Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/96462409-4025-3fbf-baa5-4f299d5f43f4.roa
File:                     96462409-4025-3fbf-baa5-4f299d5f43f4.roa (raw, json)
Hash identifier:          9WSERGI1iRx+nGxOal3kM3GK2bp8myB3Xt2/lt1Hh+4=
Subject key identifier:   C4:CC:4C:79:B7:D1:8F:B4:EE:BC:0C:3D:FA:F4:9C:CA:23:69:C4:23
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D6DE3F6E1214EA089F85CD5C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/96462409-4025-3fbf-baa5-4f299d5f43f4.roa
Signing time:             Tue 07 Apr 2026 16:44:00 +0000
ROA not before:           Tue 07 Apr 2026 16:44:00 +0000
ROA not after:            Mon 06 Jul 2026 16:44:00 +0000
asID:                     49581
IP address blocks:        23.26.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:e3:f6:e1:21:4e:a0:89:f8:5c:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  7 16:44:00 2026 GMT
            Not After : Jul  6 16:44:00 2026 GMT
        Subject: CN=b8d7658b-ea89-467d-919a-fc1873072616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ff:9c:6c:19:32:a3:a6:d3:88:17:0f:4d:0b:
                    0b:1d:e4:94:95:b6:c1:e6:78:d7:52:7e:95:3e:7d:
                    75:6b:a0:4f:44:de:cc:fd:3f:6b:85:68:cd:cd:cd:
                    90:62:f6:9b:83:22:20:b1:4d:24:75:cf:17:29:4a:
                    65:0d:c5:bf:02:f1:93:5c:cf:5b:dc:d7:75:5a:51:
                    2b:8a:1f:cf:88:bd:b8:92:2e:1c:f9:6f:c8:54:ab:
                    ea:8e:50:61:cf:6f:7d:02:ed:04:63:45:29:44:0e:
                    e8:7b:90:58:fc:7f:74:45:4d:92:75:4f:3d:52:41:
                    43:39:2f:d8:1c:1b:16:a2:49:e3:06:e9:a4:64:8c:
                    b9:42:3b:0d:c4:1a:21:88:da:b6:32:94:e4:4f:43:
                    03:eb:18:e5:94:cb:b9:36:b2:c6:c2:16:67:61:ea:
                    53:6e:3d:5f:c4:e2:69:34:94:66:2a:f3:80:b4:4b:
                    52:18:ec:46:6b:83:38:fb:24:47:8d:1f:a7:30:f8:
                    a5:3c:61:a1:c1:e3:0f:f0:51:e8:18:cd:bc:bb:b6:
                    0d:e8:d2:c4:8b:14:e9:d3:82:28:7b:c7:44:27:da:
                    6c:c0:c4:d5:00:78:ea:43:7b:a8:f7:74:cf:66:ed:
                    a0:4d:80:71:25:0b:20:94:1a:87:f1:1d:f7:28:b0:
                    07:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CC:4C:79:B7:D1:8F:B4:EE:BC:0C:3D:FA:F4:9C:CA:23:69:C4:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/96462409-4025-3fbf-baa5-4f299d5f43f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:1e:cf:bd:8e:8e:ba:69:95:05:ac:4e:ec:e2:8e:c9:6d:13:
         f7:df:fe:dc:a6:c2:ab:11:01:d9:4f:47:45:ee:d9:c0:6b:dd:
         81:91:8d:7e:f0:3d:37:6d:27:5f:40:c1:f5:34:2f:60:c4:83:
         fc:5e:80:92:b5:da:22:30:cb:65:02:1c:e3:40:58:38:f4:60:
         a8:80:0d:6e:fc:65:0d:a9:a5:fe:33:81:0d:11:6c:75:b2:81:
         e3:ae:e6:be:de:dd:ed:58:35:66:a9:ac:20:bd:9d:5d:c3:ad:
         67:a9:da:bc:4b:cc:ab:ef:22:4a:3e:d6:2b:29:e3:aa:d0:46:
         41:f4:89:79:67:ac:49:01:9a:af:8a:41:fb:30:b2:27:b4:a0:
         12:33:e3:f7:57:63:fc:26:81:47:79:3f:7b:1c:80:ff:37:40:
         3a:53:62:70:49:67:b6:f5:b9:d5:6d:a4:54:d2:cf:d5:2b:c6:
         54:5c:03:88:f8:3b:10:8d:7e:5c:c5:06:f0:98:b4:01:df:14:
         ca:bc:64:b6:4f:03:2b:e2:2a:13:27:ae:fa:bf:b7:83:f5:6f:
         d0:2e:e6:23:ba:9b:49:cb:62:77:8c:eb:94:2e:74:77:cf:15:
         1b:f6:a6:b6:dc:fb:7a:a7:9f:2d:bd:ca:1b:85:20:fb:82:9f:
         41:e4:84:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 15:11:13 2026 by rpki-client