Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/957223ab-38eb-3a30-8fa2-286cdc02e946.roa
File:                     957223ab-38eb-3a30-8fa2-286cdc02e946.roa (raw, json)
Hash identifier:          bW+TV7ctWxf6R0ZPX5gAYEWzCo60ytb7GvXj/+6FO80=
Subject key identifier:   D4:57:A4:6E:DD:F5:9C:19:5A:81:C9:A2:92:2A:6F:2F:EA:BC:98:A9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D32D4DCCE142EF7AAE27FF100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/957223ab-38eb-3a30-8fa2-286cdc02e946.roa
Signing time:             Tue 17 Mar 2026 13:00:41 +0000
ROA not before:           Tue 17 Mar 2026 13:00:41 +0000
ROA not after:            Mon 15 Jun 2026 13:00:41 +0000
asID:                     263812
IP address blocks:        23.26.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:32:d4:dc:ce:14:2e:f7:aa:e2:7f:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 17 13:00:41 2026 GMT
            Not After : Jun 15 13:00:41 2026 GMT
        Subject: CN=abee78a6-a1f6-4d97-9e7e-3d2286f9e03d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a2:00:8e:c1:6e:00:74:01:f8:8e:42:74:fb:
                    2f:d8:95:65:58:14:4f:51:e2:c7:be:34:f9:5d:7b:
                    1a:f6:6d:4c:18:d1:4b:74:e6:21:44:a4:f9:14:47:
                    04:f1:d6:37:25:1e:81:d8:e8:9c:30:9d:86:46:a4:
                    d0:2c:04:35:8a:fb:d2:68:e9:3b:59:d7:e4:cc:6c:
                    e5:1a:f6:ca:f4:5c:dc:d7:dd:0f:30:53:4d:ae:49:
                    40:16:2c:6a:ee:76:aa:92:7b:a1:ec:67:d8:29:75:
                    3b:3b:3b:c6:23:83:bd:e5:37:8d:f3:8e:0c:ac:96:
                    ac:d6:f3:4e:da:72:7b:07:40:74:97:56:db:c0:4d:
                    ff:ad:64:97:4f:77:6e:da:a4:9b:f8:08:09:8c:25:
                    89:72:37:0e:5a:66:4d:e1:db:e7:1f:c0:e2:1d:e3:
                    8b:f1:bd:ed:70:9b:4e:cf:83:a9:9a:d1:01:6c:a6:
                    2d:d7:b8:82:53:89:b7:37:a3:bc:9d:9b:85:b4:48:
                    0a:bf:b3:60:24:69:6f:b9:7a:ce:d0:9c:25:cf:5b:
                    8c:ad:c1:e6:83:40:4c:05:b4:09:8b:82:4f:4a:bf:
                    4a:ee:46:ae:17:1c:ee:47:f6:f4:74:19:63:d5:74:
                    fc:43:c9:19:df:df:89:c8:e7:f0:02:19:aa:a6:49:
                    d1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:57:A4:6E:DD:F5:9C:19:5A:81:C9:A2:92:2A:6F:2F:EA:BC:98:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/957223ab-38eb-3a30-8fa2-286cdc02e946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:1d:66:b0:70:d5:99:0f:21:20:cd:f4:38:f1:40:0f:61:66:
         99:a5:2c:70:a5:2a:f9:ee:b3:ce:b7:02:e0:b5:a2:e9:55:67:
         c9:e2:39:13:f4:28:2f:0d:7b:a7:5d:3a:ab:d0:65:35:34:75:
         5a:e0:e0:5c:3d:9d:43:58:15:10:a9:ea:f8:7d:ec:ef:ee:3e:
         e6:07:71:44:25:86:ed:5c:32:c5:58:55:87:78:da:a1:b2:92:
         e8:16:c1:a3:82:36:37:ff:9e:d2:fe:17:f7:a9:c1:53:7b:74:
         e8:47:ce:8f:62:1a:4b:06:a5:e6:a5:56:30:10:8c:16:05:ba:
         7d:0f:08:d3:e5:95:69:cc:69:9c:79:8c:ac:ca:76:7f:c1:f1:
         fc:84:ab:bd:90:b0:a6:41:77:2c:15:1b:a6:d1:62:a3:3c:3c:
         e5:91:55:8c:e4:f1:cc:8b:20:95:eb:65:bd:aa:82:a5:6f:7f:
         2a:ef:0f:d8:7e:0b:f2:8f:35:64:19:65:da:3c:5d:db:2c:9e:
         27:d9:e8:17:d4:ec:67:f9:f9:76:85:a5:4e:9e:28:e9:11:0c:
         b7:a0:a5:22:88:91:bc:39:86:cf:c1:d6:81:69:cf:f8:c6:53:
         e5:8e:33:52:4e:58:df:b3:2c:2f:4c:54:ed:95:aa:67:75:cf:
         6d:9f:11:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 05:14:13 2026 by rpki-client