxLXZT1o=
-----END CERTIFICATE-----
Generated at Sun Nov 2 16:49:20 2025 by rpki-client