Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c02c67ef-0442-39b6-b4e2-4797b0a38c5d.roa
File:                     c02c67ef-0442-39b6-b4e2-4797b0a38c5d.roa (raw, json)
Hash identifier:          xjWNZ+DRLmHQXOqXdvnqAAbgoWYv3FcH7vaP0V/Z6DU=
Subject key identifier:   72:C8:FE:AF:11:55:80:FB:57:BE:A4:DA:FC:13:8F:BE:07:43:6F:28
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584E0435E4BC606DAC18EDB6FB20
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c02c67ef-0442-39b6-b4e2-4797b0a38c5d.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     197450
IP address blocks:        23.26.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:e4:bc:60:6d:ac:18:ed:b6:fb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=3b652ef7-e839-42a2-9c8f-19d5eb00217d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:79:ff:df:7b:05:a5:40:5a:e7:84:06:ba:4b:
                    8f:8a:ea:e4:95:3e:5d:07:1c:c5:f7:3e:5b:fc:09:
                    ae:e8:e1:39:5f:42:81:1a:1c:90:58:81:39:84:91:
                    a6:31:fb:6e:28:20:04:9f:d2:a8:41:08:c9:b3:9e:
                    c0:1c:40:79:f2:cc:fc:77:e1:7d:93:07:6b:87:73:
                    f8:40:95:6d:2d:3a:32:bd:18:3d:da:a6:27:4c:ad:
                    d1:d7:32:6c:5a:bc:1e:3c:47:97:b7:7e:1c:28:51:
                    79:82:40:a5:a7:90:b4:e8:1f:9e:b8:ca:20:51:8b:
                    a6:43:e9:e0:2a:93:68:fe:2e:71:98:a0:2c:c0:62:
                    f2:e0:79:10:22:d6:ab:08:19:76:79:e7:b8:d5:99:
                    f2:0e:37:a1:54:6f:5b:d4:8c:15:7c:9a:43:0d:88:
                    bf:b8:9d:93:c4:46:e6:1d:3f:75:8d:b9:b7:db:06:
                    d2:ed:3c:9a:42:d1:f0:ba:35:97:02:77:fd:32:56:
                    3c:a4:b9:f1:2a:ef:a7:a1:ab:0f:15:cf:41:5f:51:
                    c9:30:81:d4:db:48:7c:8a:0b:f4:eb:d9:47:15:76:
                    93:3b:f1:7c:c4:1a:3d:90:27:02:bc:a8:0d:be:0b:
                    b0:d3:24:70:46:dd:3b:20:91:97:8f:b4:76:68:8f:
                    bc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C8:FE:AF:11:55:80:FB:57:BE:A4:DA:FC:13:8F:BE:07:43:6F:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c02c67ef-0442-39b6-b4e2-4797b0a38c5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:21:95:91:5d:63:23:56:a0:e7:56:fd:e6:42:93:4e:3c:4c:
         26:3e:f2:96:81:bc:7e:84:e5:68:27:92:4e:98:9f:d7:03:5c:
         30:74:20:d7:45:ff:1c:10:d1:3d:23:48:70:13:db:0c:74:e8:
         2f:81:cf:04:3f:ea:e4:f2:5d:8e:50:d5:1c:e9:ff:23:26:69:
         d2:8a:f5:fc:8a:ba:cd:4f:3b:4f:45:d4:f5:18:54:ec:90:5f:
         55:0f:d5:47:7a:ba:02:dc:7d:fd:fd:41:00:99:2b:8f:ee:44:
         55:b3:65:de:79:35:da:be:13:59:ff:a0:f6:ed:a3:f5:3e:d6:
         1f:9b:f1:c4:bd:78:d2:c5:41:b9:e0:e8:f5:6a:ae:d5:a5:4c:
         1b:e3:bf:1d:51:c6:33:b5:e9:74:64:c8:f1:05:7c:2c:2f:fb:
         df:ca:52:3e:f4:2e:c5:5d:47:27:c5:ce:97:87:4b:dc:c4:4d:
         8c:4c:99:2c:aa:6d:6d:f2:f9:2e:f4:d3:74:39:4f:fb:d3:8d:
         9c:b4:17:c9:ba:5b:c5:87:56:58:44:fb:d8:bf:4d:5b:39:26:
         97:e6:39:7b:40:d1:13:8f:79:cf:79:ef:5f:3a:17:43:10:7d:
         e3:1f:68:89:68:ea:30:95:f9:2a:65:ac:c1:ee:6b:3a:88:bb:
         24:c2:a0:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENeS8YG2sGO22+yAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk
M2I2NTJlZjctZTgzOS00MmEyLTljOGYtMTlkNWViMDAyMTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3n/33sFpUBa54QGukuPiurklT5dBxzF9z5b
/Amu6OE5X0KBGhyQWIE5hJGmMftuKCAEn9KoQQjJs57AHEB58sz8d+F9kwdrh3P4
QJVtLToyvRg92qYnTK3R1zJsWrwePEeXt34cKFF5gkClp5C06B+euMogUYumQ+ng
KpNo/i5xmKAswGLy4HkQItarCBl2eee41ZnyDjehVG9b1IwVfJpDDYi/uJ2TxEbm
HT91jbm32wbS7TyaQtHwujWXAnf9MlY8pLnxKu+noasPFc9BX1HJMIHU20h8igv0
69lHFXaTO/F8xBo9kCcCvKgNvguw0yRwRt07IJGXj7R2aI+8qwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHLI/q8RVYD7V76k2vwTj74HQ28oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYzAyYzY3ZWYtMDQ0Mi0z
OWI2LWI0ZTItNDc5N2IwYTM4YzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxprMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEEhlZFdYyNWoOdW/eZCk048TCY+8paBvH6E5Wgnkk6Yn9cDXDB0INdF
/xwQ0T0jSHAT2wx06C+BzwQ/6uTyXY5Q1Rzp/yMmadKK9fyKus1PO09F1PUYVOyQ
X1UP1Ud6ugLcff39QQCZK4/uRFWzZd55Ndq+E1n/oPbto/U+1h+b8cS9eNLFQbng
6PVqrtWlTBvjvx1RxjO16XRkyPEFfCwv+9/KUj70LsVdRyfFzpeHS9zETYxMmSyq
bW3y+S7003Q5T/vTjZy0F8m6W8WHVlhE+9i/TVs5JpfmOXtA0ROPec957186F0MQ
feMfaIlo6jCV+SplrMHuazqIuyTCoAI=
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:45:42 2026 by rpki-client