Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b39d4f9b-f44d-3435-aee3-e9190e708720.roa
File:                     b39d4f9b-f44d-3435-aee3-e9190e708720.roa (raw, json)
Hash identifier:          mtmEnOpE914xDwn+NOdiM3mP/U6FiIQRGYwjec8CJcM=
Subject key identifier:   90:2F:FC:73:25:F4:24:48:AA:A3:05:7B:41:95:6D:A7:EC:85:14:44
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584BD94B0A1D829C2F6DDE136880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b39d4f9b-f44d-3435-aee3-e9190e708720.roa
Signing time:             Thu 13 Nov 2025 18:29:18 +0000
ROA not before:           Thu 13 Nov 2025 18:29:18 +0000
ROA not after:            Wed 11 Feb 2026 18:29:18 +0000
asID:                     397373
IP address blocks:        23.26.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d9:4b:0a:1d:82:9c:2f:6d:de:13:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Nov 13 18:29:18 2025 GMT
            Not After : Feb 11 18:29:18 2026 GMT
        Subject: CN=6f7a710f-952c-4dcf-96f2-3e8e93ae62be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5e:b5:ab:27:fd:64:c5:22:51:47:26:c3:26:
                    2c:63:be:41:16:ae:62:f4:ec:00:20:dd:68:6c:7b:
                    dd:62:14:b8:3a:d2:2d:e7:64:8b:d1:57:e6:eb:32:
                    f7:a7:79:f2:b6:7d:1a:b4:e8:57:1c:37:c9:9e:b6:
                    bb:43:bd:bb:9d:16:25:d6:3e:3f:5d:de:8e:6b:23:
                    9a:ad:0d:6c:b8:3e:1f:51:08:01:08:a6:62:06:93:
                    d0:7a:c6:64:15:d5:76:75:35:0c:31:c4:54:ae:af:
                    e9:27:04:0c:1c:fa:b5:84:34:cc:fe:19:51:93:82:
                    53:67:c9:74:f0:1a:44:2c:53:55:87:1a:f9:22:f9:
                    3c:bd:63:41:8f:c7:5c:53:fc:a0:57:b7:34:40:dd:
                    66:d3:a6:59:68:8b:35:2c:1d:1b:a6:bc:1d:71:5c:
                    4a:1e:f4:2d:bd:9b:be:61:a9:f8:70:2d:ca:5a:21:
                    a7:2e:bd:e2:8e:d3:1d:1c:d9:77:a3:fa:cf:db:e7:
                    3d:95:22:25:8e:b5:b5:4e:08:7c:f6:5b:5d:d8:22:
                    64:59:4e:02:e3:bc:dd:a1:02:b9:1e:6f:0f:ee:cd:
                    30:0d:b2:82:64:c7:f7:9c:c5:90:ad:3c:1b:ac:d4:
                    5a:b6:f7:bc:2a:af:66:d8:00:eb:76:3b:d3:65:70:
                    d0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2F:FC:73:25:F4:24:48:AA:A3:05:7B:41:95:6D:A7:EC:85:14:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b39d4f9b-f44d-3435-aee3-e9190e708720.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:c3:a7:ee:a5:3c:7d:81:98:3a:70:2d:1c:91:52:b9:32:52:
         34:e4:1b:c3:29:7e:c0:5a:98:b8:60:e4:71:43:fc:dd:dc:3d:
         2a:5d:02:91:c7:60:d8:8e:7d:40:68:a6:90:c1:88:2e:47:69:
         65:c5:ac:4c:5d:a7:71:59:85:ab:86:0c:b6:38:64:4f:8a:b0:
         3c:ae:44:2c:a4:77:56:0d:31:39:c3:b7:d4:f4:b8:2a:32:63:
         b6:fc:e4:2b:a9:62:d8:b9:ee:31:a1:90:17:ea:08:5e:65:a4:
         0f:86:49:b7:59:d6:1f:91:07:e9:d3:a9:f4:67:a8:5e:f1:6e:
         07:c4:1a:9d:89:02:3b:62:b2:4d:14:ff:47:3e:3e:36:cf:ee:
         e0:ab:d5:5b:27:37:f8:4d:08:3f:7a:21:be:f9:ab:e3:69:ab:
         34:70:a4:4d:44:9c:92:2e:a4:aa:e8:71:d0:c7:51:5e:c4:4a:
         51:e5:e2:5e:4e:a0:e9:28:9b:a0:44:0b:87:d5:4b:42:9a:d3:
         d9:2f:d9:36:56:df:ac:a2:06:a7:2f:47:4e:b1:1e:08:bb:59:
         90:46:21:a2:1f:f9:cf:db:f2:e0:e8:3f:f9:a2:24:5a:2f:d0:
         77:f7:b0:33:5d:59:c4:69:ce:a2:2e:21:95:af:6f:50:8e:d2:
         1c:f3:89:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvZSwodgpwvbd4TaIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MTExMzE4MjkxOFoXDTI2MDIxMTE4MjkxOFowLzEtMCsGA1UEAxMk
NmY3YTcxMGYtOTUyYy00ZGNmLTk2ZjItM2U4ZTkzYWU2MmJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV61qyf9ZMUiUUcmwyYsY75BFq5i9OwAIN1o
bHvdYhS4OtIt52SL0Vfm6zL3p3nytn0atOhXHDfJnra7Q727nRYl1j4/Xd6OayOa
rQ1suD4fUQgBCKZiBpPQesZkFdV2dTUMMcRUrq/pJwQMHPq1hDTM/hlRk4JTZ8l0
8BpELFNVhxr5Ivk8vWNBj8dcU/ygV7c0QN1m06ZZaIs1LB0bprwdcVxKHvQtvZu+
Yan4cC3KWiGnLr3ijtMdHNl3o/rP2+c9lSIljrW1Tgh89ltd2CJkWU4C47zdoQK5
Hm8P7s0wDbKCZMf3nMWQrTwbrNRatve8Kq9m2ADrdjvTZXDQ+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJAv/HMl9CRIqqMFe0GVbafshRREMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYjM5ZDRmOWItZjQ0ZC0z
NDM1LWFlZTMtZTkxOTBlNzA4NzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxpwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACzDp+6lPH2BmDpwLRyRUrkyUjTkG8MpfsBamLhg5HFD/N3cPSpdApHH
YNiOfUBoppDBiC5HaWXFrExdp3FZhauGDLY4ZE+KsDyuRCykd1YNMTnDt9T0uCoy
Y7b85CupYti57jGhkBfqCF5lpA+GSbdZ1h+RB+nTqfRnqF7xbgfEGp2JAjtisk0U
/0c+PjbP7uCr1VsnN/hNCD96Ib75q+NpqzRwpE1EnJIupKrocdDHUV7ESlHl4l5O
oOkom6BEC4fVS0Ka09kv2TZW36yiBqcvR06xHgi7WZBGIaIf+c/b8uDoP/miJFov
0Hf3sDNdWcRpzqIuIZWvb1CO0hzziZc=
-----END CERTIFICATE-----
Generated at Sun Nov 16 13:59:36 2025 by rpki-client