Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a1e9a3f5-d979-3b8b-ad78-268a9027f9cd.roa
File:                     a1e9a3f5-d979-3b8b-ad78-268a9027f9cd.roa (raw, json)
Hash identifier:          OpSRmX7BUkOxNn74i8ReQDOp95QtRSigh436LsEMUTo=
Subject key identifier:   F2:4A:64:B4:49:DF:5E:9F:0D:4F:08:11:0E:B4:CB:F1:B9:BC:9C:87
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584EF77909997FC890CEEDB6ED80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a1e9a3f5-d979-3b8b-ad78-268a9027f9cd.roa
Signing time:             Wed 26 Aug 2026 16:17:03 +0000
ROA not before:           Wed 26 Aug 2026 16:17:03 +0000
ROA not after:            Tue 24 Nov 2026 17:17:03 +0000
asID:                     401152
IP address blocks:        23.26.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:79:09:99:7f:c8:90:ce:ed:b6:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 26 16:17:03 2026 GMT
            Not After : Nov 24 17:17:03 2026 GMT
        Subject: CN=470fdaed-29f0-4945-9fe2-4f9ea108b656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:90:39:28:a4:c3:39:11:e1:7e:5e:5a:12:57:
                    da:85:01:85:39:00:d3:1e:59:72:3b:b6:aa:db:3e:
                    06:45:8f:db:7f:3e:85:e7:56:aa:c9:09:43:8a:b3:
                    9e:03:85:4f:25:62:bb:ef:0e:f3:f8:a5:b9:49:bc:
                    93:16:41:ab:3d:92:91:fe:42:46:20:32:16:a6:0d:
                    39:38:dd:63:18:40:08:d9:11:e1:13:bf:ca:ea:34:
                    0a:ec:b8:17:60:17:0d:fd:d0:1a:68:79:5e:d5:1d:
                    30:89:ab:64:79:98:cd:f1:7a:96:15:07:db:83:94:
                    6f:96:db:f8:73:2e:43:84:80:63:ab:e7:ac:51:26:
                    41:fa:0d:f1:da:ee:bd:41:b7:fb:a0:11:ae:a5:0f:
                    fe:dd:5c:90:ba:eb:37:a3:af:d4:9a:dd:b7:4b:62:
                    d1:3e:67:80:7e:63:69:c7:50:ea:b2:a9:cc:a5:d8:
                    e5:62:d2:f3:03:32:3c:05:e8:e0:09:4b:e6:77:a5:
                    44:c6:49:11:6e:94:93:87:36:0a:19:eb:b2:14:00:
                    4a:68:6a:8a:3b:db:8a:65:68:b7:62:4d:31:bc:99:
                    0a:dd:c3:b6:5f:ef:73:35:36:ec:64:12:a1:0b:43:
                    a2:33:46:6f:0b:ba:2d:dc:11:83:d5:ed:ad:9c:b3:
                    1f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:4A:64:B4:49:DF:5E:9F:0D:4F:08:11:0E:B4:CB:F1:B9:BC:9C:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a1e9a3f5-d979-3b8b-ad78-268a9027f9cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:91:ea:8c:96:5f:28:fc:5d:24:ba:20:84:85:8f:f9:15:24:
         eb:b4:da:82:70:f2:c0:82:29:aa:91:6e:b6:2b:47:ee:2a:83:
         a8:17:c6:aa:ec:25:d6:01:b9:2b:94:11:2d:8e:a1:36:29:51:
         15:94:8b:ca:7c:29:93:76:de:8b:51:45:db:bb:89:00:9c:8b:
         26:a3:e8:6e:cf:42:44:45:c0:a9:c7:e4:cc:5e:c9:d0:63:73:
         f2:56:7b:4f:c2:b1:af:b6:76:3b:67:12:ef:2a:38:3f:ff:7f:
         1a:1f:c8:fe:31:54:50:74:bc:2e:52:7c:e9:c5:1e:9f:a3:14:
         9d:09:97:d9:1b:96:8b:1d:e5:d6:08:f2:25:48:7a:df:7d:67:
         b6:54:0c:eb:3d:1d:cb:7e:9a:46:f5:35:40:73:f6:bf:96:94:
         96:64:4f:94:59:ab:b1:25:16:48:56:83:8c:d6:3b:64:b6:67:
         f7:02:4c:4e:fe:bf:7b:28:fa:34:65:8b:37:9d:16:a8:08:4c:
         03:3e:a3:29:dd:87:a9:63:cd:02:f1:aa:ce:4c:f6:91:20:22:
         02:90:0d:f7:bb:1f:cc:1a:73:8b:b9:ef:80:ac:68:58:13:ae:
         80:17:dd:e8:94:69:00:62:5f:5a:8c:3a:cb:47:4f:22:9f:d8:
         78:10:36:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73eQmZf8iQzu227YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDgyNjE2MTcwM1oXDTI2MTEyNDE3MTcwM1owLzEtMCsGA1UEAxMk
NDcwZmRhZWQtMjlmMC00OTQ1LTlmZTItNGY5ZWExMDhiNjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZA5KKTDORHhfl5aElfahQGFOQDTHllyO7aq
2z4GRY/bfz6F51aqyQlDirOeA4VPJWK77w7z+KW5SbyTFkGrPZKR/kJGIDIWpg05
ON1jGEAI2RHhE7/K6jQK7LgXYBcN/dAaaHle1R0wiatkeZjN8XqWFQfbg5Rvltv4
cy5DhIBjq+esUSZB+g3x2u69Qbf7oBGupQ/+3VyQuus3o6/Umt23S2LRPmeAfmNp
x1DqsqnMpdjlYtLzAzI8BejgCUvmd6VExkkRbpSThzYKGeuyFABKaGqKO9uKZWi3
Yk0xvJkK3cO2X+9zNTbsZBKhC0OiM0ZvC7ot3BGD1e2tnLMfywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPJKZLRJ316fDU8IEQ60y/G5vJyHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYTFlOWEzZjUtZDk3OS0z
YjhiLWFkNzgtMjY4YTkwMjdmOWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxqbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFiR6oyWXyj8XSS6IISFj/kVJOu02oJw8sCCKaqRbrYrR+4qg6gXxqrs
JdYBuSuUES2OoTYpURWUi8p8KZN23otRRdu7iQCciyaj6G7PQkRFwKnH5MxeydBj
c/JWe0/Csa+2djtnEu8qOD//fxofyP4xVFB0vC5SfOnFHp+jFJ0Jl9kblosd5dYI
8iVIet99Z7ZUDOs9Hct+mkb1NUBz9r+WlJZkT5RZq7ElFkhWg4zWO2S2Z/cCTE7+
v3so+jRlizedFqgITAM+oyndh6ljzQLxqs5M9pEgIgKQDfe7H8wac4u574CsaFgT
roAX3eiUaQBiX1qMOstHTyKf2HgQNuw=
-----END CERTIFICATE-----
Generated at Thu Aug 27 18:16:03 2026 by rpki-client