Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ae631686-9993-3c63-a8bf-d155fab81146.roa
File:                     ae631686-9993-3c63-a8bf-d155fab81146.roa (raw, json)
Hash identifier:          SEtLBbIBjnDMD4WmfJ7q3xltHj5ILQeZm/ZjDP/Jv64=
Subject key identifier:   BA:5D:AD:2A:CC:24:BB:06:CC:10:FD:02:C9:17:08:79:BA:F7:65:10
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D366F583B30A5BB3CCE578460
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ae631686-9993-3c63-a8bf-d155fab81146.roa
Signing time:             Wed 18 Mar 2026 19:59:34 +0000
ROA not before:           Wed 18 Mar 2026 19:59:34 +0000
ROA not after:            Tue 16 Jun 2026 19:59:34 +0000
asID:                     401152
IP address blocks:        23.26.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:36:6f:58:3b:30:a5:bb:3c:ce:57:84:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 18 19:59:34 2026 GMT
            Not After : Jun 16 19:59:34 2026 GMT
        Subject: CN=65d3a0c9-98b6-4d9a-9bdf-d03ee375b204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f3:14:d3:d3:31:a2:c9:f1:19:d9:b1:a4:6c:
                    3a:dd:bf:2f:6a:c1:82:31:57:b5:49:c5:10:f3:75:
                    ed:15:f2:4b:04:44:0f:b1:0a:ce:ab:0e:b6:50:38:
                    b0:10:33:6c:0c:ca:df:2f:ef:d7:c7:3e:fb:2c:19:
                    de:36:6a:c1:c1:a3:9f:41:77:48:a2:7d:a6:82:e8:
                    16:e3:88:d5:17:58:48:b9:31:a9:b6:86:58:4a:93:
                    45:9e:a6:4d:b4:84:a4:55:4e:37:25:74:04:69:39:
                    16:c2:15:24:01:1c:d5:e4:47:19:12:2e:c1:43:1a:
                    9d:da:a7:65:5c:e0:7a:cd:33:25:05:31:87:63:38:
                    12:af:b8:c4:09:68:61:8d:1e:b0:ad:a0:72:a2:7c:
                    28:7f:a3:35:de:e5:f5:0b:f9:ed:5c:58:53:89:fe:
                    9c:50:55:15:92:62:02:fc:6a:ca:e5:16:5c:4d:e7:
                    a1:4c:7f:a3:ad:7d:61:c4:e8:21:ff:4c:16:9b:9c:
                    f2:52:ec:eb:63:34:2b:9c:33:1f:16:63:57:4d:6e:
                    d6:44:93:c4:8c:67:7c:06:c9:88:0e:61:8c:f9:8d:
                    f4:65:c2:dc:bb:f4:a8:d1:40:6f:b9:0a:f8:9c:73:
                    b3:9d:db:32:eb:89:b3:f1:a2:05:94:18:a4:c3:05:
                    2a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5D:AD:2A:CC:24:BB:06:CC:10:FD:02:C9:17:08:79:BA:F7:65:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ae631686-9993-3c63-a8bf-d155fab81146.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:e4:2a:53:f0:e0:c6:ba:e4:e4:ca:1c:16:d0:fb:2e:04:a4:
         98:8c:36:a5:47:7f:6c:b3:2c:50:46:8f:b8:c2:c7:6d:74:7e:
         c3:20:1b:90:c7:30:4a:d7:7f:b5:98:5f:ae:93:2d:ad:ae:04:
         bf:ea:8e:73:2a:57:fc:93:02:ef:42:36:47:59:7f:ef:6d:b1:
         a4:fc:bb:b4:d2:30:2c:0f:6c:66:fa:e2:5c:c3:85:d0:18:b7:
         f7:ba:82:b7:dc:df:a8:5b:67:a9:7a:63:37:f6:43:8a:a8:d6:
         95:73:5c:0d:8b:5c:df:71:90:c6:91:97:f9:c9:35:e2:a4:d1:
         04:c8:56:7f:6c:77:7c:f5:60:32:1b:e1:95:e3:2b:11:3d:08:
         4c:c4:00:c2:e7:80:90:52:b8:07:c7:03:f5:64:35:5f:de:19:
         f5:59:57:b0:b1:84:21:02:4f:48:9d:fc:79:76:8e:c7:78:cb:
         73:60:17:31:8f:28:93:bf:2c:91:a8:23:00:1f:c8:c4:83:4c:
         ac:c4:cd:96:c2:b2:01:6c:14:90:b8:75:37:fd:44:f7:b0:82:
         3d:e0:6b:13:00:46:52:09:c9:ac:b6:a2:61:c7:06:36:a7:d3:
         fd:37:94:48:ea:7d:1e:01:74:57:c8:65:66:14:5b:57:a5:18:
         71:b4:a7:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE02b1g7MKW7PM5XhGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDMxODE5NTkzNFoXDTI2MDYxNjE5NTkzNFowLzEtMCsGA1UEAxMk
NjVkM2EwYzktOThiNi00ZDlhLTliZGYtZDAzZWUzNzViMjA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/MU09MxosnxGdmxpGw63b8vasGCMVe1ScUQ
83XtFfJLBEQPsQrOqw62UDiwEDNsDMrfL+/Xxz77LBneNmrBwaOfQXdIon2mgugW
44jVF1hIuTGptoZYSpNFnqZNtISkVU43JXQEaTkWwhUkARzV5EcZEi7BQxqd2qdl
XOB6zTMlBTGHYzgSr7jECWhhjR6wraByonwof6M13uX1C/ntXFhTif6cUFUVkmIC
/GrK5RZcTeehTH+jrX1hxOgh/0wWm5zyUuzrYzQrnDMfFmNXTW7WRJPEjGd8BsmI
DmGM+Y30ZcLcu/So0UBvuQr4nHOzndsy64mz8aIFlBikwwUqYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLpdrSrMJLsGzBD9AskXCHm692UQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYWU2MzE2ODYtOTk5My0z
YzYzLWE4YmYtZDE1NWZhYjgxMTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxrwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHPkKlPw4Ma65OTKHBbQ+y4EpJiMNqVHf2yzLFBGj7jCx210fsMgG5DH
MErXf7WYX66TLa2uBL/qjnMqV/yTAu9CNkdZf+9tsaT8u7TSMCwPbGb64lzDhdAY
t/e6grfc36hbZ6l6Yzf2Q4qo1pVzXA2LXN9xkMaRl/nJNeKk0QTIVn9sd3z1YDIb
4ZXjKxE9CEzEAMLngJBSuAfHA/VkNV/eGfVZV7CxhCECT0id/Hl2jsd4y3NgFzGP
KJO/LJGoIwAfyMSDTKzEzZbCsgFsFJC4dTf9RPewgj3gaxMARlIJyay2omHHBjan
0/03lEjqfR4BdFfIZWYUW1elGHG0p3w=
-----END CERTIFICATE-----
Generated at Thu Mar 19 14:52:58 2026 by rpki-client