Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9d8394fa-5916-3e53-a3ad-e2b1c203a10f.roa
File:                     9d8394fa-5916-3e53-a3ad-e2b1c203a10f.roa (raw, json)
Hash identifier:          vgrpDi/U3JGUL2f03rx4RM9B9feGw4EAOPAaRw30MW8=
Subject key identifier:   B3:10:85:50:02:25:26:1D:B9:FD:D1:1E:05:4D:06:48:DC:DE:F1:32
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584A01518DDF9B8EFF1494B87C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9d8394fa-5916-3e53-a3ad-e2b1c203a10f.roa
Signing time:             Wed 28 May 2025 17:00:54 +0000
ROA not before:           Wed 28 May 2025 17:00:54 +0000
ROA not after:            Tue 26 Aug 2025 17:00:54 +0000
asID:                     401152
IP address blocks:        23.26.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:01:51:8d:df:9b:8e:ff:14:94:b8:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 28 17:00:54 2025 GMT
            Not After : Aug 26 17:00:54 2025 GMT
        Subject: CN=726b404d-4ac7-4eda-b23f-b684171cff23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:10:02:fb:19:e8:1d:45:48:a6:8e:fa:6d:aa:
                    14:3e:02:84:52:12:74:87:24:fb:6c:fb:15:6a:6e:
                    12:4b:e5:e3:35:7e:5d:47:e9:4e:f8:b2:c3:e3:08:
                    65:91:fc:01:26:5b:45:ba:f3:ce:9c:fd:38:01:3d:
                    95:9d:db:35:43:d1:c6:c5:ee:e2:ad:4c:b0:dd:32:
                    c2:3d:68:d9:95:c3:5d:18:bb:06:cc:43:a2:3e:ab:
                    3d:a3:71:ee:b1:01:52:ec:54:22:10:8a:fd:9b:d2:
                    35:ab:1e:3a:80:58:50:27:30:ae:2e:ac:ba:37:3a:
                    3c:50:7d:aa:e6:12:c2:36:88:20:9e:32:a7:05:4e:
                    68:13:7e:c1:21:b1:b6:8a:a0:be:8e:79:c5:c5:01:
                    59:47:f6:83:8d:c1:f6:a6:3f:cd:1a:fe:55:2a:7a:
                    9e:14:d5:9a:59:36:ba:61:f9:e3:7e:99:a4:79:65:
                    66:0a:ff:bc:5d:3c:e1:14:1e:17:2e:0e:7f:08:62:
                    08:fd:cb:64:07:83:38:5a:56:42:6f:cc:0a:f9:a3:
                    4c:0d:96:fb:d2:04:99:c5:3c:f1:b4:85:f3:e5:96:
                    e5:87:3a:6a:67:52:2a:da:c2:86:d2:9e:98:ac:56:
                    e2:c5:f6:16:e3:94:c5:60:e5:a1:e7:e0:6f:a8:be:
                    dc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:10:85:50:02:25:26:1D:B9:FD:D1:1E:05:4D:06:48:DC:DE:F1:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9d8394fa-5916-3e53-a3ad-e2b1c203a10f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:bb:67:4b:98:e6:5d:e3:2a:ef:ce:d0:43:be:b9:b9:2f:3a:
         3f:fd:53:6e:75:d3:ef:62:08:d0:c8:c2:ac:06:bd:e1:5b:85:
         3c:92:ae:c0:c2:d3:d3:cd:dd:bd:16:a4:7e:49:78:d6:85:0b:
         78:bd:84:df:9a:f9:b1:c6:29:b7:21:3f:91:4e:50:81:a1:6d:
         e9:29:56:24:a8:1a:ae:e9:74:af:a8:30:20:fc:88:38:59:60:
         f6:5d:eb:a4:4f:37:04:c3:ce:4f:af:53:52:eb:bf:99:7e:11:
         93:33:23:24:b1:31:fb:82:dc:d9:be:fc:16:51:b3:cf:ed:26:
         07:75:02:9e:ca:f0:fe:30:6b:71:cd:ff:74:80:da:fe:5b:db:
         e4:1c:f2:00:ed:eb:0a:56:49:6a:76:50:b5:f3:ea:d4:8e:39:
         2a:82:2d:f7:40:da:bd:a6:94:8e:70:78:d8:f1:55:a0:1a:da:
         ab:8f:63:aa:68:bc:47:4a:8e:5a:a7:f6:bd:89:d8:5b:ee:38:
         51:4f:41:e3:3a:eb:fe:8c:6f:23:90:dc:23:1b:d1:a8:03:e5:
         a7:7d:06:81:5a:4d:98:fa:e7:b2:6d:8c:03:3b:de:c2:f7:59:
         6d:48:a5:9a:7a:c0:14:45:22:51:3a:b4:34:55:a4:72:f3:9b:
         94:d6:b1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:20:44 2025 by rpki-client