Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cc14a7fb-3e61-3f78-8173-45994f4059fe.roa
File:                     cc14a7fb-3e61-3f78-8173-45994f4059fe.roa (raw, json)
Hash identifier:          p/enyYS6Lt5sTBc7vgJvkpceEKZhsu9aAkDPgTY+Zig=
Subject key identifier:   51:46:EC:C6:DD:AB:B0:8D:93:54:71:11:F7:59:56:E1:D4:F4:A0:9A
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F6292DC87D010460DF6271800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cc14a7fb-3e61-3f78-8173-45994f4059fe.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     400725
IP address blocks:        23.26.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:dc:87:d0:10:46:0d:f6:27:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=934d3095-2e18-4b4a-927a-ecb9c5f6ea4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bb:9d:5a:cf:b1:3b:1e:c8:fe:f5:80:f9:4a:
                    46:fd:b4:1d:ff:ac:ac:62:11:04:59:5c:38:4e:ef:
                    5d:29:33:5f:35:7b:a5:fd:50:3d:74:aa:f1:c1:5f:
                    cd:ea:b3:63:7f:84:3a:1c:dc:f8:c2:c3:32:f7:a2:
                    96:a4:cd:d9:e8:bf:92:3f:99:63:94:af:5e:15:8b:
                    6f:2c:04:c3:0f:40:51:11:75:dc:c8:07:88:6d:83:
                    b6:53:1f:68:6d:c3:22:b2:b2:37:7b:e2:cb:ae:a5:
                    66:48:25:a9:c3:f3:87:c6:96:67:6d:a9:2d:a4:fd:
                    7f:b6:82:b0:2a:42:d0:13:33:ef:a7:e3:17:3a:dd:
                    d0:57:a0:b5:85:7e:09:96:20:fe:b1:c0:b5:63:64:
                    67:e6:bc:e2:5d:37:9e:eb:a3:3b:53:60:1e:a3:3f:
                    77:e1:8c:39:17:ae:4f:18:9d:6e:17:08:b5:45:4c:
                    1e:fb:57:9c:78:4a:d3:f8:4a:14:c0:2f:0c:98:68:
                    98:b2:40:25:4b:08:3e:71:c7:84:ff:ec:c1:5f:4e:
                    89:c6:b5:5f:28:d7:f4:bb:96:34:a6:2a:b4:03:4f:
                    17:a8:6d:fa:8b:f7:0c:d5:14:af:49:b4:38:df:2e:
                    29:92:5d:3c:d4:d4:0d:ea:13:e7:f8:52:1e:de:c2:
                    d0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:46:EC:C6:DD:AB:B0:8D:93:54:71:11:F7:59:56:E1:D4:F4:A0:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cc14a7fb-3e61-3f78-8173-45994f4059fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:6f:95:b6:04:7a:bf:12:75:39:4e:a6:9b:11:dd:e2:46:55:
         78:44:2f:c3:a4:63:ab:bd:41:b6:41:4d:42:33:6d:f9:b2:fd:
         33:a9:30:9e:b9:f3:5a:89:d8:40:c3:39:77:eb:c3:b4:6d:88:
         56:6f:86:4d:7a:ca:69:bc:0e:52:2c:40:76:7f:ad:1e:bf:3c:
         b9:96:ed:6a:ba:84:1b:32:dc:6c:6b:7e:31:30:73:1e:9e:45:
         3e:f1:41:42:e7:8c:21:ea:3b:bc:e1:13:a8:b4:1b:69:1c:30:
         22:f6:fc:85:d6:1f:e7:66:7c:4a:bc:80:7f:8c:a1:b6:f9:11:
         41:27:22:e9:6f:db:50:c7:6e:40:51:79:3a:80:74:85:13:62:
         b8:c5:a3:8f:91:68:9f:71:0b:0d:0b:be:eb:c0:08:6d:c5:cb:
         52:52:ee:60:d0:79:46:da:81:19:b8:96:81:d6:9e:5e:b0:8c:
         f0:3f:e5:48:94:e5:fe:fc:ca:e5:3a:b6:e0:50:af:d7:c7:9f:
         39:64:49:a4:5e:78:fd:ac:6e:b2:7f:84:97:75:ce:39:f2:22:
         29:c8:90:d6:99:fe:d6:91:ba:97:ba:84:b3:7d:e8:c0:c5:6f:
         2c:2b:a3:cb:f2:94:cf:85:f5:f6:47:1f:82:4a:ef:14:c8:3b:
         43:ce:73:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 17:02:37 2026 by rpki-client