Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ca2e5d46-2bb0-3d86-953a-7e668134c319.roa
File:                     ca2e5d46-2bb0-3d86-953a-7e668134c319.roa (raw, json)
Hash identifier:          dobNwU3uqoXxFFYKTbLQHbivCduCKo3yaAg3/REDYuM=
Subject key identifier:   FA:10:60:FF:D6:C0:FC:44:0E:56:A8:B7:24:8B:E1:48:21:98:FF:85
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D5D47B16B669696BC5753BEC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ca2e5d46-2bb0-3d86-953a-7e668134c319.roa
Signing time:             Wed 01 Apr 2026 17:56:12 +0000
ROA not before:           Wed 01 Apr 2026 17:56:12 +0000
ROA not after:            Tue 30 Jun 2026 17:56:12 +0000
asID:                     401152
IP address blocks:        23.26.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5d:47:b1:6b:66:96:96:bc:57:53:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  1 17:56:12 2026 GMT
            Not After : Jun 30 17:56:12 2026 GMT
        Subject: CN=64f7954b-a6c1-4b11-8fa0-d438c256e075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b7:e8:20:54:74:03:f6:93:16:fa:19:41:f1:
                    d6:b0:83:54:0f:5f:f3:b9:8f:8f:19:09:e0:4c:34:
                    1a:e6:e5:bc:ae:f7:84:70:d9:a8:9d:c4:38:b3:35:
                    63:21:70:1a:c1:c9:c5:8b:34:97:f5:c9:bc:3a:a4:
                    c6:59:99:2a:d2:ff:68:97:68:7b:71:94:ea:63:b0:
                    c5:a2:96:f5:8f:8a:ee:ae:9c:46:fb:3f:c4:e0:95:
                    cc:da:c5:d2:4e:85:92:52:99:05:a3:6a:fe:df:7b:
                    ca:91:a5:a4:d0:25:f2:ce:6e:ad:ee:1f:e0:49:3a:
                    75:78:0c:ff:6c:59:9f:37:51:a2:f9:2b:22:7d:c4:
                    42:10:7d:d3:5c:c5:2a:05:bf:c9:33:2a:ec:59:31:
                    f0:2f:18:da:51:d1:b1:0d:e9:f9:d9:76:1b:c6:e6:
                    b9:01:57:d5:fd:10:ad:24:94:8f:53:79:2b:92:4d:
                    04:b5:8f:b8:e8:fe:b7:9c:54:ea:bc:4c:56:5f:62:
                    aa:df:da:7f:42:b6:7f:19:08:5b:61:9a:7d:ea:d8:
                    b4:9b:f0:a5:ee:80:05:a0:3e:f1:87:c9:96:86:56:
                    2f:b2:ed:54:72:23:4b:e2:16:1a:10:e4:8b:aa:56:
                    61:df:aa:a5:03:30:da:e5:e4:83:8e:f1:f6:21:44:
                    ae:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:10:60:FF:D6:C0:FC:44:0E:56:A8:B7:24:8B:E1:48:21:98:FF:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ca2e5d46-2bb0-3d86-953a-7e668134c319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:ea:3b:c3:2d:9d:3d:a8:bc:74:9a:8e:31:49:e8:d9:eb:1b:
         02:bf:2d:d9:0b:68:b5:43:b5:10:47:30:b1:78:97:65:f6:41:
         b8:94:1b:17:b6:48:bc:6e:90:1e:c1:f0:37:d2:ce:62:5a:29:
         3d:de:49:db:fd:fe:b9:76:3a:6a:88:46:da:19:de:9d:f8:a4:
         dd:0c:f6:4a:94:f5:52:8e:c5:ca:cf:f6:e9:81:5d:ce:4e:ac:
         2b:01:1a:21:01:6d:68:3d:82:e2:ca:07:56:26:53:6f:f5:0b:
         df:17:19:1e:e7:ca:e2:77:52:1a:93:73:b8:8f:df:5b:4b:58:
         4c:4f:93:3d:4a:cf:55:f3:2d:22:50:d5:c9:a8:9c:cd:ba:94:
         6e:77:85:50:6c:93:f1:dc:53:9e:50:a5:6b:1e:c6:5b:b2:d8:
         47:65:44:04:a0:4f:d5:32:4f:77:cd:27:65:4b:b8:73:88:68:
         cc:60:b7:5c:da:85:9f:3f:52:c6:9c:89:c9:8f:61:df:b1:35:
         50:fd:3b:40:9f:10:f1:1f:b7:52:ff:aa:0e:0b:0d:34:c1:19:
         62:4e:61:f5:ae:fd:e8:60:81:df:d2:bf:c9:39:9a:83:66:ee:
         f3:d6:f8:58:f5:5c:36:69:81:65:c1:2a:c3:13:87:c2:15:d9:
         9c:2a:ee:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 2 22:32:43 2026 by rpki-client